last executing test programs: 4m0.345634382s ago: executing program 3 (id=221): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000380)=[{0x4, 0x1200, 0x0, 0x0}], 0x1}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x63, 0xa850, 0x0, 0x0}], 0x1}) 3m58.813841637s ago: executing program 3 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x20004090) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/160, 0xa0}, {&(0x7f0000001c00)=""/4101, 0x1005}, {&(0x7f0000002c40)=""/189, 0xbd}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000002d40)=""/4123, 0x101b}, {&(0x7f0000000440)=""/81, 0x51}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x60, 0x0) 3m57.451791447s ago: executing program 3 (id=250): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) utime(&(0x7f0000000000)='./file0\x00', 0x0) 3m56.004544695s ago: executing program 3 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 3m55.785562942s ago: executing program 3 (id=265): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)={0x10, 0x2c, 0x1, 0xfffffffc}, 0x10}], 0x1, 0x0, 0x0, 0x40440d4}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000), 0x2}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 3m55.407855936s ago: executing program 3 (id=272): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f00000001c0)={0x1, 0x9, 0x0, 0x8}) 3m55.109677175s ago: executing program 32 (id=272): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f00000001c0)={0x1, 0x9, 0x0, 0x8}) 1m48.164523306s ago: executing program 0 (id=850): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x100000001, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) 1m35.404959068s ago: executing program 0 (id=850): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x100000001, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) 1m31.581695062s ago: executing program 1 (id=1627): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 1m31.389499057s ago: executing program 1 (id=1629): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x24008084) 1m30.775992546s ago: executing program 1 (id=1634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'wlan0\x00', 0xa00}) 1m30.467673752s ago: executing program 1 (id=1640): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x104e22}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m30.254664956s ago: executing program 1 (id=1645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="090800000000000000000100000008000100", @ANYRES32=r3], 0x98}}, 0x0) 1m28.724781737s ago: executing program 1 (id=1658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40) 1m28.292048746s ago: executing program 33 (id=1658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40) 1m21.950182562s ago: executing program 0 (id=850): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x100000001, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) 1m13.135488046s ago: executing program 0 (id=850): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x100000001, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) 1m1.248795003s ago: executing program 0 (id=850): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x100000001, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) 49.524566052s ago: executing program 0 (id=850): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x100000001, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) 1.96847317s ago: executing program 4 (id=2384): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)={0x58, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8, 0xa, 0x21}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.84771135s ago: executing program 6 (id=2387): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 1.736158273s ago: executing program 6 (id=2388): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x6}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000000c0)={0xfe}) 1.611912603s ago: executing program 4 (id=2389): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0049364, 0x0) 1.558297425s ago: executing program 4 (id=2391): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x28, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x101}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x58}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.49533495s ago: executing program 6 (id=2392): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d4, 0x6c}, 0x2, @in=@broadcast, 0x10000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.432471637s ago: executing program 4 (id=2393): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @random="000097a7ff00", 'veth0_to_hsr\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) close(r0) 1.36154618s ago: executing program 6 (id=2394): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x28) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) accept4(r0, 0x0, 0x0, 0x0) 1.343068904s ago: executing program 4 (id=2395): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0xffffffffffffffda}, 0x50) 1.269608783s ago: executing program 6 (id=2397): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x2c}}, 0x20000000) 1.198575381s ago: executing program 4 (id=2398): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0x0, 0x80000044, 0x2, 0xe, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.173858258s ago: executing program 6 (id=2400): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x6) 1.035992525s ago: executing program 5 (id=2401): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f030e0033e6120306001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xfdbc, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0xe, 0x6, @multicast}, 0x14) 1.035785957s ago: executing program 5 (id=2402): r0 = openat$kvm(0x0, &(0x7f0000000300), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)={0x79, 0x0, 0xd86}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) 836.063452ms ago: executing program 5 (id=2406): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x6) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 792.962527ms ago: executing program 5 (id=2407): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)='~', 0x1) 773.915812ms ago: executing program 2 (id=2408): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) llistxattr(&(0x7f0000000380)='./bus\x00', &(0x7f0000000400)=""/122, 0x11) 719.923456ms ago: executing program 5 (id=2409): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x120000, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 683.520395ms ago: executing program 2 (id=2410): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fcntl$notify(r0, 0x402, 0x2) 491.939376ms ago: executing program 2 (id=2411): r0 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x2, 0x157}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000004080)="17", 0x1}], 0x1, &(0x7f0000006a80)=ANY=[], 0x348}}], 0x1, 0xbc75a2656df7d18c) 454.304387ms ago: executing program 2 (id=2412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031006"], 0x4a) 324.748784ms ago: executing program 5 (id=2413): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigpending(0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) 228.968451ms ago: executing program 2 (id=2414): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) timer_create(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup=r1, 0xffffffffffffffff, 0x14, 0x0, 0x0, @void, @value=0x0}, 0x20) 0s ago: executing program 2 (id=2415): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) tkill(r1, 0x7) kernel console output (not intermixed with test programs): 238.919604][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.943030][ T30] audit: type=1400 audit(1750634359.619:180): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=9583 comm="syz.4.1440" path="/dev/nbd4" dev="devtmpfs" ino=683 [ 239.084253][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1441'. [ 239.125095][ T9587] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.134456][ T9587] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.144054][ T9587] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.153014][ T9587] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.169305][ T9559] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 239.185301][ T981] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input27 [ 239.203968][ T9587] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.213084][ T9587] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.222863][ T9587] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.232522][ T9587] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.264013][ T9589] sctp: [Deprecated]: syz.1.1442 (pid 9589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.264013][ T9589] Use struct sctp_sack_info instead [ 239.345884][ T5978] hsr_slave_0: left promiscuous mode [ 239.362360][ T5978] hsr_slave_1: left promiscuous mode [ 239.377377][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.395199][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.419857][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.431106][ T5935] usb 6-1: USB disconnect, device number 12 [ 239.437927][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.500560][ T5978] veth1_macvtap: left promiscuous mode [ 239.506285][ T5978] veth0_macvtap: left promiscuous mode [ 239.536530][ T5978] veth1_vlan: left promiscuous mode [ 239.541952][ T5978] veth0_vlan: left promiscuous mode [ 239.717021][ T30] audit: type=1326 audit(1750634360.399:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9596 comm="syz.4.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199178e929 code=0x7ffc0000 [ 239.747638][ T30] audit: type=1326 audit(1750634360.399:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9596 comm="syz.4.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199178e929 code=0x7ffc0000 [ 239.777093][ T30] audit: type=1326 audit(1750634360.429:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9596 comm="syz.4.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f199178e929 code=0x7ffc0000 [ 239.799695][ T30] audit: type=1326 audit(1750634360.429:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9596 comm="syz.4.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199178e929 code=0x7ffc0000 [ 239.822140][ T30] audit: type=1326 audit(1750634360.429:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9596 comm="syz.4.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199178e929 code=0x7ffc0000 [ 239.844699][ T30] audit: type=1326 audit(1750634360.459:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9596 comm="syz.4.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f199178e929 code=0x7ffc0000 [ 239.866554][ T30] audit: type=1326 audit(1750634360.459:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9596 comm="syz.4.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199178e929 code=0x7ffc0000 [ 239.894185][ T30] audit: type=1326 audit(1750634360.459:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9596 comm="syz.4.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199178e929 code=0x7ffc0000 [ 240.046710][ T5935] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 240.238791][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.258042][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.272656][ T5935] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 240.283186][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.301760][ T5935] usb 2-1: config 0 descriptor?? [ 240.631748][ T5978] team0 (unregistering): Port device team_slave_1 removed [ 240.715885][ T5978] team0 (unregistering): Port device team_slave_0 removed [ 240.728112][ T5935] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 240.744116][ T5935] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0016/input/input28 [ 240.920704][ T5935] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 240.943367][ T5935] usb 2-1: USB disconnect, device number 13 [ 241.048395][ T5825] Bluetooth: hci4: command tx timeout [ 241.803179][ T9579] chnl_net:caif_netlink_parms(): no params data found [ 241.896428][ T5879] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 241.924026][ T9579] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.931990][ T9579] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.939350][ T9579] bridge_slave_0: entered allmulticast mode [ 241.947111][ T9579] bridge_slave_0: entered promiscuous mode [ 241.954876][ T9579] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.962167][ T9579] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.970380][ T9579] bridge_slave_1: entered allmulticast mode [ 241.977829][ T9579] bridge_slave_1: entered promiscuous mode [ 242.019324][ T9579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.034281][ T9579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.046773][ T5879] usb 6-1: Using ep0 maxpacket: 32 [ 242.055656][ T5879] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 242.071417][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 242.082857][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 242.094337][ T5821] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 242.103004][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 242.110896][ T9579] team0: Port device team_slave_0 added [ 242.115870][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 242.126429][ T9579] team0: Port device team_slave_1 added [ 242.139853][ T5879] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 242.154630][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.163110][ T5879] usb 6-1: Product: syz [ 242.167909][ T5879] usb 6-1: Manufacturer: syz [ 242.172542][ T5879] usb 6-1: SerialNumber: syz [ 242.183109][ T5879] usb 6-1: config 0 descriptor?? [ 242.197521][ T9579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.204646][ T9579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.231239][ T9579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.245108][ T9579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.252911][ T9579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.256536][ T5821] usb 3-1: Using ep0 maxpacket: 16 [ 242.298438][ T5821] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.304146][ T9579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.326328][ T5821] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.355209][ T5821] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.365156][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.374125][ T5821] usb 3-1: Product: syz [ 242.391068][ T5821] usb 3-1: Manufacturer: syz [ 242.398955][ T5821] usb 3-1: SerialNumber: syz [ 242.434179][ T9579] hsr_slave_0: entered promiscuous mode [ 242.448102][ T9579] hsr_slave_1: entered promiscuous mode [ 242.454549][ T9579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.477101][ T9579] Cannot create hsr debugfs directory [ 242.556393][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 242.556413][ T30] audit: type=1326 audit(1750634363.229:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.1.1464" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc69ff8e929 code=0x0 [ 242.604416][ T5879] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 242.611720][ T5879] input input29: Device does not respond to id packet M [ 242.637561][ T5879] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 242.643719][ T5879] input input29: Device does not respond to id packet P [ 242.663509][ T5879] input input29: Device does not respond to id packet B [ 242.675411][ T9648] loop4: detected capacity change from 0 to 7 [ 242.690716][ T9648] Dev loop4: unable to read RDB block 7 [ 242.698501][ T9648] loop4: AHDI p1 p2 [ 242.703189][ T9648] loop4: partition table partially beyond EOD, truncated [ 242.710922][ T9648] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 242.830778][ T5821] usb 3-1: 0:2 : does not exist [ 242.872770][ T5879] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 242.886981][ T5879] input input29: Device does not respond to id packet N [ 242.918939][ T5879] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 242.947219][ T5879] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 242.968246][ T5879] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 242.975023][ T5879] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 242.989833][ T5879] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input29 [ 243.048107][ T5879] usb 6-1: USB disconnect, device number 13 [ 243.126875][ T5825] Bluetooth: hci4: command tx timeout [ 243.290232][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1470'. [ 243.299961][ T9658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1470'. [ 243.332359][ T9579] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 243.347263][ T9579] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 243.360543][ T9579] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 243.376952][ T9579] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 243.476931][ T981] usb 3-1: USB disconnect, device number 19 [ 243.617636][ T9579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.653663][ T9579] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.684863][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.692144][ T5978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.723254][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.730517][ T5978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.165482][ T9579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.231267][ T9579] veth0_vlan: entered promiscuous mode [ 244.245017][ T9579] veth1_vlan: entered promiscuous mode [ 244.285051][ T9579] veth0_macvtap: entered promiscuous mode [ 244.296405][ T9579] veth1_macvtap: entered promiscuous mode [ 244.318546][ T9579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.333526][ T9579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.349595][ T9579] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.358667][ T9579] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.368963][ T9579] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.388529][ T9579] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.560328][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.570717][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.639293][ T5983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.663038][ T5983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.196048][ T9717] tipc: Started in network mode [ 245.209878][ T9717] tipc: Node identity 7f000001, cluster identity 4711 [ 245.223033][ T9717] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.235253][ T9717] tipc: Enabled bearer , priority 10 [ 245.358677][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.497809][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.636457][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.776756][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.806179][ T9733] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1496'. [ 245.916800][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.056559][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.082569][ T6007] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.196411][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.236771][ T5935] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 246.342247][ T981] tipc: Node number set to 2130706433 [ 246.398915][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 246.411261][ T5935] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 246.420486][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.431669][ T5935] usb 6-1: config 0 descriptor?? [ 246.437548][ T9737] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 246.476438][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.746666][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.860019][ T5935] elan 0003:04F3:0755.0017: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 247.072495][ T6007] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.078934][ T5935] usb 6-1: USB disconnect, device number 14 [ 247.290873][ T6007] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.405086][ T9751] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1504'. [ 247.454651][ T6007] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.794197][ T6007] bridge_slave_1: left allmulticast mode [ 247.822825][ T6007] bridge_slave_1: left promiscuous mode [ 247.848481][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.915073][ T6007] bridge_slave_0: left allmulticast mode [ 247.955213][ T6007] bridge_slave_0: left promiscuous mode [ 247.986830][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.304442][ T9765] netlink: 4344 bytes leftover after parsing attributes in process `syz.1.1509'. [ 248.975431][ T5138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.987794][ T5138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.997771][ T5138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.010746][ T5138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.021464][ T5138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.568519][ T6007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.581505][ T6007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.592942][ T6007] bond0 (unregistering): Released all slaves [ 250.032868][ T30] audit: type=1326 audit(1750634370.709:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9791 comm="syz.4.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199178e929 code=0x7fc00000 [ 250.126407][ T6042] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 250.221707][ T6007] hsr_slave_0: left promiscuous mode [ 250.240998][ T6007] hsr_slave_1: left promiscuous mode [ 250.249751][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.262388][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.276646][ T6042] usb 2-1: Using ep0 maxpacket: 32 [ 250.278249][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.284479][ T6042] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 250.299066][ T6042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.306441][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.315523][ T6042] usb 2-1: config 0 descriptor?? [ 250.347731][ T6007] veth1_macvtap: left promiscuous mode [ 250.353348][ T6007] veth0_macvtap: left promiscuous mode [ 250.359878][ T6007] veth1_vlan: left promiscuous mode [ 250.365215][ T6007] veth0_vlan: left promiscuous mode [ 250.416430][ C0] net_ratelimit: 3 callbacks suppressed [ 250.416451][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 250.533338][ T6042] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 250.563050][ T6042] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 250.580205][ T5821] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 250.589570][ T6042] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 250.607693][ T6042] usb 2-1: media controller created [ 250.655011][ T6042] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.760270][ T30] audit: type=1326 audit(1750634371.429:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9791 comm="syz.4.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f199178e929 code=0x7fc00000 [ 250.794021][ T5821] usb 6-1: Using ep0 maxpacket: 16 [ 250.808827][ T5821] usb 6-1: config 1 has an invalid descriptor of length 233, skipping remainder of the config [ 250.828615][ T5821] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.856960][ T5821] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.882280][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.892367][ T5821] usb 6-1: Product: syz [ 250.896814][ T5821] usb 6-1: Manufacturer: syz [ 250.901521][ T5821] usb 6-1: SerialNumber: syz [ 251.047310][ T5825] Bluetooth: hci4: command tx timeout [ 251.147070][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 251.156672][ T6042] az6027: usb out operation failed. (-32) [ 251.162430][ T6042] stb0899_attach: Driver disabled by Kconfig [ 251.186363][ T6042] az6027: no front-end attached [ 251.186363][ T6042] [ 251.195284][ T6042] az6027: usb out operation failed. (-71) [ 251.207165][ T6007] team0 (unregistering): Port device team_slave_1 removed [ 251.210707][ T6042] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 251.233997][ T6042] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 251.254607][ T6042] dvb-usb: schedule remote query interval to 400 msecs. [ 251.262090][ T6042] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 251.276854][ T6042] usb 2-1: USB disconnect, device number 14 [ 251.286619][ T5935] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 251.313643][ T6007] team0 (unregistering): Port device team_slave_0 removed [ 251.323545][ T5821] usb 6-1: 0:2 : does not exist [ 251.378063][ T6042] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 251.457601][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 251.483445][ T5935] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.507687][ T5935] usb 5-1: config 0 has no interfaces? [ 251.513222][ T5935] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 251.522513][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.545493][ T5935] usb 5-1: config 0 descriptor?? [ 251.749353][ T5821] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 251.843039][ T5821] usb 6-1: USB disconnect, device number 15 [ 251.937437][ T24] usb 5-1: USB disconnect, device number 13 [ 252.396880][ T9776] chnl_net:caif_netlink_parms(): no params data found [ 252.486457][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.692872][ T9776] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.706830][ T9776] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.714319][ T9776] bridge_slave_0: entered allmulticast mode [ 252.722733][ T9776] bridge_slave_0: entered promiscuous mode [ 252.750407][ T9776] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.759502][ T9776] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.798391][ T9776] bridge_slave_1: entered allmulticast mode [ 252.808760][ T9776] bridge_slave_1: entered promiscuous mode [ 252.931674][ T9776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.952031][ T9776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.127424][ T5825] Bluetooth: hci4: command tx timeout [ 253.197488][ T9776] team0: Port device team_slave_0 added [ 253.264572][ T9776] team0: Port device team_slave_1 added [ 253.342602][ T9859] kvm: user requested TSC rate below hardware speed [ 253.435063][ T9776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.466728][ T9776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.526447][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 253.536988][ T9776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.573509][ T9776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.591061][ T9776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.706356][ T9776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.104961][ T9776] hsr_slave_0: entered promiscuous mode [ 254.146780][ T9776] hsr_slave_1: entered promiscuous mode [ 254.157241][ T9776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.195122][ T9776] Cannot create hsr debugfs directory [ 254.566518][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 254.783564][ T9897] batadv_slave_0: entered promiscuous mode [ 254.829783][ T9895] batadv_slave_0: left promiscuous mode [ 254.902556][ T9903] nullb0: AHDI p1 p2 [ 254.908247][ T9903] nullb0: p1 start 795240812 is beyond EOD, truncated [ 255.206547][ T5825] Bluetooth: hci4: command tx timeout [ 255.209642][ T9776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.240531][ T9776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.264095][ T9776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.314687][ T9776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.484589][ T9931] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000003 [ 255.606671][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 255.655081][ T9776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.710164][ T9776] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.772842][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.799189][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.806463][ T5978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.820845][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.828177][ T5978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.646414][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 256.892345][ T9776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.052635][ T9971] netlink: 'syz.5.1592': attribute type 4 has an invalid length. [ 257.065813][ T9971] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1592'. [ 257.118855][ T9776] veth0_vlan: entered promiscuous mode [ 257.162734][ T9776] veth1_vlan: entered promiscuous mode [ 257.276563][ T979] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 257.286438][ T5825] Bluetooth: hci4: command tx timeout [ 257.350622][ T9776] veth0_macvtap: entered promiscuous mode [ 257.361680][ T9776] veth1_macvtap: entered promiscuous mode [ 257.420370][ T9776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.458996][ T979] usb 5-1: Using ep0 maxpacket: 16 [ 257.471405][ T9776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.496915][ T979] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.512174][ T979] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 257.528090][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.565522][ T979] usb 5-1: config 0 descriptor?? [ 257.594531][ T9776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.610544][ T9776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.636387][ T9776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.652032][ T9776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.686798][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 257.904398][ T9993] vxcan1: entered allmulticast mode [ 257.978680][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.997789][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.017635][ T979] hid (null): invalid report_size 27418 [ 258.040316][ T979] hid (null): report_id 17018 is invalid [ 258.065358][ T979] hid (null): report_id 48117 is invalid [ 258.163568][ T6783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.191085][ T6783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.223370][ T979] usb 5-1: USB disconnect, device number 14 [ 258.616113][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'. [ 258.726662][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 259.104605][ T6783] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.270687][ T6783] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.439170][ T6783] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.544115][ T6783] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.645947][ T6783] bridge_slave_1: left allmulticast mode [ 259.651798][ T6783] bridge_slave_1: left promiscuous mode [ 259.658009][ T6783] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.668364][ T6783] bridge_slave_0: left allmulticast mode [ 259.674101][ T6783] bridge_slave_0: left promiscuous mode [ 259.680146][ T6783] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.776552][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 260.086571][ T6783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.097768][ T6783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.109434][ T6783] bond0 (unregistering): Released all slaves [ 260.519323][ T6783] hsr_slave_0: left promiscuous mode [ 260.536326][ T6783] hsr_slave_1: left promiscuous mode [ 260.552833][ T6783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.570395][T10031] sctp: [Deprecated]: syz.5.1614 (pid 10031) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.570395][T10031] Use struct sctp_sack_info instead [ 260.572208][ T6783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.658502][ T6783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.676575][ T6783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.717948][ T6783] veth1_macvtap: left promiscuous mode [ 260.724310][ T6783] veth0_macvtap: left promiscuous mode [ 260.740380][ T6783] veth1_vlan: left promiscuous mode [ 260.745816][ T6783] veth0_vlan: left promiscuous mode [ 260.806535][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 260.878169][ T5138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 260.890220][ T5138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 260.910261][ T5138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 260.920861][ T5138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 260.931375][ T5138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 261.720187][ T6783] team0 (unregistering): Port device team_slave_1 removed [ 261.782454][ T6783] team0 (unregistering): Port device team_slave_0 removed [ 261.846599][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 262.886431][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 262.970703][ T5825] Bluetooth: hci4: command tx timeout [ 263.328507][T10037] chnl_net:caif_netlink_parms(): no params data found [ 263.857002][T10037] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.864246][T10037] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.877600][T10037] bridge_slave_0: entered allmulticast mode [ 263.885921][T10037] bridge_slave_0: entered promiscuous mode [ 263.902546][T10037] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.912155][T10037] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.926511][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 263.933504][T10037] bridge_slave_1: entered allmulticast mode [ 263.950745][T10037] bridge_slave_1: entered promiscuous mode [ 264.143135][T10037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.180356][T10037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.312471][T10037] team0: Port device team_slave_0 added [ 264.332862][T10037] team0: Port device team_slave_1 added [ 264.356361][ T5935] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 264.531895][ T5935] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 264.556287][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.592813][ T5935] usb 5-1: config 0 descriptor?? [ 264.606924][T10037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.614478][T10037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.696432][T10037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.718013][T10037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.725177][T10037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.775254][T10037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.830711][ T5935] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 264.976640][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 265.011841][T10037] hsr_slave_0: entered promiscuous mode [ 265.032548][T10037] hsr_slave_1: entered promiscuous mode [ 265.046678][ T5825] Bluetooth: hci4: command tx timeout [ 265.051632][T10037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.074647][T10037] Cannot create hsr debugfs directory [ 265.226356][ T979] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 265.406596][ T979] usb 3-1: Using ep0 maxpacket: 8 [ 265.430414][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.442910][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.460737][ T979] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 265.477478][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.494941][ T979] usb 3-1: config 0 descriptor?? [ 265.563491][ T5978] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.660359][ T5935] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 265.677855][ T5935] asix 5-1:0.0: probe with driver asix failed with error -71 [ 265.692709][ T5978] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.706126][ T5935] usb 5-1: USB disconnect, device number 15 [ 265.785129][ T5978] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.860136][ T5978] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.922633][ T979] uclogic 0003:2179:0053.0019: interface is invalid, ignoring [ 266.008716][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 266.071590][T10037] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 266.113174][T10037] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 266.130439][T10037] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 266.142698][ T979] usb 3-1: USB disconnect, device number 20 [ 266.182344][T10037] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 266.278962][ T5978] bridge_slave_1: left allmulticast mode [ 266.284668][ T5978] bridge_slave_1: left promiscuous mode [ 266.306713][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.315729][ T5978] bridge_slave_0: left allmulticast mode [ 266.336496][ T5978] bridge_slave_0: left promiscuous mode [ 266.342256][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.464738][ T5138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 266.486366][ T5138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 266.497219][ T5138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 266.521139][ T5138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 266.536392][ T5907] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 266.536935][ T5138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 266.688192][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 266.703498][ T5907] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 266.726817][ T5907] usb 5-1: config 0 has no interface number 0 [ 266.736422][ T5907] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.765436][ T5907] usb 5-1: config 0 interface 85 has no altsetting 0 [ 266.783678][ T5907] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 266.806391][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.814458][ T5907] usb 5-1: Product: syz [ 266.836325][ T5907] usb 5-1: Manufacturer: syz [ 266.840992][ T5907] usb 5-1: SerialNumber: syz [ 266.851022][ T5907] usb 5-1: config 0 descriptor?? [ 267.056478][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 267.104965][ T5978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.122508][ T5978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.134325][ T5978] bond0 (unregistering): Released all slaves [ 267.136725][ T5825] Bluetooth: hci4: command tx timeout [ 267.195960][T10151] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1662'. [ 267.264915][ T5978] tipc: Left network mode [ 267.487107][ T5907] appletouch 5-1:0.85: Geyser mode initialized. [ 267.511803][ T5907] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input31 [ 267.709415][ T5907] usb 5-1: USB disconnect, device number 16 [ 267.731249][ T5978] hsr_slave_0: left promiscuous mode [ 267.746149][ T5978] hsr_slave_1: left promiscuous mode [ 267.746644][ T5907] appletouch 5-1:0.85: input: appletouch disconnected [ 267.759198][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.773501][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.797253][ T5978] veth1_macvtap: left promiscuous mode [ 267.803005][ T5978] veth0_macvtap: left promiscuous mode [ 268.086393][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 268.576887][ T5978] team0 (unregistering): Port device team_slave_1 removed [ 268.635047][ T5978] team0 (unregistering): Port device team_slave_0 removed [ 268.646824][ T5825] Bluetooth: hci0: command tx timeout [ 269.136436][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 269.206861][ T5825] Bluetooth: hci4: command tx timeout [ 269.283240][T10037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.452631][T10037] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.498980][T10193] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.544437][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.551783][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.571550][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.578809][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.589070][T10194] sctp: [Deprecated]: syz.2.1679 (pid 10194) Use of int in max_burst socket option deprecated. [ 269.589070][T10194] Use struct sctp_assoc_value instead [ 269.778506][T10037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.831329][T10146] chnl_net:caif_netlink_parms(): no params data found [ 270.166664][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 270.199942][T10146] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.222681][T10146] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.236622][ T5879] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 270.239797][T10146] bridge_slave_0: entered allmulticast mode [ 270.273301][T10146] bridge_slave_0: entered promiscuous mode [ 270.291099][T10146] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.300391][T10146] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.308915][T10146] bridge_slave_1: entered allmulticast mode [ 270.320289][T10146] bridge_slave_1: entered promiscuous mode [ 270.408541][T10146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.422507][T10146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.423799][ T5879] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 270.448672][ T5879] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 270.459473][ T5879] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 270.469070][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.481665][T10203] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 270.494130][ T5879] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 270.507073][ T5907] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 270.524185][T10037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.561667][T10146] team0: Port device team_slave_0 added [ 270.580984][T10146] team0: Port device team_slave_1 added [ 270.661039][T10146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.677809][T10146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.710987][T10146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.724998][T10146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.732480][ T5825] Bluetooth: hci0: command tx timeout [ 270.738207][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 270.751456][T10146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.781478][ T5907] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 270.790914][ T5907] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.801332][T10146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.812504][ T5907] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.826145][ T5907] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 270.835978][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.856603][ T5907] usb 5-1: Product: syz [ 270.876130][ T979] usb 3-1: USB disconnect, device number 21 [ 270.893146][ T5907] usb 5-1: Manufacturer: syz [ 270.898610][T10037] veth0_vlan: entered promiscuous mode [ 270.910625][ T5907] usb 5-1: SerialNumber: syz [ 270.941920][T10037] veth1_vlan: entered promiscuous mode [ 270.975515][T10146] hsr_slave_0: entered promiscuous mode [ 270.982624][T10146] hsr_slave_1: entered promiscuous mode [ 270.989521][T10146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.998554][T10146] Cannot create hsr debugfs directory [ 271.169198][T10037] veth0_macvtap: entered promiscuous mode [ 271.202152][T10037] veth1_macvtap: entered promiscuous mode [ 271.216484][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 271.278154][T10037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.324239][T10037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.399667][T10037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.436594][T10037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.466623][T10037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.476012][T10037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.501499][T10146] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 271.548377][T10146] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 271.604650][T10146] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 271.622063][T10146] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 271.762898][ T5983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.778768][ T5983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.849944][ T5978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.861714][ T5978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.962651][T10146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.023355][T10146] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.112387][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.119655][ T5983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.141762][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.149016][ T5983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.246767][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 272.470049][ T6007] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.613971][ T6007] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.720079][ T6007] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.762121][T10146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.810053][ T5825] Bluetooth: hci0: command tx timeout [ 272.839001][ T6007] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.015316][ T6007] bridge_slave_1: left allmulticast mode [ 273.022541][ T6007] bridge_slave_1: left promiscuous mode [ 273.030458][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.042754][ T6007] bridge_slave_0: left allmulticast mode [ 273.054445][ T6007] bridge_slave_0: left promiscuous mode [ 273.060958][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.286419][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 273.450508][ T6007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.463034][ T6007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.473930][ T6007] bond0 (unregistering): Released all slaves [ 273.603059][T10146] veth0_vlan: entered promiscuous mode [ 273.625437][T10146] veth1_vlan: entered promiscuous mode [ 273.704669][T10146] veth0_macvtap: entered promiscuous mode [ 273.725610][T10146] veth1_macvtap: entered promiscuous mode [ 273.765487][ T6007] hsr_slave_0: left promiscuous mode [ 273.838290][ T6007] hsr_slave_1: left promiscuous mode [ 273.848766][ T5907] usb 5-1: 0:2 : does not exist [ 273.885837][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.894764][ T5825] Bluetooth: hci2: unexpected event for opcode 0x080f [ 273.926506][ T5907] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 273.943641][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.965094][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.983400][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.993992][ T5907] usb 5-1: USB disconnect, device number 17 [ 274.030811][ T6007] veth1_macvtap: left promiscuous mode [ 274.040056][ T6007] veth0_macvtap: left promiscuous mode [ 274.045800][ T6007] veth1_vlan: left promiscuous mode [ 274.057691][ T6007] veth0_vlan: left promiscuous mode [ 274.284224][ T24] kernel write not supported for file /snd/pcmC0D0p (pid: 24 comm: kworker/1:0) [ 274.326601][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 274.493012][ T5138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.511753][ T5138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.529520][ T5138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.545599][ T5138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.554724][ T5138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.886400][ T5138] Bluetooth: hci0: command tx timeout [ 274.941953][T10277] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1704'. [ 275.133444][T10285] Context (ID=0x0) not attached to queue pair (handle=0x0:0x9) [ 275.366446][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 275.401229][ T6007] team0 (unregistering): Port device team_slave_1 removed [ 275.416500][ T5907] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 275.465085][ T6007] team0 (unregistering): Port device team_slave_0 removed [ 275.589979][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 275.611001][ T5907] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 275.625679][ T5907] usb 3-1: config 0 has no interface number 0 [ 275.634334][ T5907] usb 3-1: config 0 interface 85 has no altsetting 0 [ 275.647328][ T5907] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 275.661671][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.670298][ T5907] usb 3-1: Product: syz [ 275.675255][ T5907] usb 3-1: Manufacturer: syz [ 275.680372][ T5907] usb 3-1: SerialNumber: syz [ 275.697923][ T5907] usb 3-1: config 0 descriptor?? [ 275.707772][ T5907] appletouch 3-1:0.85: Could not find int-in endpoint [ 275.714657][ T5907] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 275.727107][ T5907] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 275.826496][ T981] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 276.006773][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.018604][ T5907] usb 3-1: USB disconnect, device number 22 [ 276.030560][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.042105][ T981] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 276.059896][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.101060][ T981] usb 5-1: config 0 descriptor?? [ 276.179636][T10146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.230572][T10146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.295494][T10146] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.309035][T10146] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.336004][T10146] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.352788][T10146] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.409605][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 276.530608][ T981] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 276.538781][ T981] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 276.552750][ T981] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.001A/input/input32 [ 276.582461][ T981] cm6533_jd 0003:0D8C:0022.001A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 276.647720][ T5825] Bluetooth: hci4: command tx timeout [ 276.671777][T10265] chnl_net:caif_netlink_parms(): no params data found [ 276.733393][ T5879] usb 5-1: USB disconnect, device number 18 [ 276.749112][ T5966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.772615][ T5966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.915331][T10265] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.936809][T10265] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.944117][T10265] bridge_slave_0: entered allmulticast mode [ 276.952725][T10265] bridge_slave_0: entered promiscuous mode [ 276.963116][ T6007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.967274][T10265] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.985911][T10265] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.993853][T10265] bridge_slave_1: entered allmulticast mode [ 276.997941][ T6007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.002471][T10265] bridge_slave_1: entered promiscuous mode [ 277.082946][T10265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.105673][T10265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.223947][T10265] team0: Port device team_slave_0 added [ 277.251240][T10265] team0: Port device team_slave_1 added [ 277.280069][T10321] Bluetooth: MGMT ver 1.23 [ 277.383709][T10265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.397794][T10265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.433703][T10265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.446419][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 277.457161][T10265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.464136][T10265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.491015][T10265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.651652][T10265] hsr_slave_0: entered promiscuous mode [ 277.659058][T10265] hsr_slave_1: entered promiscuous mode [ 277.677239][T10265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.684862][T10265] Cannot create hsr debugfs directory [ 277.866514][ T6042] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 277.927091][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 277.938633][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 277.948211][ T5832] Bluetooth: hci2: hardware error 0x00 [ 277.959008][T10340] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1727'. [ 278.038422][ T6042] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 278.053020][ T6042] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 278.072178][ T6042] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 278.112828][ T6042] usb 6-1: config 220 has no interface number 2 [ 278.122047][ T6042] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 278.136039][T10346] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1730'. [ 278.154792][ T6042] usb 6-1: config 220 interface 0 has no altsetting 0 [ 278.172548][ T6042] usb 6-1: config 220 interface 76 has no altsetting 0 [ 278.192792][ T6042] usb 6-1: config 220 interface 1 has no altsetting 0 [ 278.232052][ T6042] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 278.270458][ T6042] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.279269][ T5907] Process accounting resumed [ 278.279520][ T6042] usb 6-1: Product: syz [ 278.294733][ T6042] usb 6-1: Manufacturer: syz [ 278.303375][ T6042] usb 6-1: SerialNumber: syz [ 278.481662][T10265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 278.496455][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 278.498084][T10265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 278.544495][T10265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 278.569305][ T6042] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 278.575721][ T6042] usb 6-1: No valid video chain found. [ 278.593165][T10265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 278.604064][ T6042] usb 6-1: selecting invalid altsetting 0 [ 278.636022][ T6042] usb 6-1: selecting invalid altsetting 0 [ 278.653219][ T5907] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 278.653363][ T6042] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 278.682206][ T6042] usb 6-1: USB disconnect, device number 16 [ 278.729778][ T51] Bluetooth: hci4: command tx timeout [ 278.799753][T10265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.817439][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 278.824883][ T5907] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.836173][ T5907] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.845921][T10265] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.853176][ T5907] usb 5-1: config 0 interface 0 has no altsetting 0 [ 278.863204][ T5907] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 278.871525][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.876272][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.879517][ T5966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.891602][ T5907] usb 5-1: config 0 descriptor?? [ 278.912459][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.919637][ T5983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.997017][ T981] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 279.156832][ T981] usb 7-1: Using ep0 maxpacket: 8 [ 279.171710][ T981] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 279.184442][ T981] usb 7-1: config 179 has no interface number 0 [ 279.195240][ T981] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 279.218141][ T981] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 279.238276][ T981] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 279.253737][ T981] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 279.270451][ T981] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 279.271763][T10265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.284764][ T981] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 279.302922][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 279.337898][ T5907] hid (null): report_id 0 is invalid [ 279.347164][ T981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.367412][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 279.367614][ T5138] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 279.375161][T10368] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 279.391002][ T5907] cougar 0003:060B:500A.001B: unknown main item tag 0x0 [ 279.398232][ T5907] cougar 0003:060B:500A.001B: unknown main item tag 0x0 [ 279.405263][ T5907] cougar 0003:060B:500A.001B: unknown main item tag 0x0 [ 279.423021][ T5907] cougar 0003:060B:500A.001B: unknown main item tag 0x0 [ 279.454446][ T5907] cougar 0003:060B:500A.001B: unknown main item tag 0x0 [ 279.471320][ T5907] cougar 0003:060B:500A.001B: report_id 0 is invalid [ 279.482571][ T5907] cougar 0003:060B:500A.001B: item 0 1 1 8 parsing failed [ 279.504785][ T5907] cougar 0003:060B:500A.001B: parse failed [ 279.507193][T10265] veth0_vlan: entered promiscuous mode [ 279.511242][ T5907] cougar 0003:060B:500A.001B: probe with driver cougar failed with error -22 [ 279.526666][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 279.565506][T10265] veth1_vlan: entered promiscuous mode [ 279.569467][ T5907] usb 5-1: USB disconnect, device number 19 [ 279.633631][T10265] veth0_macvtap: entered promiscuous mode [ 279.680354][T10265] veth1_macvtap: entered promiscuous mode [ 279.737341][T10265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.776034][T10265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.801437][T10265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.810711][T10265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.820896][T10265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.831905][T10265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.940224][ T24] usb 7-1: USB disconnect, device number 2 [ 279.940270][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 279.955484][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 279.978333][ T6007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.986176][ T6007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.006678][ T5832] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 280.040207][ T6007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.058670][ T6007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.271220][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1746'. [ 280.566466][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 280.996332][ T5879] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 281.178995][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.204130][ T5966] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.215663][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 281.229646][ T5879] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 281.248214][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.295193][ T5879] usb 3-1: config 0 descriptor?? [ 281.302805][ T5879] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 281.606396][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 282.023153][ T5879] usb 3-1: USB disconnect, device number 23 [ 282.053349][ T5966] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.585893][T10422] netlink: 'syz.4.1762': attribute type 29 has an invalid length. [ 282.646514][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 282.658575][T10425] netlink: 'syz.4.1762': attribute type 29 has an invalid length. [ 282.684762][T10422] netlink: 492 bytes leftover after parsing attributes in process `syz.4.1762'. [ 283.198617][ T5966] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.255770][ T5138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 283.287750][ T5138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 283.298996][ T5138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 283.309590][ T5138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 283.322947][ T5138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.485977][ T5966] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.686498][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 284.047538][T10454] could not open pipe file descriptor [ 284.156607][ T5966] bridge_slave_1: left allmulticast mode [ 284.162341][ T5966] bridge_slave_1: left promiscuous mode [ 284.189658][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.244198][ T5966] bridge_slave_0: left allmulticast mode [ 284.251888][ T5966] bridge_slave_0: left promiscuous mode [ 284.265695][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.726434][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 284.810591][ T5879] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 284.959038][T10483] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 284.994019][ T5879] usb 7-1: Using ep0 maxpacket: 32 [ 285.003868][ T5879] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 285.032112][ T5879] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 285.042846][ T5879] usb 7-1: config 0 interface 0 has no altsetting 0 [ 285.063342][ T5879] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 285.086300][ T5879] usb 7-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 285.115248][ T5879] usb 7-1: Product: syz [ 285.120440][ T5879] usb 7-1: Manufacturer: syz [ 285.125095][ T5879] usb 7-1: SerialNumber: syz [ 285.152084][ T5879] usb 7-1: config 0 descriptor?? [ 285.161575][ T5966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.174061][ T5966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.186777][ T5966] bond0 (unregistering): Released all slaves [ 285.366654][ T5138] Bluetooth: hci4: command tx timeout [ 285.456812][T10437] chnl_net:caif_netlink_parms(): no params data found [ 285.596685][ T981] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 285.620818][ T5879] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 285.636637][ T5966] hsr_slave_0: left promiscuous mode [ 285.653736][ T5966] hsr_slave_1: left promiscuous mode [ 285.661260][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.675040][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.684252][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.692253][ T5935] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 285.697714][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.723120][ T5966] veth1_macvtap: left promiscuous mode [ 285.729422][ T5966] veth0_macvtap: left promiscuous mode [ 285.735210][ T5966] veth1_vlan: left promiscuous mode [ 285.741247][ T5966] veth0_vlan: left promiscuous mode [ 285.756374][ T981] usb 5-1: Using ep0 maxpacket: 16 [ 285.767153][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 285.774533][ T981] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 285.784189][ T981] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.795647][ T981] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.808133][ T981] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.818896][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.827518][ T981] usb 5-1: Product: syz [ 285.831983][ T981] usb 5-1: Manufacturer: syz [ 285.837018][ T981] usb 5-1: SerialNumber: syz [ 285.866422][ T5935] usb 6-1: Using ep0 maxpacket: 32 [ 285.877772][ T5935] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 285.885957][ T5935] usb 6-1: config 0 has no interface number 0 [ 285.892530][ T5935] usb 6-1: config 0 interface 12 has no altsetting 0 [ 285.902319][ T5935] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 285.914632][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.923355][ T5935] usb 6-1: Product: syz [ 285.935899][ T5935] usb 6-1: Manufacturer: syz [ 285.944416][ T5935] usb 6-1: SerialNumber: syz [ 285.953896][ T5935] usb 6-1: config 0 descriptor?? [ 286.035311][ T5879] gs_usb 7-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 286.050151][ T5879] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -22 [ 286.258938][ T979] usb 7-1: USB disconnect, device number 3 [ 286.304383][ T981] usb 5-1: 0:2 : does not exist [ 286.522335][ T5966] team0 (unregistering): Port device team_slave_1 removed [ 286.575655][ T5966] team0 (unregistering): Port device team_slave_0 removed [ 286.808110][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 286.951591][ T981] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 286.995405][ T5935] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 287.028405][ T5935] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 287.035776][ T5935] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 287.056729][ T981] usb 5-1: USB disconnect, device number 20 [ 287.083824][ T5935] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 287.117113][ T5935] usb 6-1: USB disconnect, device number 17 [ 287.321172][T10500] team0: Device gre1 is of different type [ 287.357795][T10437] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.365161][T10437] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.373112][T10437] bridge_slave_0: entered allmulticast mode [ 287.380601][T10437] bridge_slave_0: entered promiscuous mode [ 287.390060][T10437] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.397669][T10437] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.406544][T10437] bridge_slave_1: entered allmulticast mode [ 287.414687][T10437] bridge_slave_1: entered promiscuous mode [ 287.447998][ T5138] Bluetooth: hci4: command tx timeout [ 287.662681][T10517] netlink: 71 bytes leftover after parsing attributes in process `syz.5.1797'. [ 287.676154][T10510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.683760][T10510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.694690][T10510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.702382][T10510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.812006][T10437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.846509][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 287.847039][T10437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.893591][ T981] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 288.040022][T10437] team0: Port device team_slave_0 added [ 288.056457][ T981] usb 7-1: Using ep0 maxpacket: 32 [ 288.071565][T10437] team0: Port device team_slave_1 added [ 288.072295][ T981] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.105227][ T981] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.119552][ T981] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 288.128902][ T981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.147084][ T981] usb 7-1: config 0 descriptor?? [ 288.244713][T10437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.255134][T10437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.306734][T10526] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1802'. [ 288.318183][T10437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.359236][T10526] team0: entered promiscuous mode [ 288.376738][T10526] team_slave_0: entered promiscuous mode [ 288.383612][T10526] team_slave_1: entered promiscuous mode [ 288.392510][T10526] batadv_slave_1: entered promiscuous mode [ 288.608663][ T981] ft260 0003:0403:6030.001C: unknown main item tag 0x0 [ 288.656512][T10437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.663519][T10437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.706732][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1804'. [ 288.733443][T10437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.780745][ T981] ft260 0003:0403:6030.001C: chip code: 6424 8183 [ 288.803220][T10536] syzkaller1: entered promiscuous mode [ 288.822206][T10536] syzkaller1: entered allmulticast mode [ 288.830993][T10537] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44 [ 288.886559][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 288.996075][ T981] ft260 0003:0403:6030.001C: failed to retrieve system status [ 289.016730][ T981] ft260 0003:0403:6030.001C: probe with driver ft260 failed with error -32 [ 289.029319][ T981] usb 7-1: USB disconnect, device number 4 [ 289.082558][T10437] hsr_slave_0: entered promiscuous mode [ 289.095107][T10437] hsr_slave_1: entered promiscuous mode [ 289.128868][T10437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.156472][T10437] Cannot create hsr debugfs directory [ 289.527148][ T5138] Bluetooth: hci4: command tx timeout [ 289.558649][T10552] vcan0: tx drop: invalid sa for name 0x0000000000080000 [ 289.926632][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 289.976511][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 289.981467][T10437] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 290.002595][T10437] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 290.029810][T10437] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 290.045410][T10437] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 290.136464][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 290.146954][ T24] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 290.161011][ T24] usb 5-1: config 179 has no interface number 0 [ 290.173856][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 290.199805][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 290.204667][T10437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.237782][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 290.250066][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 290.256927][T10437] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.262647][ T24] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 290.288073][ T24] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 290.300092][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.313593][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.320756][ T5983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.333401][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.340642][ T5983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.352624][T10555] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 290.655483][T10555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.677875][T10555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.700972][ T5935] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 290.878994][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.890524][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.903698][ T5935] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 290.911035][T10437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.917581][ T5935] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.955309][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.966411][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 290.994030][ T5935] usb 6-1: config 0 descriptor?? [ 291.095619][T10437] veth0_vlan: entered promiscuous mode [ 291.125458][T10437] veth1_vlan: entered promiscuous mode [ 291.155497][ T979] usb 5-1: USB disconnect, device number 21 [ 291.155509][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 291.161510][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 291.215899][T10437] veth0_macvtap: entered promiscuous mode [ 291.240123][T10437] veth1_macvtap: entered promiscuous mode [ 291.285237][T10437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.307430][T10437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.325820][T10437] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.338914][T10437] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.348795][T10437] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.357730][T10437] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.461677][ T5935] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 291.502411][ T5935] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 291.534693][ T5983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.556382][ T5983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.606937][ T5138] Bluetooth: hci4: command tx timeout [ 291.655499][ T5966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.663644][ T5966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.777580][ T5879] usb 6-1: USB disconnect, device number 18 [ 291.913842][ T30] audit: type=1326 audit(1750634412.589:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10602 comm="syz.6.1831" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ba5d8e929 code=0x0 [ 292.006543][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 293.046390][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 293.125827][T10626] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 293.236041][ T5991] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.835405][ T5991] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.074567][ T5991] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.096481][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 294.170880][ T5991] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.280806][ T5991] bridge_slave_1: left allmulticast mode [ 294.288564][ T5991] bridge_slave_1: left promiscuous mode [ 294.294318][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.303806][ T5991] bridge_slave_0: left allmulticast mode [ 294.311111][ T5991] bridge_slave_0: left promiscuous mode [ 294.317130][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.674735][ T5991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.687311][ T5991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.706510][ T5991] bond0 (unregistering): Released all slaves [ 294.825068][T10637] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 295.072538][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1848'. [ 295.136399][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 295.362102][T10654] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.1852'. [ 295.521475][ T5991] hsr_slave_0: left promiscuous mode [ 295.541692][ T5991] hsr_slave_1: left promiscuous mode [ 295.549079][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.571553][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.584837][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.599162][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 295.610837][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 295.619396][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.626764][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 295.635052][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 295.645048][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 295.694924][ T5991] veth1_macvtap: left promiscuous mode [ 295.701605][ T5991] veth0_macvtap: left promiscuous mode [ 295.707519][ T5991] veth1_vlan: left promiscuous mode [ 295.713762][ T5991] veth0_vlan: left promiscuous mode [ 296.166436][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 296.319669][T10686] netlink: 'syz.2.1866': attribute type 1 has an invalid length. [ 296.336461][T10686] netlink: 'syz.2.1866': attribute type 2 has an invalid length. [ 296.358465][ T981] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 296.395811][T10687] netlink: 'syz.2.1866': attribute type 1 has an invalid length. [ 296.416470][T10687] netlink: 'syz.2.1866': attribute type 2 has an invalid length. [ 296.550495][ T981] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 296.577996][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.589787][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.614786][ T981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 296.638354][ T981] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 296.662412][ T981] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 296.671595][ T981] usb 6-1: Manufacturer: syz [ 296.688335][ T981] usb 6-1: config 0 descriptor?? [ 296.955600][ T5991] team0 (unregistering): Port device team_slave_1 removed [ 297.042439][ T5991] team0 (unregistering): Port device team_slave_0 removed [ 297.133792][ T981] appleir 0003:05AC:8243.001E: unknown main item tag 0x0 [ 297.147343][ T981] appleir 0003:05AC:8243.001E: No inputs registered, leaving [ 297.180069][ T981] appleir 0003:05AC:8243.001E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 297.216490][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 297.423777][ T24] usb 6-1: USB disconnect, device number 19 [ 297.686794][ T5832] Bluetooth: hci4: command tx timeout [ 297.743689][T10693] netlink: 'syz.4.1869': attribute type 2 has an invalid length. [ 298.082364][T10664] chnl_net:caif_netlink_parms(): no params data found [ 298.246450][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 298.537470][T10715] veth0: entered promiscuous mode [ 298.562407][T10664] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.579669][T10664] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.590489][T10664] bridge_slave_0: entered allmulticast mode [ 298.608545][T10664] bridge_slave_0: entered promiscuous mode [ 298.622139][T10714] veth0: left promiscuous mode [ 298.629156][T10664] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.647091][T10664] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.664596][T10664] bridge_slave_1: entered allmulticast mode [ 298.677094][T10664] bridge_slave_1: entered promiscuous mode [ 298.883892][T10664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.919602][T10664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.082019][T10664] team0: Port device team_slave_0 added [ 299.099293][T10736] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 299.121100][T10664] team0: Port device team_slave_1 added [ 299.137567][T10736] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 299.279981][T10664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.286859][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 299.307552][T10664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.364624][T10664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.393064][T10664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.427484][T10664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.517175][T10664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.743336][T10664] hsr_slave_0: entered promiscuous mode [ 299.758367][T10664] hsr_slave_1: entered promiscuous mode [ 299.765078][T10664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.773394][ T5832] Bluetooth: hci4: command tx timeout [ 299.779726][T10664] Cannot create hsr debugfs directory [ 299.988456][T10754] loop8: detected capacity change from 0 to 1 [ 300.009878][T10754] Dev loop8: unable to read RDB block 1 [ 300.015553][T10754] loop8: unable to read partition table [ 300.040509][T10754] loop8: partition table beyond EOD, truncated [ 300.052910][T10754] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 300.326481][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 300.446065][T10767] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1900'. [ 300.457353][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1900'. [ 300.495957][T10767] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1900'. [ 300.909114][T10664] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 300.931053][T10664] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 300.956537][T10664] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 300.970762][T10664] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.069646][ T981] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 301.175741][T10664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.226395][T10664] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.241634][ T981] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.254490][ T6783] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.261763][ T6783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.292224][ T981] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.313263][ T981] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.328040][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.335339][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.351523][ T981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.364828][ T981] usb 7-1: Product: syz [ 301.369221][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 301.388679][ T981] usb 7-1: Manufacturer: syz [ 301.401495][ T981] usb 7-1: SerialNumber: syz [ 301.636978][ T981] usb 7-1: 0:2 : does not exist [ 301.669741][ T981] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 301.765643][ T981] usb 7-1: USB disconnect, device number 5 [ 301.858045][ T5832] Bluetooth: hci4: command tx timeout [ 302.313199][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1914'. [ 302.374716][T10664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.406608][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 302.418271][T10814] sctp: [Deprecated]: syz.6.1916 (pid 10814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.418271][T10814] Use struct sctp_sack_info instead [ 302.536104][T10664] veth0_vlan: entered promiscuous mode [ 302.581008][T10664] veth1_vlan: entered promiscuous mode [ 302.697918][T10664] veth0_macvtap: entered promiscuous mode [ 302.719431][T10664] veth1_macvtap: entered promiscuous mode [ 302.782537][T10664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.815377][T10664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.848587][T10664] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.867662][T10664] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.886931][T10664] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.906353][T10664] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.980959][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 303.156127][ T5983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.181105][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 303.186546][ T5983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.204644][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.256283][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.283840][ T24] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 303.307071][ T981] kernel write not supported for file /i2c-0 (pid: 981 comm: kworker/0:3) [ 303.308438][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.355151][ T6783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.373019][ T24] usb 7-1: config 0 descriptor?? [ 303.381733][ T6783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.446450][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 304.224831][ T24] letsketch 0003:6161:4D15.001F: Device info: ఁ [ 304.458054][ T24] usb 7-1: Max retries (5) exceeded reading string descriptor 201 [ 304.476618][ T24] letsketch 0003:6161:4D15.001F: probe with driver letsketch failed with error -71 [ 304.486457][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 304.501803][ T24] usb 7-1: USB disconnect, device number 6 [ 304.762037][ T5966] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.279802][ T5966] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.364662][ T5966] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.481747][ T5966] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.526604][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 305.647652][ T5966] bridge_slave_1: left allmulticast mode [ 305.653491][ T5966] bridge_slave_1: left promiscuous mode [ 305.663288][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.675065][ T5966] bridge_slave_0: left allmulticast mode [ 305.683007][ T5966] bridge_slave_0: left promiscuous mode [ 305.689935][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.227229][ T5966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.241803][ T5966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.252723][ T5966] bond0 (unregistering): Released all slaves [ 306.566415][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 307.017193][ T5966] hsr_slave_0: left promiscuous mode [ 307.043945][ T5966] hsr_slave_1: left promiscuous mode [ 307.056122][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.072016][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.101142][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.112326][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.213613][ T5966] veth1_macvtap: left promiscuous mode [ 307.233551][ T5966] veth0_macvtap: left promiscuous mode [ 307.249742][ T5966] veth1_vlan: left promiscuous mode [ 307.255925][ T5138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.263060][ T5966] veth0_vlan: left promiscuous mode [ 307.283563][ T5138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.294229][ T5138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.304242][ T5138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.312741][ T5138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.606511][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 308.646390][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 308.835697][ T5966] team0 (unregistering): Port device team_slave_1 removed [ 308.960845][ T5966] team0 (unregistering): Port device team_slave_0 removed [ 309.374727][ T5138] Bluetooth: hci4: command tx timeout [ 309.686369][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 310.536347][ T6045] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 310.726457][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 310.749426][ T6045] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.767489][ T6045] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.850574][ T6045] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 310.920174][ T6045] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.965695][ T6045] usb 3-1: config 0 descriptor?? [ 311.123584][ T6024] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 311.230789][T10891] chnl_net:caif_netlink_parms(): no params data found [ 311.267914][T10956] veth0: entered promiscuous mode [ 311.284949][T10956] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1977'. [ 311.309949][ T6024] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 311.319743][ T979] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 311.336493][ T6024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.356827][ T6024] usb 5-1: config 0 descriptor?? [ 311.367865][ T6024] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 311.448421][ T5138] Bluetooth: hci4: command tx timeout [ 311.498829][ T979] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.517126][ T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 311.533000][ T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 311.547102][ T979] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 311.582421][ T979] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 311.594003][ T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.611057][ T979] usb 6-1: config 0 descriptor?? [ 311.637274][T10953] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 311.681422][T10891] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.690004][T10891] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.698029][T10891] bridge_slave_0: entered allmulticast mode [ 311.708268][T10891] bridge_slave_0: entered promiscuous mode [ 311.721278][T10891] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.732457][T10891] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.740149][T10891] bridge_slave_1: entered allmulticast mode [ 311.749068][T10891] bridge_slave_1: entered promiscuous mode [ 311.766437][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 311.782013][ T6024] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 311.809694][ T6045] hid-led 0003:27B8:01ED.0020: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 311.834915][T10891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.851795][T10891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.873625][ T6045] hid-led 0003:27B8:01ED.0020: ThingM blink(1) initialized [ 311.919878][T10891] team0: Port device team_slave_0 added [ 311.932528][T10891] team0: Port device team_slave_1 added [ 311.971324][T10891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.978396][T10891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.005100][T10891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.018986][T10891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.026930][T10891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.049543][ T5907] usb 3-1: USB disconnect, device number 24 [ 312.054173][T10891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.112075][ T979] plantronics 0003:047F:FFFF.0021: reserved main item tag 0xd [ 312.124265][ T979] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 312.143241][ T979] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 312.164644][T10891] hsr_slave_0: entered promiscuous mode [ 312.168444][ T5935] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 312.182831][T10891] hsr_slave_1: entered promiscuous mode [ 312.189779][T10891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.200933][T10891] Cannot create hsr debugfs directory [ 312.334833][ T5935] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 312.344264][ T5935] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.365623][ T5935] usb 7-1: config 0 descriptor?? [ 312.369031][ T6045] usb 6-1: USB disconnect, device number 20 [ 312.373616][ T5935] cp210x 7-1:0.0: cp210x converter detected [ 312.392095][ T6024] gspca_cpia1: usb_control_msg 05, error -71 [ 312.404504][ T6024] cpia1 5-1:0.0: unexpected systemstate: 00 [ 312.414809][ T6024] usb 5-1: USB disconnect, device number 22 [ 312.753801][T10891] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 312.765657][T10891] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 312.781561][T10891] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 312.789357][ T5935] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 312.806457][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 312.810277][T10891] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 312.818877][ T5907] kernel read not supported for file /swradio5 (pid: 5907 comm: kworker/0:4) [ 313.021775][T10891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.033855][ T5935] usb 7-1: cp210x converter now attached to ttyUSB0 [ 313.079779][T10891] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.088462][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.088546][ T6007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.100088][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.100188][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.120011][T10982] 9pnet: p9_errstr2errno: server reported unknown error @ [ 313.216562][ T5935] usb 7-1: USB disconnect, device number 7 [ 313.235995][ T5935] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 313.263621][ T5935] cp210x 7-1:0.0: device disconnected [ 313.530822][ T5832] Bluetooth: hci4: command tx timeout [ 313.615248][T10891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.728260][T10891] veth0_vlan: entered promiscuous mode [ 313.763625][T10891] veth1_vlan: entered promiscuous mode [ 313.846755][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 313.860826][T10891] veth0_macvtap: entered promiscuous mode [ 313.888605][T10891] veth1_macvtap: entered promiscuous mode [ 313.949434][T10891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.979685][T10891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.021962][T10891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.045207][T10891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.057517][T10891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.071260][T10891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.360402][ T5978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.392238][ T5978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.510710][ T5978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.526402][ T979] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 314.545873][ T5978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.702415][T11019] sctp: [Deprecated]: syz.6.1998 (pid 11019) Use of int in max_burst socket option. [ 314.702415][T11019] Use struct sctp_assoc_value instead [ 314.703753][ T979] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 314.779590][ T979] usb 6-1: config 0 has no interface number 0 [ 314.810549][ T979] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 314.828123][ T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.842029][ T979] usb 6-1: Product: syz [ 314.882232][ T979] usb 6-1: Manufacturer: syz [ 314.887224][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 314.926412][ T979] usb 6-1: SerialNumber: syz [ 314.935298][ T979] usb 6-1: config 0 descriptor?? [ 315.169437][ T979] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 315.183810][ T979] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 315.216619][ T979] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 315.232044][ T979] usb 6-1: media controller created [ 315.263617][ T979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 315.435507][ T979] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 315.537520][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 315.591506][T11049] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2011'. [ 315.603885][T11049] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2011'. [ 315.616623][ T5138] Bluetooth: hci4: command tx timeout [ 315.623012][T11049] netlink: 'syz.6.2011': attribute type 6 has an invalid length. [ 315.632702][T11049] netlink: 'syz.6.2011': attribute type 5 has an invalid length. [ 315.640803][T11049] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2011'. [ 315.696721][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 315.704817][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 315.718772][ T9] usb 3-1: config 4 interface 0 has no altsetting 0 [ 315.730757][ T9] usb 3-1: string descriptor 0 read error: -22 [ 315.737971][ T9] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 315.748807][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.769623][ T9] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 315.786953][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 315.804222][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 315.811801][ T9] usb 3-1: media controller created [ 315.851607][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 315.936419][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 315.979091][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 316.006703][ T6042] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 316.054739][ T9] usb 3-1: USB disconnect, device number 25 [ 316.166968][ T6042] usb 7-1: Using ep0 maxpacket: 8 [ 316.178063][ T6042] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 316.187363][ T6042] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.195424][ T6042] usb 7-1: Product: syz [ 316.200141][ T6042] usb 7-1: Manufacturer: syz [ 316.204767][ T6042] usb 7-1: SerialNumber: syz [ 316.213527][ T6042] usb 7-1: config 0 descriptor?? [ 316.221520][ T6042] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 316.496579][ T979] usb 6-1: USB disconnect, device number 21 [ 316.966445][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 317.221824][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.234341][ T6042] gspca_sonixj: reg_w1 err -71 [ 317.316434][ T6042] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 317.329267][ T6042] usb 7-1: USB disconnect, device number 8 [ 318.006389][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 319.046401][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 319.359631][ T5879] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 319.536430][ T5879] usb 7-1: Using ep0 maxpacket: 32 [ 319.547793][ T5879] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.571569][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 319.592971][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 319.648035][ T5879] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 319.657520][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.676346][ T5879] usb 7-1: config 0 descriptor?? [ 319.682286][T11127] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 319.692119][ T5879] hub 7-1:0.0: USB hub found [ 319.915511][ T5879] hub 7-1:0.0: 2 ports detected [ 320.053141][T11154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2056'. [ 320.086402][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 320.129456][ T5879] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 320.144164][ T5879] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 320.161471][ T5879] usbhid 7-1:0.0: can't add hid device: -71 [ 320.168403][ T5879] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 320.209638][ T5879] usb 7-1: USB disconnect, device number 9 [ 321.126438][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 321.724348][T11190] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2072'. [ 321.899375][T11196] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 321.917307][T11196] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 322.166386][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 322.316574][ T6024] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 322.476734][ T6024] usb 6-1: Using ep0 maxpacket: 16 [ 322.499473][ T6024] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 322.523998][ T6024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 322.539201][ T6024] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 322.552241][ T6024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.560603][ T979] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 322.575295][ T6024] usb 6-1: Product: syz [ 322.583151][ T6024] usb 6-1: Manufacturer: syz [ 322.592413][ T6024] usb 6-1: SerialNumber: syz [ 322.601857][ T6024] usb 6-1: config 0 descriptor?? [ 322.611584][ T6024] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 322.623489][ T6024] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 322.726363][ T979] usb 7-1: Using ep0 maxpacket: 16 [ 322.734109][ T979] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 322.743217][ T979] usb 7-1: config 0 has no interface number 0 [ 322.756495][ T979] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.768967][ T979] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 322.785925][ T979] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 322.800673][ T979] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 322.817134][ T979] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 322.825568][ T979] usb 7-1: Product: syz [ 322.830828][ T979] usb 7-1: SerialNumber: syz [ 322.841886][ T979] usb 7-1: config 0 descriptor?? [ 322.848477][T11210] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 322.869844][ T979] cm109 7-1:0.8: invalid payload size 1024, expected 4 [ 322.891658][ T979] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input36 [ 323.065081][ C0] cm109 7-1:0.8: cm109_urb_irq_callback: urb status -71 [ 323.206477][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 323.223439][ T6024] em28xx 6-1:0.0: chip ID is em28174 [ 323.273705][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 323.273890][ T6045] usb 7-1: USB disconnect, device number 10 [ 323.280707][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 323.301126][ T6045] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 323.434324][ T6024] usb 6-1: USB disconnect, device number 22 [ 323.441861][ T6024] em28xx 6-1:0.0: Disconnecting em28xx [ 323.457812][ T6024] em28xx 6-1:0.0: Freeing device [ 323.496457][ T5879] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 323.645932][T11237] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 323.668623][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.679124][ T5879] usb 3-1: config 0 has no interfaces? [ 323.690598][ T5879] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 323.702955][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.714243][ T5879] usb 3-1: Product: syz [ 323.721018][ T5879] usb 3-1: Manufacturer: syz [ 323.725755][ T5879] usb 3-1: SerialNumber: syz [ 323.735201][ T5879] usb 3-1: config 0 descriptor?? [ 324.116876][ T6024] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 324.256530][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 324.276444][ T6024] usb 7-1: Using ep0 maxpacket: 16 [ 324.283352][ T6024] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 324.295256][ T6024] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 324.312054][ T6024] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 324.322433][ T6024] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.330849][ T6024] usb 7-1: Product: syz [ 324.335128][ T6024] usb 7-1: Manufacturer: syz [ 324.339850][ T6024] usb 7-1: SerialNumber: syz [ 324.347209][ T6024] usb 7-1: config 0 descriptor?? [ 324.354917][ T6024] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 324.364486][ T6024] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 324.960261][ T6024] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 324.969245][ T6024] em28xx 7-1:0.0: Config register raw data: 0x41 [ 325.182863][ T6024] usb 7-1: USB disconnect, device number 11 [ 325.194217][ T6024] em28xx 7-1:0.0: Disconnecting em28xx [ 325.203703][ T6024] em28xx 7-1:0.0: Freeing device [ 325.236356][ T6045] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 325.256377][T11269] input: syz1 as /devices/virtual/input/input38 [ 325.286473][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 325.497405][ T6045] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 325.515289][ T6045] usb 5-1: can't read configurations, error -71 [ 326.304914][ T979] usb 3-1: USB disconnect, device number 26 [ 326.326500][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 326.382371][T11295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2119'. [ 326.827016][ T979] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 326.988329][ T979] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 327.007472][ T979] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 327.037520][ T979] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 327.058129][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.274965][T11342] tipc: Started in network mode [ 327.281852][T11342] tipc: Node identity ac14142f, cluster identity 4711 [ 327.294111][T11342] tipc: New replicast peer: 0.0.0.0 [ 327.304639][T11342] tipc: Enabled bearer , priority 10 [ 327.315797][T11342] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 327.366421][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 327.481922][ T979] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 327.497916][ T979] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input39 [ 327.529309][ T979] input: failed to attach handler kbd to device input39, error: -5 [ 327.550168][ T979] usb 3-1: USB disconnect, device number 27 [ 328.416424][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 328.418294][ T5879] tipc: Node number set to 2886997039 [ 329.446408][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 330.496405][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 331.526373][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 331.836791][ T6045] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 332.000355][ T6045] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 332.020689][ T6045] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 332.040991][ T6045] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.072899][ T6045] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 332.091822][ T6045] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.216005][T11433] sctp: [Deprecated]: syz.2.2176 (pid 11433) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.216005][T11433] Use struct sctp_sack_info instead [ 332.235696][ T6045] usb 6-1: Product: syz [ 332.304982][ T6045] usb 6-1: Manufacturer: syz [ 332.316338][ T6045] usb 6-1: SerialNumber: syz [ 332.559606][ T6045] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 332.579473][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 332.776885][ T5879] usb 6-1: USB disconnect, device number 23 [ 332.799030][ T5879] usblp0: removed [ 333.089867][ T6045] IPVS: starting estimator thread 0... [ 333.212351][T11456] IPVS: using max 27 ests per chain, 64800 per kthread [ 333.495762][T11465] input: syz0 as /devices/virtual/input/input40 [ 333.606459][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 334.646369][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 334.896413][ T6045] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 335.080883][ T6045] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.096391][ T6045] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.126736][ T6045] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 335.146366][ T6045] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 335.161871][ T6045] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.194368][ T6045] usb 5-1: New USB device found, idVendor=0525, idProduct=c412, bcdDevice= 0.40 [ 335.215236][ T6045] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.223434][ T6045] usb 5-1: Product: syz [ 335.236314][ T6045] usb 5-1: Manufacturer: syz [ 335.241017][ T6045] usb 5-1: SerialNumber: syz [ 335.696372][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 335.869262][ T6045] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 335.876634][ T6045] cdc_ncm 5-1:1.0: bind() failure [ 335.901143][ T6045] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 335.922118][ T6045] cdc_ncm 5-1:1.1: bind() failure [ 335.955806][ T6045] usb 5-1: USB disconnect, device number 25 [ 336.629616][T11536] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2221'. [ 336.713453][T11534] kvm: apic: phys broadcast and lowest prio [ 336.726382][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 337.329673][T11556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2229'. [ 337.531092][T11563] loop8: detected capacity change from 0 to 7 [ 337.537793][T11563] Dev loop8: unable to read RDB block 7 [ 337.537856][T11563] loop8: unable to read partition table [ 337.538093][T11563] loop8: partition table beyond EOD, truncated [ 337.538115][T11563] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 337.745494][T11570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2236'. [ 337.776377][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 337.779893][T11570] bond_slave_0: entered promiscuous mode [ 337.789126][T11570] bond_slave_1: entered promiscuous mode [ 337.803334][T11573] netlink: 'syz.2.2237': attribute type 9 has an invalid length. [ 337.807804][T11570] macvlan2: entered promiscuous mode [ 337.821462][T11570] bond0: entered promiscuous mode [ 337.833083][T11570] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 337.856788][T11576] netlink: 'syz.2.2237': attribute type 9 has an invalid length. [ 338.451331][ T30] audit: type=1326 audit(1884852188.132:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.6.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba5d8e929 code=0x7ffc0000 [ 338.502955][ T30] audit: type=1326 audit(1884852188.132:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.6.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ba5d2ab19 code=0x7ffc0000 [ 338.535287][ T30] audit: type=1326 audit(1884852188.132:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.6.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba5d8e929 code=0x7ffc0000 [ 338.610570][ T30] audit: type=1326 audit(1884852188.132:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.6.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba5d8e929 code=0x7ffc0000 [ 338.644242][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 338.670611][ T30] audit: type=1326 audit(1884852188.132:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.6.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ba5d2ab19 code=0x7ffc0000 [ 338.709042][ T30] audit: type=1326 audit(1884852188.132:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.6.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba5d8e929 code=0x7ffc0000 [ 338.763676][ T30] audit: type=1326 audit(1884852188.132:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.6.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba5d8e929 code=0x7ffc0000 [ 338.788601][ T30] audit: type=1326 audit(1884852188.132:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.6.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ba5d2ab19 code=0x7ffc0000 [ 338.816462][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 338.838034][ T30] audit: type=1326 audit(1884852188.162:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.6.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba5d8e929 code=0x7ffc0000 [ 338.887545][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 338.888063][ T30] audit: type=1326 audit(1884852188.162:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.6.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ba5d2ab19 code=0x7ffc0000 [ 338.894588][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 338.936420][ T9] usb 3-1: config 0 has no interface number 0 [ 338.984158][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 338.993498][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.004665][ T9] usb 3-1: Product: syz [ 339.017771][ T9] usb 3-1: Manufacturer: syz [ 339.055143][ T9] usb 3-1: SerialNumber: syz [ 339.107078][ T9] usb 3-1: config 0 descriptor?? [ 339.124386][ T9] smsc95xx v2.0.0 [ 339.846489][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 340.100755][T11638] [U] M٭Q& K4 [ 340.122752][T11638] [U] [)U}ǔJϬ}NSEF* NZF[F_H'W"X~;VA)^`1C':ZFOB *?۟CZS<8ZNѷјEY TT<$CRƖ/VG {Y~Y5\;ƃZDXYA"XIF{`A$í55?SAMOͻ*K [ 340.152782][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 340.177258][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 340.206446][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 340.248429][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 340.314181][ T9] usb 3-1: USB disconnect, device number 28 [ 340.468337][T11652] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2272'. [ 340.808969][T11667] input: syz1 as /devices/virtual/input/input41 [ 340.887234][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 341.926684][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 342.966442][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 343.348998][T11750] program syz.4.2317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.006470][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 345.046367][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 345.725440][T11804] sock: sock_set_timeout: `syz.2.2342' (pid 11804) tries to set negative timeout [ 345.777215][T11805] input: syz0 as /devices/virtual/input/input43 [ 346.086389][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 346.187232][T11819] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000003 [ 347.126408][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 347.666402][ T5879] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 347.706867][T11847] macvlan1: entered promiscuous mode [ 347.714050][T11847] ipvlan0: entered promiscuous mode [ 347.720815][T11847] ipvlan0: left promiscuous mode [ 347.737033][T11847] macvlan1: left promiscuous mode [ 347.830330][ T5879] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 347.856285][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.865253][ T5879] usb 6-1: Product: syz [ 347.879708][ T5879] usb 6-1: Manufacturer: syz [ 347.884372][ T5879] usb 6-1: SerialNumber: syz [ 347.892815][ T5879] usb 6-1: config 0 descriptor?? [ 347.908806][ T5879] ch341 6-1:0.0: ch341-uart converter detected [ 348.166418][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 348.566829][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 348.724390][ T5879] usb 6-1: failed to send control message: -71 [ 348.731161][ T5879] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 348.741230][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.753495][ T5879] usb 6-1: USB disconnect, device number 24 [ 348.760445][ T5879] ch341 6-1:0.0: device disconnected [ 348.766463][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.781668][ T24] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 348.791605][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.802601][ T24] usb 5-1: config 0 descriptor?? [ 349.206413][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 349.418671][ T24] usb 5-1: string descriptor 0 read error: -22 [ 349.820532][ T24] uclogic 0003:256C:006D.0022: failed retrieving string descriptor #100: -71 [ 349.829542][ T24] uclogic 0003:256C:006D.0022: failed retrieving pen parameters: -71 [ 349.837735][ T24] uclogic 0003:256C:006D.0022: failed probing pen v1 parameters: -71 [ 349.845870][ T24] uclogic 0003:256C:006D.0022: failed probing parameters: -71 [ 349.853777][ T24] uclogic 0003:256C:006D.0022: probe with driver uclogic failed with error -71 [ 349.864881][ T24] usb 5-1: USB disconnect, device number 26 [ 350.246729][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 350.413515][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2381'. [ 350.736674][ T5935] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 350.761949][T11881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.165000][ T5935] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 351.179507][ T5935] usb 3-1: can't read configurations, error -71 [ 351.286381][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 352.326406][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 353.083756][T11934] IPVS: length: 71 != 24 [ 353.088854][T11935] Bluetooth: hci5: Frame reassembly failed (-84) [ 353.316653][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 353.366517][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 353.490248][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.526672][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 353.536140][ T24] usb 5-1: config 1 has no interface number 0 [ 353.542454][ T24] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.567417][ T24] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 353.577134][ T24] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.593441][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.604724][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.619297][ T24] usb 5-1: Product: syz [ 353.623513][ T24] usb 5-1: Manufacturer: syz [ 353.628779][ T24] usb 5-1: SerialNumber: syz [ 354.333434][ T5879] ------------[ cut here ]------------ [ 354.339247][ T5879] workqueue: cannot queue hci_conn_timeout on wq hci4 [ 354.346116][ T5879] WARNING: CPU: 1 PID: 5879 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0 [ 354.355200][ T5879] Modules linked in: [ 354.359484][ T5879] CPU: 1 UID: 0 PID: 5879 Comm: kworker/1:4 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 354.371612][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.381887][ T5879] Workqueue: events l2cap_chan_timeout [ 354.387408][ T5879] RIP: 0010:__queue_work+0xd62/0xfe0 [ 354.392743][ T5879] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 f9 e1 96 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 5f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 40 8a 35 00 90 0f 0b 90 e9 dd fc ff [ 354.412477][ T5879] RSP: 0018:ffffc90004caf7a8 EFLAGS: 00010046 [ 354.418603][ T5879] RAX: 0deecd63f176f300 RBX: 0000000000000020 RCX: ffff88802f003c00 [ 354.426551][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.426597][ T5879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 354.441463][ T5879] RBP: 1ffff1100af15f38 R08: ffff8880b8724293 R09: 1ffff110170e4852 [ 354.449459][ T5879] R10: dffffc0000000000 R11: ffffed10170e4853 R12: dffffc0000000000 [ 354.457451][ T5879] R13: ffff888031af4960 R14: ffff88801a494408 R15: ffff8880578af978 [ 354.465437][ T5879] FS: 0000000000000000(0000) GS:ffff888125d85000(0000) knlGS:0000000000000000 [ 354.474377][ T5879] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.480967][ T5879] CR2: 0000200000006680 CR3: 00000000589a6000 CR4: 00000000003526f0 [ 354.488953][ T5879] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 354.496946][ T5879] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 354.504956][ T5879] Call Trace: [ 354.508255][ T5879] [ 354.511209][ T5879] ? __queue_delayed_work+0xe1/0x2d0 [ 354.516533][ T5879] queue_delayed_work_on+0x18b/0x280 [ 354.521924][ T5879] ? __pfx___cancel_work+0x10/0x10 [ 354.527063][ T5879] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 354.532909][ T5879] ? hci_conn_drop+0x14d/0x280 [ 354.537974][ T5879] l2cap_chan_del+0x285/0x5e0 [ 354.542663][ T5879] l2cap_chan_close+0x597/0x980 [ 354.547531][ T5879] ? __pfx_l2cap_chan_close+0x10/0x10 [ 354.552917][ T5879] ? lock_acquire+0x175/0x360 [ 354.557615][ T5879] l2cap_chan_timeout+0x158/0x390 [ 354.562644][ T5879] ? process_scheduled_works+0x9ef/0x17b0 [ 354.568384][ T5879] process_scheduled_works+0xade/0x17b0 [ 354.573964][ T5879] ? __pfx_process_scheduled_works+0x10/0x10 [ 354.579970][ T5879] worker_thread+0x8a0/0xda0 [ 354.584574][ T5879] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 354.590921][ T5879] ? __kthread_parkme+0x7b/0x200 [ 354.595881][ T5879] kthread+0x70e/0x8a0 [ 354.599965][ T5879] ? __pfx_worker_thread+0x10/0x10 [ 354.605091][ T5879] ? __pfx_kthread+0x10/0x10 [ 354.609703][ T5879] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.614906][ T5879] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.620114][ T5879] ? __pfx_kthread+0x10/0x10 [ 354.624736][ T5879] ret_from_fork+0x3fc/0x770 [ 354.629361][ T5879] ? __pfx_ret_from_fork+0x10/0x10 [ 354.634523][ T5879] ? __switch_to_asm+0x39/0x70 [ 354.639316][ T5879] ? __switch_to_asm+0x33/0x70 [ 354.644098][ T5879] ? __pfx_kthread+0x10/0x10 [ 354.648716][ T5879] ret_from_fork_asm+0x1a/0x30 [ 354.653506][ T5879] [ 354.656547][ T5879] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 354.663841][ T5879] CPU: 1 UID: 0 PID: 5879 Comm: kworker/1:4 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 354.675923][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.685994][ T5879] Workqueue: events l2cap_chan_timeout [ 354.691479][ T5879] Call Trace: [ 354.694764][ T5879] [ 354.697708][ T5879] dump_stack_lvl+0x99/0x250 [ 354.702312][ T5879] ? __asan_memcpy+0x40/0x70 [ 354.706993][ T5879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.712200][ T5879] ? __pfx__printk+0x10/0x10 [ 354.716807][ T5879] panic+0x2db/0x790 [ 354.720723][ T5879] ? __pfx_panic+0x10/0x10 [ 354.725159][ T5879] ? show_trace_log_lvl+0x4fb/0x550 [ 354.730408][ T5879] ? ret_from_fork_asm+0x1a/0x30 [ 354.735362][ T5879] __warn+0x31b/0x4b0 [ 354.739359][ T5879] ? __queue_work+0xd62/0xfe0 [ 354.744084][ T5879] ? __queue_work+0xd62/0xfe0 [ 354.748773][ T5879] report_bug+0x2be/0x4f0 [ 354.753118][ T5879] ? __queue_work+0xd62/0xfe0 [ 354.757811][ T5879] ? __queue_work+0xd62/0xfe0 [ 354.762497][ T5879] ? __queue_work+0xd64/0xfe0 [ 354.767189][ T5879] handle_bug+0x84/0x160 [ 354.771439][ T5879] exc_invalid_op+0x1a/0x50 [ 354.775948][ T5879] asm_exc_invalid_op+0x1a/0x20 [ 354.780807][ T5879] RIP: 0010:__queue_work+0xd62/0xfe0 [ 354.786108][ T5879] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 f9 e1 96 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 5f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 40 8a 35 00 90 0f 0b 90 e9 dd fc ff [ 354.805811][ T5879] RSP: 0018:ffffc90004caf7a8 EFLAGS: 00010046 [ 354.811895][ T5879] RAX: 0deecd63f176f300 RBX: 0000000000000020 RCX: ffff88802f003c00 [ 354.819874][ T5879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 354.827863][ T5879] RBP: 1ffff1100af15f38 R08: ffff8880b8724293 R09: 1ffff110170e4852 [ 354.835857][ T5879] R10: dffffc0000000000 R11: ffffed10170e4853 R12: dffffc0000000000 [ 354.843836][ T5879] R13: ffff888031af4960 R14: ffff88801a494408 R15: ffff8880578af978 [ 354.851828][ T5879] ? __queue_work+0xd61/0xfe0 [ 354.856526][ T5879] ? __queue_delayed_work+0xe1/0x2d0 [ 354.861824][ T5879] queue_delayed_work_on+0x18b/0x280 [ 354.867121][ T5879] ? __pfx___cancel_work+0x10/0x10 [ 354.872239][ T5879] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 354.878069][ T5879] ? hci_conn_drop+0x14d/0x280 [ 354.882849][ T5879] l2cap_chan_del+0x285/0x5e0 [ 354.887537][ T5879] l2cap_chan_close+0x597/0x980 [ 354.892404][ T5879] ? __pfx_l2cap_chan_close+0x10/0x10 [ 354.897788][ T5879] ? lock_acquire+0x175/0x360 [ 354.902481][ T5879] l2cap_chan_timeout+0x158/0x390 [ 354.907516][ T5879] ? process_scheduled_works+0x9ef/0x17b0 [ 354.913245][ T5879] process_scheduled_works+0xade/0x17b0 [ 354.918825][ T5879] ? __pfx_process_scheduled_works+0x10/0x10 [ 354.924827][ T5879] worker_thread+0x8a0/0xda0 [ 354.929436][ T5879] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 354.935780][ T5879] ? __kthread_parkme+0x7b/0x200 [ 354.940738][ T5879] kthread+0x70e/0x8a0 [ 354.944816][ T5879] ? __pfx_worker_thread+0x10/0x10 [ 354.949938][ T5879] ? __pfx_kthread+0x10/0x10 [ 354.954534][ T5879] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.959744][ T5879] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.964952][ T5879] ? __pfx_kthread+0x10/0x10 [ 354.969549][ T5879] ret_from_fork+0x3fc/0x770 [ 354.974150][ T5879] ? __pfx_ret_from_fork+0x10/0x10 [ 354.979283][ T5879] ? __switch_to_asm+0x39/0x70 [ 354.984059][ T5879] ? __switch_to_asm+0x33/0x70 [ 354.988827][ T5879] ? __pfx_kthread+0x10/0x10 [ 354.993428][ T5879] ret_from_fork_asm+0x1a/0x30 [ 354.998208][ T5879] [ 355.001510][ T5879] Kernel Offset: disabled [ 355.005843][ T5879] Rebooting in 86400 seconds..