last executing test programs: 3m27.732198131s ago: executing program 3 (id=10153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x10) 3m26.519428413s ago: executing program 3 (id=10165): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0x8}) ioctl(r0, 0x8b21, &(0x7f0000000040)) 3m25.342995299s ago: executing program 3 (id=10183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x78, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x45}]}]}]}, 0x78}}, 0x0) 3m24.869093228s ago: executing program 3 (id=10187): unshare(0x6020400) r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, 0x0) 3m24.153037128s ago: executing program 3 (id=10193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x2040040) 3m23.743109513s ago: executing program 3 (id=10199): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x7ff, 0x93, 0x9, 0xc0, 0xc0, 0xf, 0x23, 0x9d, 0x6, 0x9, 0x0, 0x7, 0x6}, {0x5, 0x2, 0xf9, 0x8, 0x4, 0xff, 0x3, 0x3, 0x5, 0x9, 0x7, 0xa, 0x4}, {0x3, 0xfffe, 0x6, 0x3, 0xf8, 0xf8, 0x8, 0xff, 0xa, 0x82, 0xfa, 0xa7, 0x6}], 0xffbffff7}) 3m7.848975034s ago: executing program 32 (id=10199): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x7ff, 0x93, 0x9, 0xc0, 0xc0, 0xf, 0x23, 0x9d, 0x6, 0x9, 0x0, 0x7, 0x6}, {0x5, 0x2, 0xf9, 0x8, 0x4, 0xff, 0x3, 0x3, 0x5, 0x9, 0x7, 0xa, 0x4}, {0x3, 0xfffe, 0x6, 0x3, 0xf8, 0xf8, 0x8, 0xff, 0xa, 0x82, 0xfa, 0xa7, 0x6}], 0xffbffff7}) 2m56.78420319s ago: executing program 1 (id=10337): socket$inet6(0xa, 0x80002, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a2406"], 0x0) 2m53.731640343s ago: executing program 4 (id=10344): unshare(0x22020600) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x5420, 0x0) 2m53.11391151s ago: executing program 1 (id=10345): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 2m50.071389586s ago: executing program 1 (id=10348): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xa8c, 0x4) 2m49.68137545s ago: executing program 1 (id=10350): pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 2m49.288138833s ago: executing program 4 (id=10352): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2m47.620841038s ago: executing program 4 (id=10355): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x4004, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 2m47.03371089s ago: executing program 1 (id=10357): r0 = socket$inet6(0xa, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) 2m46.812294192s ago: executing program 4 (id=10359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a3000000000540003800800024000000000040001"], 0xa8}}, 0x0) 2m46.399212728s ago: executing program 1 (id=10362): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2m43.847632774s ago: executing program 4 (id=10366): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000006b2af8ff00000000b509000000000000c38af8ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m41.272237614s ago: executing program 4 (id=10370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129500, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) 2m31.142488078s ago: executing program 33 (id=10362): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2m25.524244409s ago: executing program 34 (id=10370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129500, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) 53.165111263s ago: executing program 2 (id=10502): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x54, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xfffffffc}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x14}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4}, @TCA_FQ_FLOW_PLIMIT={0x6a, 0x2, 0xba06}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xc, 0xc89f, 0xfff75ef7, 0x0, 0x8001, 0x3}}, {0x1}}, {{0x1c, 0x1, {0x9, 0x1, 0x8, 0xfc000000, 0x0, 0x80000001, 0x4000, 0x2}}, {0x8, 0x2, [0x1, 0xba7]}}]}]}, 0xc8}}, 0x4048000) 44.787058312s ago: executing program 2 (id=10507): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 43.004552763s ago: executing program 2 (id=10508): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 41.180144862s ago: executing program 2 (id=10510): r0 = socket(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0xe64, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7ff, @empty, 0x4cae}, 0x1c) 39.594865757s ago: executing program 2 (id=10513): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 33.839235779s ago: executing program 2 (id=10520): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) 18.369296772s ago: executing program 35 (id=10520): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) 3.056913391s ago: executing program 0 (id=10559): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x81, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x7, 0x65, 0x0, 0x0, 0x84, 0x0, @rand_addr=0x64010102, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2.819806105s ago: executing program 0 (id=10560): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000340)=[{0xc, 0x801, 0x0, 0x0}, {0xa, 0x0, 0x0, 0x0}], 0x2}) 2.536656374s ago: executing program 0 (id=10561): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x201f00) 2.10980987s ago: executing program 0 (id=10562): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) 1.416613222s ago: executing program 0 (id=10563): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x4000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0000008019000004000000f6f07d092159a63300", [0x0, 0x2000000000001]}}) 0s ago: executing program 0 (id=10564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x44, r1, 0x1, 0x170bd2c, 0x8000, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x7ffffffe}]}, 0x44}}, 0x20000000) kernel console output (not intermixed with test programs): s invalid wMaxPacketSize 0 [ 663.681409][ T6208] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 663.686114][ T6208] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 663.686150][ T6208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.686174][ T6208] usb 4-1: Product: syz [ 663.686191][ T6208] usb 4-1: Manufacturer: syz [ 663.686208][ T6208] usb 4-1: SerialNumber: syz [ 663.801337][ T6208] usb 4-1: config 0 descriptor?? [ 663.802205][T24624] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 663.807306][ T6208] ati_remote 4-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 664.013380][ T5633] usb 4-1: USB disconnect, device number 98 [ 664.368409][ T5871] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 664.532496][ T5871] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 664.532534][ T5871] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 664.532564][ T5871] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 664.532611][ T5871] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 664.532637][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.599555][T24665] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 664.837955][ T5871] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 664.875036][ T5871] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input48 [ 665.028740][ T6208] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 665.175749][T24707] netlink: 'syz.1.9057': attribute type 61 has an invalid length. [ 665.178134][ T5871] usb 3-1: USB disconnect, device number 104 [ 665.178404][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 665.211441][ T6208] usb 5-1: unable to get BOS descriptor or descriptor too short [ 665.212176][ T6208] usb 5-1: not running at top speed; connect to a high speed hub [ 665.243265][ T6208] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 665.243300][ T6208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.243324][ T6208] usb 5-1: Product: syz [ 665.243341][ T6208] usb 5-1: Manufacturer: syz [ 665.243358][ T6208] usb 5-1: SerialNumber: syz [ 665.570499][ T6208] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 665.590234][ T6208] usb 5-1: unit 37 not found! [ 665.590310][ T6208] usb 5-1: unit 0 not found! [ 665.808317][ T6208] usb 5-1: USB disconnect, device number 98 [ 665.892183][T24729] __nla_validate_parse: 1 callbacks suppressed [ 665.892302][T24729] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9070'. [ 665.965944][T23078] udevd[23078]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.265883][ T37] audit: type=1326 audit(1773025068.086:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24745 comm="syz.1.9075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49aabfc799 code=0x7ffc0000 [ 666.268319][ T37] audit: type=1326 audit(1773025068.086:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24745 comm="syz.1.9075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49aabfc799 code=0x7ffc0000 [ 666.338145][ T37] audit: type=1326 audit(1773025068.156:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24745 comm="syz.1.9075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f49aabfc799 code=0x7ffc0000 [ 666.338208][ T37] audit: type=1326 audit(1773025068.156:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24745 comm="syz.1.9075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49aabfc799 code=0x7ffc0000 [ 666.338258][ T37] audit: type=1326 audit(1773025068.156:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24745 comm="syz.1.9075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49aabfc799 code=0x7ffc0000 [ 666.605627][T24757] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9081'. [ 666.750979][T24761] team0: entered promiscuous mode [ 666.751007][T24761] team_slave_0: entered promiscuous mode [ 666.751184][T24761] team_slave_1: entered promiscuous mode [ 666.752336][T24761] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.752939][T24761] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 667.021487][T24774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.164511][T24783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9092'. [ 667.164546][T24783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9092'. [ 667.201797][T24779] geneve5: entered promiscuous mode [ 667.236777][ T37] audit: type=1326 audit(1773025069.056:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24784 comm="syz.2.9093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e79cc799 code=0x7ffc0000 [ 667.236823][ T37] audit: type=1326 audit(1773025069.056:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24784 comm="syz.2.9093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e79cc799 code=0x7ffc0000 [ 667.273104][ T37] audit: type=1326 audit(1773025069.096:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24784 comm="syz.2.9093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f12e79cc799 code=0x7ffc0000 [ 667.273262][ T37] audit: type=1326 audit(1773025069.096:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24784 comm="syz.2.9093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e79cc799 code=0x7ffc0000 [ 667.711206][T24804] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 667.711241][T24804] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 667.887394][T24816] overlayfs: failed to resolve './file1': -2 [ 668.048058][ T5871] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 668.055855][T24827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9113'. [ 668.218000][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 668.220774][ T5871] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 668.220808][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.220832][ T5871] usb 4-1: config 0 has no interface number 0 [ 668.220886][ T5871] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 668.220921][ T5871] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 668.220955][ T5871] usb 4-1: config 0 interface 52 has no altsetting 0 [ 668.223860][ T5871] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 668.223894][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 668.223920][ T5871] usb 4-1: Product: syz [ 668.223938][ T5871] usb 4-1: SerialNumber: syz [ 668.325826][ T5871] usb 4-1: config 0 descriptor?? [ 668.474142][T24841] delete_channel: no stack [ 668.563555][ T5871] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input49 [ 668.810813][ T6208] usb 4-1: USB disconnect, device number 99 [ 668.810965][ C1] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 668.874720][T24844] hsr0 speed is unknown, defaulting to 1000 [ 668.997893][ T9] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 669.147884][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 669.153958][ T9] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 669.153990][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 669.154053][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 669.157004][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 669.157049][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.157071][ T9] usb 2-1: Product: syz [ 669.157088][ T9] usb 2-1: Manufacturer: syz [ 669.157104][ T9] usb 2-1: SerialNumber: syz [ 669.254759][ T9] cdc_ncm 2-1:1.0: skipping garbage [ 669.254776][ T9] cdc_ncm 2-1:1.0: skipping garbage [ 669.254786][ T9] cdc_ncm 2-1:1.0: skipping garbage [ 669.254797][ T9] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 669.254825][ T9] cdc_ncm 2-1:1.0: bind() failure [ 669.484276][ T9] usb 2-1: USB disconnect, device number 110 [ 669.687767][ T6206] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 669.859945][ T6206] usb 4-1: Using ep0 maxpacket: 16 [ 669.862480][ T6206] usb 4-1: unable to get BOS descriptor or descriptor too short [ 669.863696][ T6206] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 669.863750][ T6206] usb 4-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 669.863784][ T6206] usb 4-1: config 1 interface 0 has no altsetting 0 [ 669.866244][ T6206] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 669.866277][ T6206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.866301][ T6206] usb 4-1: Product: syz [ 669.866317][ T6206] usb 4-1: Manufacturer: syz [ 669.866342][ T6206] usb 4-1: SerialNumber: syz [ 669.968492][ T6206] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input50 [ 670.141315][ T5145] bcm5974 4-1:1.0: could not read from device [ 670.191103][ T6206] bcm5974 4-1:1.0: could not read from device [ 670.236666][ T5145] bcm5974 4-1:1.0: could not read from device [ 670.318417][ T6206] input: failed to attach handler mousedev to device input50, error: -5 [ 670.327917][ T5145] bcm5974 4-1:1.0: could not read from device [ 670.378819][ T6206] usb 4-1: USB disconnect, device number 100 [ 670.971640][T24928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9165'. [ 671.370213][T24948] netlink: 'syz.1.9175': attribute type 15 has an invalid length. [ 671.541080][T24955] mmap: syz.1.9178 (24955): VmData 37502976 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 671.563015][ T5633] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 671.734988][ T5633] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 671.735021][ T5633] usb 3-1: config 0 has no interface number 0 [ 671.735070][ T5633] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 671.735101][ T5633] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 671.777120][ T5633] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 671.777153][ T5633] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.777176][ T5633] usb 3-1: Product: syz [ 671.777191][ T5633] usb 3-1: Manufacturer: syz [ 671.777205][ T5633] usb 3-1: SerialNumber: syz [ 671.823516][ T5633] usb 3-1: config 0 descriptor?? [ 671.837710][ T5633] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 672.058932][ T5633] usb 3-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 672.275176][ T6206] usb 3-1: USB disconnect, device number 105 [ 672.286788][ T6206] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 672.288179][ T6206] cypress_m8 3-1:0.35: device disconnected [ 672.312099][T24977] bond7: entered allmulticast mode [ 672.312730][T24977] 8021q: adding VLAN 0 to HW filter on device bond7 [ 674.137201][T25072] netlink: 'syz.1.9238': attribute type 15 has an invalid length. [ 674.137224][T25072] netlink: 666 bytes leftover after parsing attributes in process `syz.1.9238'. [ 674.177928][ T6208] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 674.338194][ T6208] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.338217][ T6208] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 674.340893][ T6208] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 674.340927][ T6208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 674.340950][ T6208] usb 4-1: SerialNumber: syz [ 674.439109][ T6208] usb 4-1: 0:2 : does not exist [ 674.649815][ T5871] usb 4-1: USB disconnect, device number 101 [ 674.680788][T22828] udevd[22828]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 675.051049][T25108] delete_channel: no stack [ 676.159822][T25173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 676.205505][T25175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9286'. [ 676.457087][T25185] netlink: 'syz.3.9292': attribute type 1 has an invalid length. [ 676.539347][T25191] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 676.757146][T25201] netlink: 'syz.4.9299': attribute type 10 has an invalid length. [ 676.762625][T25201] vxcan1: entered promiscuous mode [ 676.762834][T25201] vxcan1: entered allmulticast mode [ 676.762857][T25201] team0: Device vxcan1 is of different type [ 677.135321][T25218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9306'. [ 677.212038][T25222] netlink: 'syz.3.9307': attribute type 10 has an invalid length. [ 677.212500][ T57] bond0: (slave bond_slave_0): interface is now down [ 677.212522][ T57] bond0: (slave bond_slave_1): interface is now down [ 677.228847][ T57] bond0: (slave bond_slave_0): interface is now down [ 677.228921][ T57] bond0: (slave bond_slave_1): interface is now down [ 677.245657][T25222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.253370][T15277] bond0: (slave bond_slave_0): interface is now down [ 677.253394][T15277] bond0: (slave bond_slave_1): interface is now down [ 677.278951][T15277] bond0: (slave bond_slave_0): interface is now down [ 677.278977][T15277] bond0: (slave bond_slave_1): interface is now down [ 677.297192][T15277] bond0: (slave bond_slave_0): interface is now down [ 677.297264][T15277] bond0: (slave bond_slave_1): interface is now down [ 677.318250][ T1162] bond0: (slave bond_slave_0): interface is now down [ 677.318277][ T1162] bond0: (slave bond_slave_1): interface is now down [ 677.337043][T15277] bond0: (slave bond_slave_0): interface is now down [ 677.337067][T15277] bond0: (slave bond_slave_1): interface is now down [ 677.357812][ T1162] bond0: (slave bond_slave_0): interface is now down [ 677.357884][ T1162] bond0: (slave bond_slave_1): interface is now down [ 677.376884][ T1162] bond0: (slave bond_slave_0): interface is now down [ 677.376909][ T1162] bond0: (slave bond_slave_1): interface is now down [ 677.404378][ T1162] bond0: (slave bond_slave_0): interface is now down [ 677.404416][ T1162] bond0: (slave bond_slave_1): interface is now down [ 677.426870][T15277] bond0: (slave bond_slave_0): interface is now down [ 677.426903][T15277] bond0: (slave bond_slave_1): interface is now down [ 677.447024][T15021] bond0: (slave bond_slave_0): interface is now down [ 677.447107][T15021] bond0: (slave bond_slave_1): interface is now down [ 677.447636][T25222] team0: Port device bond0 added [ 677.469144][T15277] bond0: (slave bond_slave_0): interface is now down [ 677.469217][T15277] bond0: (slave bond_slave_1): interface is now down [ 677.540077][T15277] bond0: now running without any active interface! [ 677.653534][ T37] audit: type=1326 audit(1773025079.478:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25231 comm="syz.3.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d293c799 code=0x7ffc0000 [ 677.655871][ T37] audit: type=1326 audit(1773025079.478:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25231 comm="syz.3.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d293c799 code=0x7ffc0000 [ 677.705218][ T37] audit: type=1326 audit(1773025079.528:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25231 comm="syz.3.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84d28fcfce code=0x7ffc0000 [ 677.711043][ T37] audit: type=1326 audit(1773025079.528:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25231 comm="syz.3.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f84d293da97 code=0x7ffc0000 [ 677.711192][ T37] audit: type=1326 audit(1773025079.528:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25231 comm="syz.3.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f84d293c799 code=0x7ffc0000 [ 677.711330][ T37] audit: type=1326 audit(1773025079.528:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25231 comm="syz.3.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f84d293da97 code=0x7ffc0000 [ 677.719287][ T37] audit: type=1326 audit(1773025079.548:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25231 comm="syz.3.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f84d28fcfce code=0x7ffc0000 [ 677.719516][ T37] audit: type=1326 audit(1773025079.548:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25231 comm="syz.3.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d293c799 code=0x7ffc0000 [ 677.768289][ T37] audit: type=1326 audit(1773025079.548:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25231 comm="syz.3.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d293c799 code=0x7ffc0000 [ 677.885840][T25239] batadv_slave_0: entered promiscuous mode [ 677.885870][T25239] batadv_slave_0: entered allmulticast mode [ 677.886075][T25239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9316'. [ 677.886096][T25239] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 678.096833][ T6206] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 678.224290][T25251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9322'. [ 678.249353][ T6206] usb 5-1: config 0 has an invalid interface number: 13 but max is 0 [ 678.249388][ T6206] usb 5-1: config 0 has no interface number 0 [ 678.249450][ T6206] usb 5-1: config 0 interface 13 has no altsetting 0 [ 678.252712][ T6206] usb 5-1: Dual-Role OTG device on HNP port [ 678.253104][ T6206] usb 5-1: New USB device found, idVendor=17cc, idProduct=1940, bcdDevice=1e.7a [ 678.253139][ T6206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.253174][ T6206] usb 5-1: Product: syz [ 678.253193][ T6206] usb 5-1: Manufacturer: syz [ 678.253212][ T6206] usb 5-1: SerialNumber: syz [ 678.330694][ T6206] usb 5-1: config 0 descriptor?? [ 678.591703][ T6206] snd-usb-caiaq 5-1:0.13: can't set alt interface. [ 678.591731][ T6206] usb 5-1: unable to init card! (ret=-5) [ 678.592276][ T6206] snd-usb-caiaq 5-1:0.13: probe with driver snd-usb-caiaq failed with error -5 [ 678.631276][ T6206] usb 5-1: USB disconnect, device number 99 [ 678.696318][T25267] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9329'. [ 679.316836][T25299] netlink: 268 bytes leftover after parsing attributes in process `syz.3.9345'. [ 679.516669][ T6206] usb 5-1: new low-speed USB device number 100 using dummy_hcd [ 679.674721][ T6206] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.674753][ T6206] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 679.674828][ T6206] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 679.674871][ T6206] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 679.674918][ T6206] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 679.674944][ T6206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.747643][T25297] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 679.751613][ T6206] hub 5-1:1.0: bad descriptor, ignoring hub [ 679.751655][ T6206] hub 5-1:1.0: probe with driver hub failed with error -5 [ 679.752636][ T6206] cdc_wdm 5-1:1.0: skipping garbage [ 679.752654][ T6206] cdc_wdm 5-1:1.0: skipping garbage [ 679.752755][ T6206] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 680.056942][ T6206] usb 5-1: USB disconnect, device number 100 [ 680.362845][ T37] audit: type=1326 audit(1773025082.188:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25343 comm="syz.2.9368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e79cc799 code=0x7ffc0000 [ 680.520622][T25351] cgroup: Invalid name [ 681.052393][T25382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9386'. [ 681.052437][T25382] netlink: 'syz.4.9386': attribute type 5 has an invalid length. [ 681.052466][T25382] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9386'. [ 681.169837][T25382] geneve4: entered promiscuous mode [ 681.169870][T25382] geneve4: entered allmulticast mode [ 681.171782][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 681.172025][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 681.172289][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 681.216969][T25389] netlink: 'syz.1.9391': attribute type 5 has an invalid length. [ 681.956457][ T5633] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 682.001601][T25431] netlink: 'syz.4.9410': attribute type 6 has an invalid length. [ 682.123879][ T5633] usb 4-1: Using ep0 maxpacket: 16 [ 682.126319][ T5633] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 682.126349][ T5633] usb 4-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config [ 682.126372][ T5633] usb 4-1: config 0 has no interface number 0 [ 682.184598][ T5633] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 682.184630][ T5633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.184652][ T5633] usb 4-1: Product: syz [ 682.184666][ T5633] usb 4-1: Manufacturer: syz [ 682.184678][ T5633] usb 4-1: SerialNumber: syz [ 682.230484][ T5633] usb 4-1: config 0 descriptor?? [ 682.260582][ T5633] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 682.260610][ T5633] uvcvideo 4-1:0.105: No valid video chain found. [ 682.446812][ T9] usb 4-1: USB disconnect, device number 102 [ 682.753536][T25466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9429'. [ 682.753566][T25466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9429'. [ 682.753587][T25466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9429'. [ 683.069490][T25478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9435'. [ 683.069600][T25478] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9435'. [ 683.317364][ T37] kauditd_printk_skb: 26 callbacks suppressed [ 683.317387][ T37] audit: type=1326 audit(1773025085.148:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25492 comm="syz.2.9442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e79cc799 code=0x7ffc0000 [ 683.320930][ T37] audit: type=1326 audit(1773025085.148:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25492 comm="syz.2.9442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e79cc799 code=0x7ffc0000 [ 683.321233][ T37] audit: type=1326 audit(1773025085.148:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25492 comm="syz.2.9442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f12e79cc799 code=0x7ffc0000 [ 683.321514][ T37] audit: type=1326 audit(1773025085.148:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25492 comm="syz.2.9442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e79cc799 code=0x7ffc0000 [ 683.321823][ T37] audit: type=1326 audit(1773025085.148:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25492 comm="syz.2.9442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e79cc799 code=0x7ffc0000 [ 683.646133][ T5871] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 683.814637][ T5871] usb 5-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 683.814679][ T5871] usb 5-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 683.814709][ T5871] usb 5-1: config 1 interface 0 has no altsetting 0 [ 683.817995][ T5871] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 683.818053][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 683.818102][ T5871] usb 5-1: SerialNumber: syz [ 683.908902][ T5871] hub 5-1:1.0: bad descriptor, ignoring hub [ 683.908944][ T5871] hub 5-1:1.0: probe with driver hub failed with error -5 [ 683.909719][ T5871] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 684.129901][ T5871] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 684.224337][ T5871] usb 5-1: USB disconnect, device number 101 [ 684.435181][T25537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9462'. [ 685.195909][ T9] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 685.284256][T25580] netlink: 'syz.4.9485': attribute type 10 has an invalid length. [ 685.284300][T25580] macvlan1: entered allmulticast mode [ 685.302156][T25580] macvlan1: entered promiscuous mode [ 685.302181][T25580] veth1_vlan: entered promiscuous mode [ 685.325432][T25580] team0: Port device macvlan1 added [ 685.348405][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.348476][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 685.348504][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 685.348541][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 685.348565][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 685.351595][ T9] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 685.351628][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 685.351652][ T9] usb 2-1: Product: syz [ 685.351669][ T9] usb 2-1: Manufacturer: syz [ 685.351685][ T9] usb 2-1: SerialNumber: syz [ 685.451912][ T9] usb 2-1: config 0 descriptor?? [ 685.674006][ T9] radio-si470x 2-1:0.0: DeviceID=0x26c8 ChipID=0x4a9b [ 685.886283][ T9] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 685.886311][ T9] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 685.886737][ T9] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 685.936398][ T9] usb 2-1: USB disconnect, device number 111 [ 686.175726][T25607] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 686.272150][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.272226][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.305421][T25611] netlink: 'syz.3.9500': attribute type 10 has an invalid length. [ 686.331012][T25611] team0: Port device bridge0 added [ 686.468077][T25620] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 687.198758][T25660] delete_channel: no stack [ 687.664339][ T9] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 687.815867][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 687.825283][ T9] usb 3-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=b0.74 [ 687.825317][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.825340][ T9] usb 3-1: Product: syz [ 687.825355][ T9] usb 3-1: Manufacturer: syz [ 687.859450][ T9] usb 3-1: SerialNumber: syz [ 687.873866][ T9] usb 3-1: config 0 descriptor?? [ 687.898462][ T9] kl5kusb105 3-1:0.0: KL5KUSB105D / PalmConnect converter detected [ 687.921870][ T9] usb 3-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 688.118924][ T9] usb 3-1: USB disconnect, device number 106 [ 688.132838][ T9] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 688.133420][ T9] kl5kusb105 3-1:0.0: device disconnected [ 688.153856][T25706] CIFS: VFS: Malformed UNC in devname [ 688.697553][T25735] bridge0: port 3(team0) entered blocking state [ 688.700975][T25735] bridge0: port 3(team0) entered disabled state [ 688.701649][T25735] team0: entered allmulticast mode [ 688.701671][T25735] C: entered allmulticast mode [ 688.701739][T25735] team_slave_1: entered allmulticast mode [ 688.701759][T25735] bond0: entered allmulticast mode [ 688.701775][T25735] bond_slave_0: entered allmulticast mode [ 688.701795][T25735] bond_slave_1: entered allmulticast mode [ 688.701913][T25735] bridge0: entered allmulticast mode [ 688.794667][T25735] team0: left allmulticast mode [ 688.794685][T25735] C: left allmulticast mode [ 688.794701][T25735] team_slave_1: left allmulticast mode [ 688.794715][T25735] bond0: left allmulticast mode [ 688.794726][T25735] bond_slave_0: left allmulticast mode [ 688.794739][T25735] bond_slave_1: left allmulticast mode [ 688.794770][T25735] bridge0: left allmulticast mode [ 690.045812][ T37] audit: type=1326 audit(1773025091.869:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25800 comm="syz.1.9593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49aabfc799 code=0x7ffc0000 [ 690.051988][ T37] audit: type=1326 audit(1773025091.879:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25800 comm="syz.1.9593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49aabfc799 code=0x7ffc0000 [ 690.112117][ T37] audit: type=1326 audit(1773025091.939:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25800 comm="syz.1.9593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49aabfc799 code=0x7ffc0000 [ 690.112174][ T37] audit: type=1326 audit(1773025091.939:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25800 comm="syz.1.9593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49aabfc799 code=0x7ffc0000 [ 690.112223][ T37] audit: type=1326 audit(1773025091.939:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25800 comm="syz.1.9593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f49aabfc799 code=0x7ffc0000 [ 690.112270][ T37] audit: type=1326 audit(1773025091.939:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25800 comm="syz.1.9593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49aabfc799 code=0x7ffc0000 [ 690.112317][ T37] audit: type=1326 audit(1773025091.939:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25800 comm="syz.1.9593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f49aabfc799 code=0x7ffc0000 [ 690.112372][ T37] audit: type=1326 audit(1773025091.939:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25800 comm="syz.1.9593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f49aabfc799 code=0x7ffc0000 [ 690.324804][T25809] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9599'. [ 690.456397][T25815] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9600'. [ 690.456425][T25815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9600'. [ 690.456448][T25815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9600'. [ 690.543390][ T37] audit: type=1326 audit(1773025092.369:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25816 comm="syz.3.9602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d293c799 code=0x7ffc0000 [ 690.545688][ T37] audit: type=1326 audit(1773025092.379:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25816 comm="syz.3.9602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d293c799 code=0x7ffc0000 [ 690.585335][ T6618] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 690.748785][ T6618] usb 3-1: Using ep0 maxpacket: 8 [ 690.751266][ T6618] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 690.751297][ T6618] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 690.751319][ T6618] usb 3-1: config 6 has no interface number 0 [ 690.751366][ T6618] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 690.751391][ T6618] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 690.790218][ T6618] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 690.790303][ T6618] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 690.790360][ T6618] usb 3-1: Product: syz [ 690.790402][ T6618] usb 3-1: Manufacturer: syz [ 690.790592][ T6618] usb 3-1: SerialNumber: syz [ 690.867993][ T6618] hso 3-1:6.2: Failed to find INT IN ep [ 691.083848][ T6206] usb 3-1: USB disconnect, device number 107 [ 691.202870][T25845] openvswitch: netlink: Unknown key attributes 1 [ 691.782553][T25874] netlink: 116 bytes leftover after parsing attributes in process `syz.2.9630'. [ 692.084836][T25890] bridge0: port 3(veth0_to_bridge) entered blocking state [ 692.087038][T25890] bridge0: port 3(veth0_to_bridge) entered disabled state [ 692.087281][T25890] veth0_to_bridge: entered allmulticast mode [ 692.132114][T25890] veth0_to_bridge: entered promiscuous mode [ 692.132357][T25890] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.133030][T25890] bridge0: port 3(veth0_to_bridge) entered blocking state [ 692.133171][T25890] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 693.625060][T25958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9672'. [ 693.873615][T25970] geneve4: entered promiscuous mode [ 694.468845][T25998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9691'. [ 694.468889][T25998] openvswitch: netlink: Missing key (keys=200040, expected=2000) [ 694.736226][T26010] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 696.157249][T26083] IPv6: Can't replace route, no match found [ 696.944031][T26126] netlink: zone id is out of range [ 696.944050][T26126] netlink: set zone limit has 4 unknown bytes [ 697.134493][ T6208] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 697.284468][ T6208] usb 2-1: Using ep0 maxpacket: 16 [ 697.290635][ T6208] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 697.290669][ T6208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.290691][ T6208] usb 2-1: Product: syz [ 697.290707][ T6208] usb 2-1: Manufacturer: syz [ 697.290723][ T6208] usb 2-1: SerialNumber: syz [ 697.359796][ T6208] r8152-cfgselector 2-1: Unknown version 0x0000 [ 697.359826][ T6208] r8152-cfgselector 2-1: config 0 descriptor?? [ 697.795587][T26158] netlink: 'syz.4.9769': attribute type 21 has an invalid length. [ 697.831916][ T6208] r8152-cfgselector 2-1: USB disconnect, device number 112 [ 698.408205][T26186] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9781'. [ 698.619174][T26197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9788'. [ 698.656579][T26199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9789'. [ 699.234263][T26229] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 699.234298][T26229] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 699.234476][T26229] vhci_hcd vhci_hcd.0: Device attached [ 699.270566][T26230] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 0 [ 699.272548][T15021] vhci_hcd vhci_hcd.2: stop threads [ 699.272580][T15021] vhci_hcd vhci_hcd.2: release socket [ 699.272662][T15021] vhci_hcd vhci_hcd.2: disconnect device [ 700.090878][T26273] netlink: 'syz.3.9823': attribute type 13 has an invalid length. [ 700.600069][T26292] bond3: Removing last ns target with arp_interval on [ 700.839143][T26312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9843'. [ 701.494238][T26343] vivid-002: disconnect [ 701.494685][T26342] vivid-002: reconnect [ 701.770721][T26364] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 701.903888][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 701.903908][ T37] audit: type=1326 audit(1773025103.731:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26367 comm="syz.3.9871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d293c799 code=0x7ffc0000 [ 701.903974][ T37] audit: type=1326 audit(1773025103.731:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26367 comm="syz.3.9871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d293c799 code=0x7ffc0000 [ 701.935956][ T37] audit: type=1326 audit(1773025103.761:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26367 comm="syz.3.9871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d293c799 code=0x7ffc0000 [ 701.936114][ T37] audit: type=1326 audit(1773025103.771:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26367 comm="syz.3.9871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d293c799 code=0x7ffc0000 [ 701.936281][ T37] audit: type=1326 audit(1773025103.771:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26367 comm="syz.3.9871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f84d293c799 code=0x7ffc0000 [ 701.936397][ T37] audit: type=1326 audit(1773025103.771:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26367 comm="syz.3.9871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d293c799 code=0x7ffc0000 [ 701.953013][ T37] audit: type=1326 audit(1773025103.781:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26367 comm="syz.3.9871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f84d293c799 code=0x7ffc0000 [ 701.953164][ T37] audit: type=1326 audit(1773025103.781:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26367 comm="syz.3.9871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f84d293c799 code=0x7ffc0000 [ 702.114297][T26372] netlink: 'syz.4.9870': attribute type 58 has an invalid length. [ 702.260748][T26379] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 702.633801][ T6206] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 702.786226][ T6206] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 702.786262][ T6206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.800778][ T6206] usb 3-1: config 0 descriptor?? [ 702.929985][T26409] ip6gretap1: entered promiscuous mode [ 703.048230][ T6206] usb 3-1: Cannot read MAC address [ 703.048423][ T6206] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 703.084601][ T6206] usb 3-1: USB disconnect, device number 108 [ 703.965839][T26459] comedi comedi0: Minor 2147483647 is invalid! [ 703.991314][T26461] netlink: 'syz.3.9916': attribute type 1 has an invalid length. [ 704.024035][ T6206] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 704.178416][ T6206] usb 2-1: config 16 has an invalid interface number: 168 but max is 0 [ 704.178450][ T6206] usb 2-1: config 16 has no interface number 0 [ 704.178500][ T6206] usb 2-1: config 16 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 704.178530][ T6206] usb 2-1: config 16 interface 168 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 704.178560][ T6206] usb 2-1: config 16 interface 168 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.178603][ T6206] usb 2-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 704.178629][ T6206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.298483][ T6206] HFC-S_USB 2-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 704.488334][ T5871] usb 2-1: USB disconnect, device number 113 [ 704.803717][T26498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9934'. [ 704.803750][T26498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9934'. [ 704.927041][T26503] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9936'. [ 705.281524][T26519] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9944'. [ 705.309773][T26519] vlan2: entered promiscuous mode [ 705.309800][T26519] bridge0: entered promiscuous mode [ 705.830559][T26538] netlink: 'syz.2.9953': attribute type 1 has an invalid length. [ 705.830603][T26538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 707.226485][T26583] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 707.332930][ T6618] IPVS: starting estimator thread 0... [ 707.463696][T26588] IPVS: using max 7 ests per chain, 16800 per kthread [ 708.501308][T26613] netlink: 'syz.1.9987': attribute type 32 has an invalid length. [ 708.501335][T26613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9987'. [ 708.691922][T26613] bond4: Setting coupled_control to off (0) [ 715.438899][T26789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10073'. [ 715.438928][T26789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10073'. [ 717.103432][T26828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10092'. [ 717.921911][ T5633] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 718.072133][ T5633] usb 3-1: Using ep0 maxpacket: 32 [ 718.075043][ T5633] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 718.075086][ T5633] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 718.075109][ T5633] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 718.075132][ T5633] usb 3-1: config 1 has no interface number 0 [ 718.075179][ T5633] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 718.075209][ T5633] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 718.075257][ T5633] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 718.075284][ T5633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.227868][ T5633] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 718.453089][ T5633] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 718.932221][ T6208] usb 3-1: USB disconnect, device number 109 [ 718.936042][ T6208] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 718.981781][ T9] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 719.969014][T26890] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 720.596782][T26905] blktrace: Concurrent blktraces are not allowed on sg0 [ 721.063702][ T9] usb 4-1: device descriptor read/all, error -71 [ 721.811583][ T5871] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 721.820226][T26932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10140'. [ 721.974989][ T5871] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 721.975022][ T5871] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 721.975047][ T5871] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.975070][ T5871] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 721.975094][ T5871] usb 5-1: config 1 has no interface number 0 [ 721.975143][ T5871] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 721.975177][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.106271][ T5871] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 722.387720][ T5871] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 722.388191][ T5871] snd_usb_pod 5-1:1.1: invalid control EP [ 722.388208][ T5871] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 722.388551][ T5871] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 722.389257][ T5871] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 722.685882][ T5871] usb 5-1: USB disconnect, device number 102 [ 723.411413][ T6618] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 723.461432][ T5871] usb 2-1: new low-speed USB device number 114 using dummy_hcd [ 723.596209][ T6618] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.599771][ T6618] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 723.599805][ T6618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.599828][ T6618] usb 3-1: Product: syz [ 723.599845][ T6618] usb 3-1: Manufacturer: syz [ 723.599862][ T6618] usb 3-1: SerialNumber: syz [ 723.648336][ T5871] usb 2-1: config 7 has an invalid interface number: 209 but max is 0 [ 723.648367][ T5871] usb 2-1: config 7 has no interface number 0 [ 723.648402][ T5871] usb 2-1: config 7 interface 209 has no altsetting 0 [ 723.659219][ T5871] usb 2-1: string descriptor 0 read error: -22 [ 723.659368][ T5871] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10b2, bcdDevice=7c.f2 [ 723.659396][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.715321][ T6618] usb 3-1: config 0 descriptor?? [ 723.772425][ T6618] redrat3 3-1:0.0: Couldn't find all endpoints [ 723.942640][ T5871] usb 3-1: USB disconnect, device number 110 [ 724.096125][ T6618] usb 2-1: USB disconnect, device number 114 [ 725.999341][T27020] tipc: Enabling of bearer rejected, failed to enable media [ 727.005608][T27038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10192'. [ 727.223144][ T1230] kworker/1:2 (1230) used greatest stack depth: 15840 bytes left [ 727.285303][T27049] netlink: 436 bytes leftover after parsing attributes in process `syz.4.10198'. [ 727.285388][T27049] netlink: 436 bytes leftover after parsing attributes in process `syz.4.10198'. [ 727.941939][T27069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10208'. [ 729.040720][T27103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10223'. [ 729.939111][T27103] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 731.889440][T27176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10259'. [ 731.966176][T27176] vlan2: entered promiscuous mode [ 731.966201][T27176] gretap0: entered promiscuous mode [ 736.649751][ T5951] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 736.809697][ T5951] usb 5-1: Using ep0 maxpacket: 16 [ 736.816232][ T5951] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.816273][ T5951] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1792, setting to 1024 [ 736.816303][ T5951] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 736.816331][ T5951] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 736.817842][ T5951] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 736.817874][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 736.817898][ T5951] usb 5-1: SerialNumber: syz [ 736.859673][ T5871] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 736.942121][T27278] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 736.960654][ T5951] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 737.070885][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.070925][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.071008][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 737.071057][ T5871] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 737.071083][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.177336][ T5871] usb 3-1: config 0 descriptor?? [ 737.229290][ T5951] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 737.308655][ T5951] usb 5-1: USB disconnect, device number 103 [ 737.463379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.463742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.464155][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.464563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.464953][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.465308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.465662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.466124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.466455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.466818][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 741.764139][ T5871] usbhid 3-1:0.0: can't add hid device: -71 [ 741.764275][ T5871] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 741.785324][ T5871] usb 3-1: USB disconnect, device number 111 [ 742.469009][ C1] net_ratelimit: 11412 callbacks suppressed [ 742.469034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.469400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.469798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.470173][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.470536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.470910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.471297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.471748][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.472134][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.472558][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.275327][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 745.332250][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 745.334517][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 745.336291][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 745.376097][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 746.568089][T27303] hsr0 speed is unknown, defaulting to 1000 [ 746.610501][T27314] xt_policy: too many policy elements [ 747.538465][ T5806] Bluetooth: hci5: command tx timeout [ 747.717596][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.717671][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.093691][ C1] net_ratelimit: 7540 callbacks suppressed [ 748.093715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.094452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.094828][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.095256][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.095632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.096008][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.096409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.096892][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.097309][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.097741][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 749.655170][ T5806] Bluetooth: hci5: command tx timeout [ 751.698167][ T5806] Bluetooth: hci5: command tx timeout [ 753.103470][ C1] net_ratelimit: 9035 callbacks suppressed [ 753.103495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.104059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.104404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.104905][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.105282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.105700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.106078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.210417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.210833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.211454][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.886639][ T5806] Bluetooth: hci5: command tx timeout [ 754.628761][T27303] chnl_net:caif_netlink_parms(): no params data found [ 755.517511][ T5951] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 755.983762][ T5951] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 755.983793][ T5951] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.983816][ T5951] usb 2-1: config 0 has no interface number 0 [ 755.987030][ T5951] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 755.987064][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.987087][ T5951] usb 2-1: Product: syz [ 755.987103][ T5951] usb 2-1: Manufacturer: syz [ 755.987120][ T5951] usb 2-1: SerialNumber: syz [ 756.083497][ T5951] usb 2-1: config 0 descriptor?? [ 756.201487][ T5951] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 756.713012][ T5951] usb 2-1: USB disconnect, device number 115 [ 758.107590][ C1] net_ratelimit: 7821 callbacks suppressed [ 758.107614][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.108256][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.108682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.109112][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.109521][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.109952][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.110369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.110887][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.111325][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.111759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.116699][ C1] net_ratelimit: 8856 callbacks suppressed [ 763.116724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.117165][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.117588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.118019][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.118450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.119157][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.119560][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.119970][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.120410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.120807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 764.018068][T27400] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 764.229415][T27404] netlink: 'syz.2.10358': attribute type 28 has an invalid length. [ 764.472680][T27303] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.500524][T27303] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.500835][T27303] bridge_slave_0: entered allmulticast mode [ 764.550697][T27408] netlink: 'syz.4.10359': attribute type 1 has an invalid length. [ 764.581072][T27303] bridge_slave_0: entered promiscuous mode [ 764.611535][T27303] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.629413][T27303] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.629700][T27303] bridge_slave_1: entered allmulticast mode [ 764.668277][T27303] bridge_slave_1: entered promiscuous mode [ 765.348078][T27414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10362'. [ 765.348112][T27414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10362'. [ 765.483319][T27417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10363'. [ 768.125990][ C1] net_ratelimit: 8522 callbacks suppressed [ 768.126015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.126387][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.126749][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.127104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.127469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.128195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.128563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.128917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.129273][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.129635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.792751][T27414] bond5 (unregistering): Released all slaves [ 772.785424][ T5951] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 772.952595][ T5951] usb 3-1: Using ep0 maxpacket: 32 [ 773.095509][ T5951] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 773.095542][ T5951] usb 3-1: config 0 has no interface number 0 [ 773.135521][ C1] net_ratelimit: 9202 callbacks suppressed [ 773.135543][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.135853][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.136318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.136658][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.136969][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.137317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.137619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.137924][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.138243][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.138535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.335625][ T5951] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 773.335660][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.335682][ T5951] usb 3-1: Product: syz [ 773.335697][ T5951] usb 3-1: Manufacturer: syz [ 773.335722][ T5951] usb 3-1: SerialNumber: syz [ 774.725129][ T5951] usb 3-1: config 0 descriptor?? [ 776.645309][ T5951] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 776.645628][ T5951] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 776.653778][ T5951] usb 3-1: USB disconnect, device number 112 [ 778.147996][ C1] net_ratelimit: 10750 callbacks suppressed [ 778.148071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.148691][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.149067][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.149451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.149854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.150233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.151088][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.154168][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.265191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.265622][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.755854][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 781.797650][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 781.799572][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 781.801983][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 781.802787][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 782.749454][T27303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.154132][ C1] net_ratelimit: 9926 callbacks suppressed [ 783.154156][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.154569][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.154963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.155349][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.155741][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.156125][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.156540][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.156964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.157348][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.157741][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.934122][ T5806] Bluetooth: hci2: command tx timeout [ 785.493395][T27303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.033979][ T5806] Bluetooth: hci2: command tx timeout [ 786.772889][T27475] hsr0 speed is unknown, defaulting to 1000 [ 786.806575][T27303] team0: Port device team_slave_0 added [ 786.855381][T27303] team0: Port device team_slave_1 added [ 787.656402][ T5809] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 787.685499][ T5809] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 787.687202][ T5809] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 787.688994][ T5809] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 787.689906][ T5809] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 788.093669][ T5809] Bluetooth: hci2: command tx timeout [ 788.143844][T27303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.143865][T27303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.143897][T27303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.164970][ C1] net_ratelimit: 8536 callbacks suppressed [ 788.164994][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.165397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.165808][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.166206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.166614][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.167010][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.167568][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.167980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.168378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.168779][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.451948][T27303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.451971][T27303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.452004][T27303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.973574][T27303] hsr_slave_0: entered promiscuous mode [ 788.975180][T27303] hsr_slave_1: entered promiscuous mode [ 788.976322][T27303] debugfs: 'hsr0' already exists in 'hsr' [ 788.976351][T27303] Cannot create hsr debugfs directory [ 789.014110][T27498] hsr0 speed is unknown, defaulting to 1000 [ 789.773470][ T5809] Bluetooth: hci6: command tx timeout [ 790.185405][ T5809] Bluetooth: hci2: command tx timeout [ 791.934456][ T5809] Bluetooth: hci6: command tx timeout [ 793.179301][ C1] net_ratelimit: 7781 callbacks suppressed [ 793.179403][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.179912][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.180322][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.180761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.181159][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.181589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.181999][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.182402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.303316][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.303771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 794.031309][ T5809] Bluetooth: hci6: command tx timeout [ 794.701476][T27475] chnl_net:caif_netlink_parms(): no params data found [ 796.092667][ T5809] Bluetooth: hci6: command tx timeout [ 798.182257][ C1] net_ratelimit: 9083 callbacks suppressed [ 798.182298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.182700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.183056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.183436][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.183813][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.184167][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.184550][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.184906][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.185260][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.185623][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 801.862323][T27498] chnl_net:caif_netlink_parms(): no params data found [ 803.192252][ C1] net_ratelimit: 10596 callbacks suppressed [ 803.192276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 803.192638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 803.192992][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 803.193350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 803.193722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 803.194077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 803.194439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 803.194804][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 803.195157][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 803.195521][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 803.379667][T27475] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.379800][T27475] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.380387][T27475] bridge_slave_0: entered allmulticast mode [ 803.698923][T27475] bridge_slave_0: entered promiscuous mode [ 805.292968][T27475] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.293102][T27475] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.293376][T27475] bridge_slave_1: entered allmulticast mode [ 805.296234][T27475] bridge_slave_1: entered promiscuous mode [ 807.890733][ T5806] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 807.928675][ T5806] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 807.971725][ T5806] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 807.972946][ T5806] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 807.977482][ T5806] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 808.202372][ C1] net_ratelimit: 9254 callbacks suppressed [ 808.202396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.202798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.203156][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.203521][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.203931][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.204286][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.204656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.205007][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.205381][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.205734][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 810.061928][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.062004][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.132105][ T5809] Bluetooth: hci7: command tx timeout [ 810.688006][T27475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.534831][ T5809] Bluetooth: hci7: command tx timeout [ 812.675402][T27475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.214877][ C1] net_ratelimit: 10601 callbacks suppressed [ 813.214902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 813.215301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 813.215700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 813.216506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 813.216954][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 813.217464][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 813.217919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 813.218324][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 813.218731][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 813.219154][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 814.810432][ T5809] Bluetooth: hci7: command tx timeout [ 816.890278][ T5809] Bluetooth: hci7: command tx timeout [ 817.494681][T27475] team0: Port device team_slave_0 added [ 817.647590][T27498] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.678918][T27498] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.679207][T27498] bridge_slave_0: entered allmulticast mode [ 817.729136][T27498] bridge_slave_0: entered promiscuous mode [ 817.876159][T27475] team0: Port device team_slave_1 added [ 817.884198][T27568] hsr0 speed is unknown, defaulting to 1000 [ 818.220204][ C1] net_ratelimit: 9356 callbacks suppressed [ 818.220229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.220704][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.221087][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.221452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.221830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.222206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.222604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.222965][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.223366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.223737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.813432][ T5951] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 818.875065][T27498] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.892816][T27498] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.893110][T27498] bridge_slave_1: entered allmulticast mode [ 818.950984][T27498] bridge_slave_1: entered promiscuous mode [ 819.029909][ T5951] usb 3-1: Using ep0 maxpacket: 32 [ 823.229599][ C1] net_ratelimit: 11588 callbacks suppressed [ 823.229623][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.229992][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.230362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.230732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.231116][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.231498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.231877][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.232271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.232678][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.233043][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.760072][ T5951] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 823.760106][ T5951] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 823.760132][ T5951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 823.760213][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 823.760238][ T5951] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 823.760266][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 823.760292][ T5951] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 823.760319][ T5951] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 823.760367][ T5951] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 823.760392][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.500486][ T5951] usb 3-1: config 0 descriptor?? [ 824.506605][ T5951] usb 3-1: can't set config #0, error -71 [ 824.521063][ T5951] usb 3-1: USB disconnect, device number 113 [ 828.023973][T27475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.023995][T27475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.024026][T27475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.239108][ C1] net_ratelimit: 10193 callbacks suppressed [ 828.239134][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.239493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.240018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.240390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.240857][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.241234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.241590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.242083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.242440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.242821][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 829.585883][T27617] netlink: 136 bytes leftover after parsing attributes in process `syz.2.10436'. [ 829.608248][T27498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.023633][T27475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.023654][T27475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.023687][T27475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.728584][ T5951] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 831.898573][ T5951] usb 3-1: Using ep0 maxpacket: 32 [ 831.901364][ T5951] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 831.901394][ T5951] usb 3-1: config 0 has no interface number 0 [ 831.904438][ T5951] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 831.904471][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.904494][ T5951] usb 3-1: Product: syz [ 831.904511][ T5951] usb 3-1: Manufacturer: syz [ 831.904528][ T5951] usb 3-1: SerialNumber: syz [ 831.977864][ T5951] usb 3-1: config 0 descriptor?? [ 832.003986][ T5951] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 832.004037][ T5951] usb 3-1: selecting invalid altsetting 1 [ 832.004057][ T5951] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 832.041317][ T5951] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 832.041873][ T5951] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 832.041930][ T5951] usb 3-1: media controller created [ 832.263998][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 833.248931][ C1] net_ratelimit: 9603 callbacks suppressed [ 833.249024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.249884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.250397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.250817][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.251397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.251833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.252319][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.252762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.253322][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.253762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.576040][ T5951] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 833.576272][ T5951] zl10353_read_register: readreg error (reg=127, ret==-71) [ 833.577617][ T5951] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 835.275869][ T5951] usb 3-1: USB disconnect, device number 114 [ 838.263142][ C1] net_ratelimit: 9256 callbacks suppressed [ 838.263169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.263528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.263897][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.264251][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.264621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.264989][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.265343][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.267883][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.268290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 838.268666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 842.095490][ T6618] libceph: connect (1)[c::]:6789 error -101 [ 842.096829][ T6618] libceph: mon0 (1)[c::]:6789 connect error [ 842.351424][T27654] ceph: No mds server is up or the cluster is laggy [ 842.411661][ T6618] libceph: connect (1)[c::]:6789 error -101 [ 842.411920][ T6618] libceph: mon0 (1)[c::]:6789 connect error [ 842.683290][ T6618] libceph: connect (1)[c::]:6789 error -101 [ 842.683521][ T6618] libceph: mon0 (1)[c::]:6789 connect error [ 843.224590][ T6618] libceph: connect (1)[c::]:6789 error -101 [ 843.224982][ T6618] libceph: mon0 (1)[c::]:6789 connect error [ 843.260301][T27498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.302944][ C1] net_ratelimit: 9514 callbacks suppressed [ 843.302968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.303494][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.303977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.304451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.304907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.305423][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.305879][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.306452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.307231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 843.311539][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.350847][T27498] team0: Port device team_slave_0 added [ 844.430182][T27498] team0: Port device team_slave_1 added [ 844.849442][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 844.877843][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 844.896690][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 844.927219][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 844.929651][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 844.947172][ T6208] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 845.138666][ T6208] usb 3-1: Using ep0 maxpacket: 32 [ 846.197257][ T6208] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 846.197297][ T6208] usb 3-1: config 0 interface 0 has no altsetting 0 [ 846.197334][ T6208] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 846.197360][ T6208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.203616][ T6208] usb 3-1: config 0 descriptor?? [ 847.127031][ T5809] Bluetooth: hci5: command tx timeout [ 847.272720][ T6208] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 847.272765][ T6208] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 847.272796][ T6208] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 847.272825][ T6208] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 847.272853][ T6208] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 847.439976][ T6208] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 847.836104][ T6208] corsair-cpro 0003:1B1C:0C10.0001: probe with driver corsair-cpro failed with error -71 [ 847.880736][ T6208] usb 3-1: USB disconnect, device number 115 [ 848.126040][T27498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.126061][T27498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.126092][T27498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.347300][ C1] net_ratelimit: 9235 callbacks suppressed [ 848.347326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 848.347794][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 848.348226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 848.348646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 848.349103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 848.349481][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 848.349832][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 848.350189][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 848.350554][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 848.350908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 848.902447][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 848.983794][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 849.009792][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 849.011063][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 849.020904][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 849.097387][T27685] devpts: Bad value for 'max' [ 849.142364][T27679] fido_id[27679]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 849.206512][ T5806] Bluetooth: hci5: command tx timeout [ 851.176266][ T5806] Bluetooth: hci2: command tx timeout [ 851.296318][ T5806] Bluetooth: hci5: command tx timeout [ 853.206182][ T5806] Bluetooth: hci2: command tx timeout [ 853.356194][ C1] net_ratelimit: 9224 callbacks suppressed [ 853.356218][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.356632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.357022][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.357695][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.358180][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.358548][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.358944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.359326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.359725][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.360089][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.368020][ T5806] Bluetooth: hci5: command tx timeout [ 855.083933][T27665] hsr0 speed is unknown, defaulting to 1000 [ 855.285956][ T5806] Bluetooth: hci2: command tx timeout [ 857.365644][ T5806] Bluetooth: hci2: command tx timeout [ 858.369699][ C1] net_ratelimit: 9896 callbacks suppressed [ 858.369726][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.370124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.370495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.370853][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.371206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.371566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.371920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.372283][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.372634][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 858.372985][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.378122][ C1] net_ratelimit: 9895 callbacks suppressed [ 863.378149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.378521][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.378879][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.379242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.379603][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.379966][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.380321][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.380671][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.381035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 863.381390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 864.544812][ T5951] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 864.888676][ T5951] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 864.888729][ T5951] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 864.888761][ T5951] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.888787][ T5951] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 864.888817][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 864.888855][ T5951] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 864.888881][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.986698][ T5951] usb 3-1: config 0 descriptor?? [ 866.521060][ T5951] usbhid 3-1:0.0: can't add hid device: -71 [ 866.521210][ T5951] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 866.549113][ T5951] usb 3-1: USB disconnect, device number 116 [ 866.765559][T27682] hsr0 speed is unknown, defaulting to 1000 [ 868.384179][ C1] net_ratelimit: 9954 callbacks suppressed [ 868.384204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.384558][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.384944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.385305][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.385656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.386017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.386400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.386766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.387185][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.387520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.752603][ T5809] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 868.780907][ T5809] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 868.797861][ T5809] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 868.834362][ T5809] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 868.992467][ T5809] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 870.654645][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.654721][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.364466][ T5806] Bluetooth: hci6: command tx timeout [ 873.394055][ C1] net_ratelimit: 8757 callbacks suppressed [ 873.394079][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 873.394546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 873.395029][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 873.395517][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 873.395973][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 873.396429][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 873.396902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 873.397365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 873.397807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 873.398244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 873.533739][ T5806] Bluetooth: hci6: command tx timeout [ 873.571903][T27751] hsr0 speed is unknown, defaulting to 1000 [ 875.642792][ T5806] Bluetooth: hci6: command tx timeout [ 877.692176][ T5806] Bluetooth: hci6: command tx timeout [ 878.403436][ C1] net_ratelimit: 9615 callbacks suppressed [ 878.403461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 878.403932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 878.404475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 878.404889][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 878.405370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 878.406088][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 878.406503][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 878.407076][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 878.407506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 878.408088][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 883.412454][ C1] net_ratelimit: 10703 callbacks suppressed [ 883.412479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 883.412839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 883.413226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 883.413589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 883.413950][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 883.414308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 883.414680][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 883.415108][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 883.416072][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 883.416504][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 885.083829][T27665] chnl_net:caif_netlink_parms(): no params data found [ 885.117987][T27784] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10502'. [ 885.118212][T27784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10502'. [ 885.118494][T27784] sch_fq: defrate 4294967295 ignored. [ 888.422157][ C1] net_ratelimit: 10455 callbacks suppressed [ 888.422183][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 888.422592][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 888.422985][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 888.423379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 888.423767][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 888.424174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 888.424570][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 888.424960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 888.425339][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 888.425732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 890.052675][T27682] chnl_net:caif_netlink_parms(): no params data found [ 892.360268][T27665] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.360485][T27665] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.361174][T27665] bridge_slave_0: entered allmulticast mode [ 892.446205][T27665] bridge_slave_0: entered promiscuous mode [ 893.070596][T27665] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.070730][T27665] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.071034][T27665] bridge_slave_1: entered allmulticast mode [ 893.294647][T27665] bridge_slave_1: entered promiscuous mode [ 893.431883][ C1] net_ratelimit: 8044 callbacks suppressed [ 893.431908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 893.432340][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 893.432749][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 893.433169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 893.433575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 893.433990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 893.434397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 893.434803][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 893.435230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 893.435662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 896.219322][T27665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.351548][T27682] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.351702][T27682] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.352020][T27682] bridge_slave_0: entered allmulticast mode [ 896.355094][T27682] bridge_slave_0: entered promiscuous mode [ 896.405716][T27665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.423177][T27682] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.423324][T27682] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.423973][T27682] bridge_slave_1: entered allmulticast mode [ 896.488087][T27682] bridge_slave_1: entered promiscuous mode [ 897.333502][T27665] team0: Port device team_slave_0 added [ 897.338132][T27682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.647986][T27682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.665390][T27665] team0: Port device team_slave_1 added [ 897.665880][T27751] chnl_net:caif_netlink_parms(): no params data found [ 897.746414][T27843] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.10520'. [ 898.440903][ C1] net_ratelimit: 8321 callbacks suppressed [ 898.440927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 898.441299][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 898.441730][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 898.442117][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 898.442494][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 898.443381][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 898.443760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 898.444152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 898.444589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 898.444949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 903.450045][ C1] net_ratelimit: 9084 callbacks suppressed [ 903.450068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 903.450431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 903.450839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 903.451194][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 903.451574][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 903.451938][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 903.452292][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 903.452656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 903.453012][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 903.453391][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 906.353160][T27682] team0: Port device team_slave_0 added [ 906.855762][T27682] team0: Port device team_slave_1 added [ 908.469974][ C1] net_ratelimit: 8887 callbacks suppressed [ 908.470011][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 908.470448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 908.470849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 908.471254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 908.471647][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 908.472041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 908.472442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 908.472833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 908.473388][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 908.473790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 909.378112][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 909.416729][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 909.418420][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 909.444048][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 909.445004][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 910.191599][ T5809] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 910.237037][ T5809] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 910.257440][ T5809] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 910.496302][ T5809] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 910.497263][ T5809] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 911.599893][ T5809] Bluetooth: hci0: command tx timeout [ 913.479109][ C1] net_ratelimit: 8001 callbacks suppressed [ 913.479135][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 913.479556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 913.479948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 913.480335][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 913.480736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 913.481149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 913.481555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 913.481950][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 913.482330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 913.482737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 913.519244][ T5809] Bluetooth: hci7: command tx timeout [ 913.679008][ T5809] Bluetooth: hci0: command tx timeout [ 915.434018][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 915.461111][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 915.462938][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 915.494191][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 915.494998][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 915.602602][ T5806] Bluetooth: hci7: command tx timeout [ 915.768782][T27905] Bluetooth: hci0: command tx timeout [ 917.688847][T27905] Bluetooth: hci5: command tx timeout [ 917.689703][T27905] Bluetooth: hci7: command tx timeout [ 917.857472][T27905] Bluetooth: hci0: command tx timeout [ 918.488571][ C1] net_ratelimit: 7924 callbacks suppressed [ 918.488596][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 918.488964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 918.489317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 918.489694][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 918.490057][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 918.490592][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 918.490965][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 918.491314][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 918.491663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 918.492024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 919.769223][T27905] Bluetooth: hci5: command tx timeout [ 919.769261][T27905] Bluetooth: hci7: command tx timeout [ 921.838213][T27306] Bluetooth: hci5: command tx timeout [ 923.194469][T27751] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.218449][T27751] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.218787][T27751] bridge_slave_0: entered allmulticast mode [ 923.385965][T27751] bridge_slave_0: entered promiscuous mode [ 923.498006][ C1] net_ratelimit: 9463 callbacks suppressed [ 923.498031][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 923.498403][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 923.498764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 923.499495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 923.500540][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 923.501190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 923.501604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 923.501950][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 923.502432][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 923.502821][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 923.917960][T27306] Bluetooth: hci5: command tx timeout [ 926.117968][T27751] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.118317][T27751] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.118639][T27751] bridge_slave_1: entered allmulticast mode [ 926.124737][T27751] bridge_slave_1: entered promiscuous mode [ 926.161140][T27879] hsr0 speed is unknown, defaulting to 1000 [ 926.178215][T27890] hsr0 speed is unknown, defaulting to 1000 [ 928.517889][ C1] net_ratelimit: 8242 callbacks suppressed [ 928.517913][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 928.518332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 928.518799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 928.519221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 928.519712][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 928.520137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 928.521661][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 928.522046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 928.522428][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 928.522854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 929.373088][T27902] hsr0 speed is unknown, defaulting to 1000 [ 929.439771][T27905] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 929.450478][T27905] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 929.464409][T27905] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 929.465553][T27905] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 929.484901][T27905] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 931.357455][ T38] INFO: task syz.4.10370:27430 blocked for more than 143 seconds. [ 931.357484][ T38] Not tainted syzkaller #0 [ 931.357498][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 931.357510][ T38] task:syz.4.10370 state:D stack:22088 pid:27430 tgid:27427 ppid:5799 task_flags:0x400140 flags:0x00080003 [ 931.357579][ T38] Call Trace: [ 931.357589][ T38] [ 931.357607][ T38] __schedule+0x1553/0x5240 [ 931.357786][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 931.357852][ T38] ? unwind_next_frame+0xa5/0x23c0 [ 931.357902][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 931.357928][ T38] ? __pfx___schedule+0x10/0x10 [ 931.357974][ T38] rt_mutex_schedule+0x76/0xf0 [ 931.358017][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 931.358089][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 931.358120][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 931.358147][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 931.358200][ T38] ? rcu_barrier+0x4c/0x580 [ 931.358243][ T38] ? rcu_barrier+0x4c/0x580 [ 931.358268][ T38] mutex_lock_nested+0x168/0x1d0 [ 931.358293][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 931.358325][ T38] rcu_barrier+0x4c/0x580 [ 931.358372][ T38] netdev_run_todo+0x2e0/0xde0 [ 931.358517][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 931.358559][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 931.358646][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 931.358696][ T38] ? netdev_state_change+0x1ca/0x220 [ 931.358750][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 931.358841][ T38] tun_chr_close+0x13f/0x1c0 [ 931.358871][ T38] __fput+0x461/0xa90 [ 931.358953][ T38] task_work_run+0x1d9/0x270 [ 931.358986][ T38] ? __pfx_task_work_run+0x10/0x10 [ 931.359026][ T38] get_signal+0x11c3/0x1310 [ 931.359082][ T38] arch_do_signal_or_restart+0xbc/0x830 [ 931.359134][ T38] ? __pfx_task_work_add+0x10/0x10 [ 931.359160][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 931.359285][ T38] ? __fput_deferred+0x253/0x3e0 [ 931.359323][ T38] exit_to_user_mode_loop+0x86/0x480 [ 931.359374][ T38] ? rcu_is_watching+0x15/0xb0 [ 931.359412][ T38] do_syscall_64+0x32d/0xf80 [ 931.359445][ T38] ? trace_irq_disable+0x3b/0x150 [ 931.359480][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.359521][ T38] ? clear_bhb_loop+0x40/0x90 [ 931.359551][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.359575][ T38] RIP: 0033:0x7ffb80f3c799 [ 931.359597][ T38] RSP: 002b:00007ffb7f18e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 931.359623][ T38] RAX: 0000000000000000 RBX: 00007ffb811b5fa0 RCX: 00007ffb80f3c799 [ 931.359640][ T38] RDX: 0000200000000000 RSI: 00000000400454ca RDI: 0000000000000003 [ 931.359657][ T38] RBP: 00007ffb80fd2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 931.359673][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 931.359687][ T38] R13: 00007ffb811b6038 R14: 00007ffb811b5fa0 R15: 00007ffc366ace78 [ 931.359725][ T38] [ 931.359767][ T38] [ 931.359767][ T38] Showing all locks held in the system: [ 931.359779][ T38] 3 locks held by kworker/u8:0/12: [ 931.359794][ T38] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 931.359867][ T38] #1: ffffc90000117c40 ((work_completion)(©->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 931.359931][ T38] #2: ffffffff8ddd39f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 931.359991][ T38] 3 locks held by ktimers/0/16: [ 931.360008][ T38] 1 lock held by khungtaskd/38: [ 931.360021][ T38] #0: ffffffff8ddcd780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 931.360096][ T38] 5 locks held by kworker/u8:3/57: [ 931.360134][ T38] 1 lock held by udevd/5160: [ 931.360148][ T38] #0: ffff888038572a08 (&ep->lock){+.+.}-{3:3}, at: do_epoll_wait+0x851/0xbd0 [ 931.360293][ T38] 2 locks held by getty/5545: [ 931.360306][ T38] #0: ffff88803673f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 931.360425][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 931.360521][ T38] 9 locks held by kworker/u8:12/6411: [ 931.360538][ T38] 1 lock held by syz.3.10199/27052: [ 931.360552][ T38] #0: ffffffff8ddd39f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 931.360612][ T38] 1 lock held by syz-executor/27303: [ 931.360626][ T38] #0: ffffffff8ddd39f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 931.360684][ T38] 1 lock held by syz.1.10362/27414: [ 931.360697][ T38] #0: ffffffff8ddd39f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 931.360756][ T38] 1 lock held by syz.4.10370/27430: [ 931.360769][ T38] #0: ffffffff8ddd39f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 931.360828][ T38] 1 lock held by syz-executor/27475: [ 931.360842][ T38] #0: ffffffff8ddd39f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 931.360900][ T38] 1 lock held by syz-executor/27498: [ 931.360914][ T38] #0: ffffffff8ddd39f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 931.360975][ T38] 1 lock held by syz-executor/27568: [ 931.360988][ T38] #0: ffffffff8ddd39f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 931.361048][ T38] 1 lock held by syz-executor/27665: [ 931.361061][ T38] #0: ffffffff8ddd39f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 931.361120][ T38] 1 lock held by syz-executor/27682: [ 931.361135][ T38] #0: ffffffff8ddd39f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 931.361204][ T38] 1 lock held by syz.2.10520/27842: [ 931.361218][ T38] #0: ffffffff8ddd39f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 931.361277][ T38] 2 locks held by syz-executor/27879: [ 931.361290][ T38] #0: ffffffff8f14bb80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 931.361382][ T38] #1: ffffffff8f15a3b8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 931.361446][ T38] 1 lock held by syz-executor/27890: [ 931.361461][ T38] 2 locks held by syz-executor/27902: [ 931.361474][ T38] #0: ffffffff8f14bb80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 931.361530][ T38] #1: ffffffff8f15a3b8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 931.361595][ T38] 2 locks held by syz-executor/27946: [ 931.361610][ T38] 7 locks held by udevd/27952: [ 931.361623][ T38] 4 locks held by syz.0.10564/27956: [ 931.361637][ T38] [ 931.361643][ T38] ============================================= [ 931.361643][ T38] [ 931.361662][ T38] NMI backtrace for cpu 1 [ 931.361683][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 931.361705][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 931.361718][ T38] Call Trace: [ 931.361726][ T38] [ 931.361735][ T38] dump_stack_lvl+0xe8/0x150 [ 931.361771][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 931.361835][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 931.361871][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 931.361903][ T38] sys_info+0x135/0x170 [ 931.361935][ T38] watchdog+0xfd9/0x1030 [ 931.361968][ T38] ? watchdog+0x21a/0x1030 [ 931.362002][ T38] kthread+0x388/0x470 [ 931.362027][ T38] ? __pfx_watchdog+0x10/0x10 [ 931.362051][ T38] ? __pfx_kthread+0x10/0x10 [ 931.362076][ T38] ret_from_fork+0x51e/0xb90 [ 931.362117][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 931.362146][ T38] ? __switch_to+0xc7d/0x1450 [ 931.362177][ T38] ? __pfx_kthread+0x10/0x10 [ 931.362212][ T38] ret_from_fork_asm+0x1a/0x30 [ 931.362248][ T38] [ 931.362257][ T38] Sending NMI from CPU 1 to CPUs 0: [ 931.362291][ C0] NMI backtrace for cpu 0 [ 931.362308][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 931.362330][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 931.362343][ C0] RIP: 0010:__lock_acquire+0xb17/0x2cf0 [ 931.362364][ C0] Code: 38 cd 0d 48 c7 c6 a5 f2 66 8d 67 48 0f b9 3a 90 48 bb eb 83 b5 80 46 86 c8 61 48 0f af dd 48 c1 eb 2d 48 8b 04 dd 20 c4 11 93 <48> 85 c0 0f 94 c1 48 83 c0 f8 0f 94 c2 08 ca 0f 84 1c 01 00 00 e8 [ 931.362382][ C0] RSP: 0018:ffffc90000156548 EFLAGS: 00000006 [ 931.362408][ C0] RAX: ffffffff93757ed8 RBX: 0000000000017165 RCX: 0000000000040000 [ 931.362423][ C0] RDX: 00000000449f6632 RSI: 00000000440ed7bc RDI: ffff88801c6e0000 [ 931.362437][ C0] RBP: 693a12ae0f01dd27 R08: ffffffff819397b1 R09: ffff8880b883bc20 [ 931.362452][ C0] R10: dffffc0000000000 R11: fffff5200002acd8 R12: ffff88801c6e0d48 [ 931.362467][ C0] R13: ffff88801c6e0d48 R14: ffff88801c6e0000 R15: 000000000000000a [ 931.362481][ C0] FS: 0000000000000000(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 931.362497][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 931.362511][ C0] CR2: 00007fba7c2f56b8 CR3: 000000000dbba000 CR4: 00000000003526f0 [ 931.362528][ C0] Call Trace: [ 931.362535][ C0] [ 931.362546][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 931.362568][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 931.362597][ C0] lock_acquire+0xf0/0x2e0 [ 931.362614][ C0] ? raw_spin_rq_lock_nested+0x31/0x150 [ 931.362641][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 931.362668][ C0] _raw_spin_lock_nested+0x32/0x50 [ 931.362703][ C0] ? raw_spin_rq_lock_nested+0x31/0x150 [ 931.362727][ C0] raw_spin_rq_lock_nested+0x31/0x150 [ 931.362754][ C0] _task_rq_lock+0xbc/0x470 [ 931.362781][ C0] __schedule+0x16d3/0x5240 [ 931.362808][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 931.362828][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 931.362848][ C0] ? __pfx___schedule+0x10/0x10 [ 931.362872][ C0] ? irqentry_exit+0x59e/0x620 [ 931.362897][ C0] ? trace_irq_disable+0x3b/0x150 [ 931.362922][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 931.362942][ C0] preempt_schedule_notrace+0x57/0x90 [ 931.362967][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 931.362993][ C0] rcu_is_watching+0x7f/0xb0 [ 931.363013][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 931.363030][ C0] unwind_next_frame+0x1a66/0x23c0 [ 931.363050][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 931.363068][ C0] ? ret_from_fork+0x51e/0xb90 [ 931.363096][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 931.363122][ C0] arch_stack_walk+0x11b/0x150 [ 931.363143][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 931.363163][ C0] stack_trace_save+0xa9/0x100 [ 931.363194][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 931.363225][ C0] kasan_save_track+0x3e/0x80 [ 931.363264][ C0] ? kasan_save_track+0x3e/0x80 [ 931.363288][ C0] ? kasan_save_free_info+0x46/0x50 [ 931.363308][ C0] ? __kasan_slab_free+0x5c/0x80 [ 931.363333][ C0] ? kfree+0x1c1/0x6c0 [ 931.363409][ C0] ? ieee80211_inform_bss+0xc75/0x1160 [ 931.363507][ C0] ? cfg80211_inform_single_bss_data+0xd2f/0x1bd0 [ 931.363596][ C0] ? cfg80211_inform_bss_data+0x266/0x3c40 [ 931.363621][ C0] ? cfg80211_inform_bss_frame_data+0x3c7/0x760 [ 931.363647][ C0] ? ieee80211_bss_info_update+0x794/0xa40 [ 931.363674][ C0] ? ieee80211_scan_rx+0x552/0xa40 [ 931.363706][ C0] ? ieee80211_rx_list+0x29fe/0x3740 [ 931.363746][ C0] ? ieee80211_rx_napi+0x1b1/0x3e0 [ 931.363763][ C0] ? ieee80211_handle_queued_frames+0xe8/0x1e0 [ 931.363812][ C0] ? tasklet_action_common+0x2bf/0x540 [ 931.363841][ C0] ? handle_softirqs+0x1de/0x6f0 [ 931.363865][ C0] ? run_ktimerd+0x69/0x100 [ 931.363892][ C0] ? smpboot_thread_fn+0x541/0xa50 [ 931.363921][ C0] ? kthread+0x388/0x470 [ 931.363938][ C0] ? ret_from_fork+0x51e/0xb90 [ 931.363989][ C0] kasan_save_free_info+0x46/0x50 [ 931.364010][ C0] __kasan_slab_free+0x5c/0x80 [ 931.364036][ C0] kfree+0x1c1/0x6c0 [ 931.364059][ C0] ? ieee80211_inform_bss+0xc75/0x1160 [ 931.364089][ C0] ieee80211_inform_bss+0xc75/0x1160 [ 931.364125][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 931.364151][ C0] ? rt_spin_lock+0x20e/0x400 [ 931.364175][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 931.364201][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 931.364229][ C0] cfg80211_inform_single_bss_data+0xd2f/0x1bd0 [ 931.364257][ C0] ? cfg80211_inform_single_bss_data+0xbb7/0x1bd0 [ 931.364288][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 931.364326][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 931.364345][ C0] ? cfg80211_inform_bss_data+0x253/0x3c40 [ 931.364374][ C0] cfg80211_inform_bss_data+0x266/0x3c40 [ 931.364401][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 931.364420][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 931.364445][ C0] ? arch_stack_walk+0x11b/0x150 [ 931.364465][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 931.364485][ C0] ? stack_trace_save+0xa9/0x100 [ 931.364513][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 931.364546][ C0] ? stack_depot_save_flags+0x33/0x810 [ 931.364606][ C0] ? __kfree_skb+0x24/0x210 [ 931.364674][ C0] ? ip_local_deliver_finish+0x310/0x6f0 [ 931.364768][ C0] ? NF_HOOK+0x336/0x3c0 [ 931.364794][ C0] ? kasan_save_track+0x4f/0x80 [ 931.364817][ C0] ? kasan_save_track+0x3e/0x80 [ 931.364841][ C0] ? kasan_save_free_info+0x46/0x50 [ 931.364861][ C0] ? __kasan_slab_free+0x5c/0x80 [ 931.364886][ C0] ? kmem_cache_free+0x185/0x6b0 [ 931.364939][ C0] ? ip_local_deliver_finish+0x3bb/0x6f0 [ 931.364965][ C0] ? NF_HOOK+0x336/0x3c0 [ 931.364989][ C0] ? NF_HOOK+0x336/0x3c0 [ 931.365012][ C0] ? process_backlog+0x569/0xc60 [ 931.365032][ C0] ? __napi_poll+0xaf/0x580 [ 931.365050][ C0] ? net_rx_action+0x696/0xe00 [ 931.365069][ C0] ? handle_softirqs+0x1de/0x6f0 [ 931.365093][ C0] ? run_ktimerd+0x69/0x100 [ 931.365120][ C0] ? smpboot_thread_fn+0x541/0xa50 [ 931.365147][ C0] ? kthread+0x388/0x470 [ 931.365168][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 931.365194][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 931.365219][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 931.365239][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x760 [ 931.365270][ C0] ? ieee80211_bss_info_update+0x316/0xa40 [ 931.365300][ C0] ieee80211_bss_info_update+0x794/0xa40 [ 931.365330][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 931.365357][ C0] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 931.365381][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 931.365402][ C0] ? rt_spin_unlock+0x14f/0x200 [ 931.365421][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 931.365472][ C0] ieee80211_scan_rx+0x552/0xa40 [ 931.365502][ C0] ieee80211_rx_list+0x29fe/0x3740 [ 931.365520][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 931.365539][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 931.365562][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 931.365579][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 931.365614][ C0] ? reacquire_held_locks+0x104/0x190 [ 931.365638][ C0] ? ieee80211_rx_napi+0xd3/0x3e0 [ 931.365655][ C0] ieee80211_rx_napi+0x1b1/0x3e0 [ 931.365674][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 931.365699][ C0] ? rt_spin_unlock+0x160/0x200 [ 931.365720][ C0] ? skb_dequeue+0x11a/0x150 [ 931.365739][ C0] ieee80211_handle_queued_frames+0xe8/0x1e0 [ 931.365769][ C0] tasklet_action_common+0x2bf/0x540 [ 931.365802][ C0] handle_softirqs+0x1de/0x6f0 [ 931.365831][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 931.365858][ C0] run_ktimerd+0x69/0x100 [ 931.365887][ C0] smpboot_thread_fn+0x541/0xa50 [ 931.365916][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 931.365948][ C0] kthread+0x388/0x470 [ 931.365966][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 931.365993][ C0] ? __pfx_kthread+0x10/0x10 [ 931.366013][ C0] ret_from_fork+0x51e/0xb90 [ 931.366039][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 931.366064][ C0] ? __switch_to+0xc7d/0x1450 [ 931.366087][ C0] ? __pfx_kthread+0x10/0x10 [ 931.366107][ C0] ret_from_fork_asm+0x1a/0x30 [ 931.366132][ C0] [ 931.366302][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 931.366321][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 931.366347][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 931.366361][ T38] Call Trace: [ 931.366371][ T38] [ 931.366380][ T38] vpanic+0x56c/0xa60 [ 931.366419][ T38] ? __pfx_vpanic+0x10/0x10 [ 931.366462][ T38] panic+0xc5/0xd0 [ 931.366494][ T38] ? __pfx_panic+0x10/0x10 [ 931.366525][ T38] ? printk_trigger_flush+0x117/0x180 [ 931.366560][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 931.366597][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 931.366626][ T38] watchdog+0x1023/0x1030 [ 931.366659][ T38] ? watchdog+0x21a/0x1030 [ 931.366695][ T38] kthread+0x388/0x470 [ 931.366720][ T38] ? __pfx_watchdog+0x10/0x10 [ 931.366745][ T38] ? __pfx_kthread+0x10/0x10 [ 931.366771][ T38] ret_from_fork+0x51e/0xb90 [ 931.366807][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 931.366834][ T38] ? __switch_to+0xc7d/0x1450 [ 931.366864][ T38] ? __pfx_kthread+0x10/0x10 [ 931.366889][ T38] ret_from_fork_asm+0x1a/0x30 [ 931.366929][ T38] [ 931.367541][ T38] Kernel Offset: disabled