last executing test programs: 4.935198344s ago: executing program 0 (id=54): lstat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 4.707630119s ago: executing program 0 (id=57): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000100)='<', 0x1}], 0x1f, 0xffffff01, 0x2) 4.567425565s ago: executing program 0 (id=59): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 4.565902961s ago: executing program 3 (id=60): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) 4.398374921s ago: executing program 3 (id=62): socketpair$unix(0x1, 0x3, 0x0, 0x0) pselect6(0x40, &(0x7f0000000400)={0x0, 0x8, 0x4000, 0x6, 0x0, 0x9}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 4.258470637s ago: executing program 0 (id=64): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="400d03"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 4.161869625s ago: executing program 3 (id=65): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x0, 0xa07, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1401}, 0x4) 3.974909333s ago: executing program 3 (id=68): lstat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3.841855306s ago: executing program 3 (id=69): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3.694684886s ago: executing program 2 (id=71): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)) 2.545713893s ago: executing program 2 (id=72): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 2.139853874s ago: executing program 3 (id=73): unshare(0x400) syz_usb_connect(0x1, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/37, 0x8}], 0x1, 0x5, 0x81, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xa) 2.071685851s ago: executing program 2 (id=74): socketpair$unix(0x1, 0x3, 0x0, 0x0) pselect6(0x40, &(0x7f0000000400)={0x0, 0x8, 0x4000, 0x6, 0x0, 0x9}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 2.055570629s ago: executing program 1 (id=75): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x7, r1, 0x0, &(0x7f0000000000)='y', 0x1, 0x4000000000002}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r1, 0x0, &(0x7f0000002500)="94", 0x1, 0xdd09}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000000300)="d1", 0x1, 0x4d8000000000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000004c0)={0x28, 0x2, r1, 0x0, &(0x7f0000000500)="8809", 0x2, 0xfffffffffffffff9}) 1.92555423s ago: executing program 1 (id=76): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r0, 0xa07, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1401}, 0x4) 1.778142021s ago: executing program 2 (id=77): lstat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.77800753s ago: executing program 1 (id=78): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix={0x311, 0x22000000, 0x36314752, 0x2, 0xe5b, 0x200d294, 0xc, 0x80800000, 0x1, 0x6}}) 1.683347817s ago: executing program 2 (id=79): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) 1.651627894s ago: executing program 1 (id=80): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)) 1.546986067s ago: executing program 2 (id=81): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 1.484064511s ago: executing program 1 (id=82): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 314.784666ms ago: executing program 1 (id=83): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040c41090ea800000000001090224000100", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 261.618491ms ago: executing program 0 (id=84): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x7, r1, 0x0, &(0x7f0000000000)='y', 0x1, 0x4000000000002}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r1, 0x0, &(0x7f0000002500)="94", 0x1, 0xdd09}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000000300)="d1", 0x1, 0x4d8000000000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000004c0)={0x28, 0x2, r1, 0x0, &(0x7f0000000500)="8809", 0x2, 0xfffffffffffffff9}) 0s ago: executing program 0 (id=85): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pselect6(0x0, 0x0, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. [ 84.265722][ T5601] cgroup: Unknown subsys name 'net' [ 84.517379][ T5601] cgroup: Unknown subsys name 'cpuset' [ 84.562547][ T5601] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.509404][ T5601] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.857756][ T32] cfg80211: failed to load regulatory.db [ 89.437014][ T4927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.438761][ T4927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.441178][ T4927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.465410][ T4927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.503760][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.517552][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.528662][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.537654][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.538815][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.540968][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.545418][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.548987][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.549878][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.598686][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.608429][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.645773][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.668210][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.669074][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.693972][ T4927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.704640][ T4927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.637244][ T4927] Bluetooth: hci2: command tx timeout [ 91.711842][ T4927] Bluetooth: hci0: command tx timeout [ 91.712000][ T4927] Bluetooth: hci1: command tx timeout [ 91.792673][ T5622] Bluetooth: hci3: command tx timeout [ 91.866762][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.868010][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.868178][ T5616] bridge_slave_0: entered allmulticast mode [ 91.871526][ T5616] bridge_slave_0: entered promiscuous mode [ 91.922618][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.922941][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.923190][ T5616] bridge_slave_1: entered allmulticast mode [ 91.928997][ T5616] bridge_slave_1: entered promiscuous mode [ 92.038240][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.038669][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.038939][ T5613] bridge_slave_0: entered allmulticast mode [ 92.041003][ T5613] bridge_slave_0: entered promiscuous mode [ 92.086092][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.086565][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.086923][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.087199][ T5613] bridge_slave_1: entered allmulticast mode [ 92.089236][ T5613] bridge_slave_1: entered promiscuous mode [ 92.148283][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.183261][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.183591][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.183863][ T5617] bridge_slave_0: entered allmulticast mode [ 92.187028][ T5617] bridge_slave_0: entered promiscuous mode [ 92.229714][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.230088][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.230389][ T5620] bridge_slave_0: entered allmulticast mode [ 92.233689][ T5620] bridge_slave_0: entered promiscuous mode [ 92.237984][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.238291][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.238872][ T5617] bridge_slave_1: entered allmulticast mode [ 92.242959][ T5617] bridge_slave_1: entered promiscuous mode [ 92.334905][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.335312][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.335635][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.335906][ T5620] bridge_slave_1: entered allmulticast mode [ 92.338201][ T5620] bridge_slave_1: entered promiscuous mode [ 92.372023][ T5616] team0: Port device team_slave_0 added [ 92.382980][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.421217][ T5616] team0: Port device team_slave_1 added [ 92.461047][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.500561][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.506522][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.531606][ T5613] team0: Port device team_slave_0 added [ 92.538908][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.564179][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.564192][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.564209][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.569277][ T5613] team0: Port device team_slave_1 added [ 92.623321][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.623333][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.623349][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.717426][ T5617] team0: Port device team_slave_0 added [ 92.748180][ T5620] team0: Port device team_slave_0 added [ 92.751380][ T5617] team0: Port device team_slave_1 added [ 92.762483][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.762499][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.762524][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.769560][ T5620] team0: Port device team_slave_1 added [ 92.800651][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.800668][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.800695][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.897264][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.897276][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.897292][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.926652][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.926669][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.926694][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.930463][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.930476][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.930500][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.949105][ T5616] hsr_slave_0: entered promiscuous mode [ 92.951445][ T5616] hsr_slave_1: entered promiscuous mode [ 92.959517][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.959534][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.959559][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.095435][ T5613] hsr_slave_0: entered promiscuous mode [ 93.096836][ T5613] hsr_slave_1: entered promiscuous mode [ 93.097940][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 93.098007][ T5613] Cannot create hsr debugfs directory [ 93.219838][ T5617] hsr_slave_0: entered promiscuous mode [ 93.221167][ T5617] hsr_slave_1: entered promiscuous mode [ 93.228232][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 93.228261][ T5617] Cannot create hsr debugfs directory [ 93.264683][ T5620] hsr_slave_0: entered promiscuous mode [ 93.266064][ T5620] hsr_slave_1: entered promiscuous mode [ 93.267114][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 93.267139][ T5620] Cannot create hsr debugfs directory [ 93.711942][ T5622] Bluetooth: hci2: command tx timeout [ 93.792016][ T5622] Bluetooth: hci1: command tx timeout [ 93.792036][ T4927] Bluetooth: hci0: command tx timeout [ 93.872001][ T5622] Bluetooth: hci3: command tx timeout [ 94.349426][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.415636][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.429884][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.466023][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.468463][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.506838][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.529051][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.570500][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.715920][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.748227][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.760139][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.797750][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.824587][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.857525][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.878971][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.928269][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.068986][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.106272][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.119645][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.148864][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.159883][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.196117][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.227060][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.268190][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.432136][ T5620] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.476419][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.481181][ T5620] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.522883][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.530699][ T5620] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.548980][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.569274][ T5620] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.607514][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.666796][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.780352][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.802660][ T5622] Bluetooth: hci2: command tx timeout [ 95.849168][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.849514][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.874243][ T5622] Bluetooth: hci0: command tx timeout [ 95.874277][ T5622] Bluetooth: hci1: command tx timeout [ 95.895782][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.927259][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.927815][ T1021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.951983][ T5622] Bluetooth: hci3: command tx timeout [ 96.029900][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.089788][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.100426][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.100578][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.146300][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.146425][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.213069][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.275381][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.293382][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.293619][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.397126][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.397420][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.593045][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.642866][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.643019][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.723242][ T1718] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.724216][ T1718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.555186][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.872550][ T5622] Bluetooth: hci2: command tx timeout [ 97.953645][ T5622] Bluetooth: hci0: command tx timeout [ 97.953681][ T5622] Bluetooth: hci1: command tx timeout [ 98.032070][ T4927] Bluetooth: hci3: command tx timeout [ 98.102335][ T5616] veth0_vlan: entered promiscuous mode [ 98.180933][ T5616] veth1_vlan: entered promiscuous mode [ 98.267053][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.387410][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.463025][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.487835][ T5616] veth0_macvtap: entered promiscuous mode [ 98.521214][ T5616] veth1_macvtap: entered promiscuous mode [ 98.605835][ T5617] veth0_vlan: entered promiscuous mode [ 98.637230][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.678405][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.696931][ T5617] veth1_vlan: entered promiscuous mode [ 98.706880][ T5613] veth0_vlan: entered promiscuous mode [ 98.747660][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.762346][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.769631][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.800155][ T5620] veth0_vlan: entered promiscuous mode [ 98.805448][ T5613] veth1_vlan: entered promiscuous mode [ 98.809274][ T1718] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.949855][ T5620] veth1_vlan: entered promiscuous mode [ 99.157809][ T5617] veth0_macvtap: entered promiscuous mode [ 99.228544][ T5617] veth1_macvtap: entered promiscuous mode [ 99.281013][ T5613] veth0_macvtap: entered promiscuous mode [ 99.328031][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.328055][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.354511][ T5613] veth1_macvtap: entered promiscuous mode [ 99.389448][ T5620] veth0_macvtap: entered promiscuous mode [ 99.410003][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.458056][ T5620] veth1_macvtap: entered promiscuous mode [ 99.470558][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.480616][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.480636][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.505960][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.525303][ T1718] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.530108][ T1718] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.546978][ T1718] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.561413][ T1718] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.570487][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.611963][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.696211][ T158] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.701220][ T158] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.708428][ T158] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.718232][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.753992][ T158] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.033847][ T3020] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.079574][ T3020] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.096335][ T3020] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.120820][ T3020] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.444394][ T5764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 100.444416][ T5764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 100.669943][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.669966][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.104893][ T3149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.104914][ T3149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.365661][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.365684][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.796079][ T1718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.796092][ T1718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.556671][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.556691][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.995824][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.995845][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.719596][ T32] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 105.041407][ T32] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.041442][ T32] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 105.041501][ T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 105.041547][ T32] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 105.041572][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.343084][ T5777] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.636976][ T5792] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 105.638500][ T32] hub 1-1:1.0: bad descriptor, ignoring hub [ 105.638542][ T32] hub 1-1:1.0: probe with driver hub failed with error -5 [ 105.674558][ T5794] netlink: 'syz.2.10': attribute type 29 has an invalid length. [ 105.699795][ T32] cdc_wdm 1-1:1.0: skipping garbage [ 105.699818][ T32] cdc_wdm 1-1:1.0: skipping garbage [ 105.784331][ T5796] netlink: 'syz.2.10': attribute type 29 has an invalid length. [ 106.071928][ T32] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 106.071954][ T32] cdc_wdm 1-1:1.0: Unknown control protocol [ 106.470411][ T5806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.700920][ T32] usb 1-1: USB disconnect, device number 2 [ 108.621785][ T37] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.831196][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.831226][ T37] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 108.831265][ T37] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 108.831290][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.924954][ T37] usb 4-1: config 0 descriptor?? [ 108.962535][ T5786] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.135270][ T5786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.135306][ T5786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.135342][ T5786] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 109.135366][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.284903][ T5786] usb 2-1: config 0 descriptor?? [ 109.700006][ T37] usb 4-1: USB disconnect, device number 2 [ 109.960400][ T5786] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 109.960446][ T5786] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 109.960473][ T5786] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 109.960498][ T5786] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 109.960523][ T5786] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 109.960548][ T5786] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 109.960573][ T5786] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 110.100385][ T5786] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 110.209047][ T5786] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 110.557187][ T5842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 111.978528][ T10] usb 2-1: USB disconnect, device number 2 [ 113.995055][ T4940] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.084879][ T821] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.093805][ T5890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.41'. [ 114.135769][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.161814][ T4940] usb 3-1: Using ep0 maxpacket: 16 [ 114.164408][ T4940] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 114.164436][ T4940] usb 3-1: config 0 has no interface number 0 [ 114.164487][ T4940] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 114.164513][ T4940] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 114.170393][ T4940] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 114.170424][ T4940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.170445][ T4940] usb 3-1: Product: syz [ 114.170461][ T4940] usb 3-1: Manufacturer: syz [ 114.170475][ T4940] usb 3-1: SerialNumber: syz [ 114.254305][ T821] usb 1-1: config index 0 descriptor too short (expected 16420, got 36) [ 114.254337][ T821] usb 1-1: config 0 has an invalid interface association descriptor of length 4, skipping [ 114.254358][ T821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.254377][ T821] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 114.254417][ T821] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 114.254442][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.293978][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.294004][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 114.294039][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 114.294061][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.391425][ T821] usb 1-1: config 0 descriptor?? [ 114.476596][ T4940] usb 3-1: config 0 descriptor?? [ 114.480949][ T5879] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 114.481085][ T5879] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 114.481638][ T10] usb 2-1: config 0 descriptor?? [ 114.635328][ T5784] usb 1-1: USB disconnect, device number 3 [ 114.701279][ T5879] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 114.701571][ T5879] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 114.909360][ T4940] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 114.976260][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 114.976649][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 114.976772][ T10] usb 2-1: string descriptor 0 read error: -32 [ 115.023305][ T10] usb 2-1: USB disconnect, device number 3 [ 115.318745][ T4940] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 115.345602][ T4940] asix 3-1:0.34: probe with driver asix failed with error -32 [ 115.694745][ T5909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.50'. [ 116.723777][ T5784] usb 3-1: USB disconnect, device number 2 [ 117.041205][ T5933] netlink: 20 bytes leftover after parsing attributes in process `syz.3.60'. [ 117.264868][ T5700] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.434415][ T5700] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.434446][ T5700] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 117.434485][ T5700] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 117.434510][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.523340][ T5700] usb 2-1: config 0 descriptor?? [ 117.664190][ T37] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.770064][ T5953] netlink: 20 bytes leftover after parsing attributes in process `syz.2.70'. [ 117.873166][ T37] usb 1-1: Using ep0 maxpacket: 16 [ 118.690505][ T37] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 118.690607][ T37] usb 1-1: config 0 has no interface number 0 [ 118.690974][ T37] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 118.691014][ T37] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 118.780759][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 118.787051][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 118.810601][ T5700] usb 2-1: string descriptor 0 read error: -32 [ 118.899919][ T37] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 118.899952][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.899974][ T37] usb 1-1: Product: syz [ 118.899989][ T37] usb 1-1: Manufacturer: syz [ 118.900006][ T37] usb 1-1: SerialNumber: syz [ 118.935779][ T5700] usb 2-1: USB disconnect, device number 4 [ 119.132538][ T37] usb 1-1: config 0 descriptor?? [ 119.157621][ T5945] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 119.189635][ T5945] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 119.426011][ T5945] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 119.426150][ T5945] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 119.631078][ T37] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 119.712089][ T5700] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 119.885547][ T5976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.79'. [ 119.905190][ T5700] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.905229][ T5700] usb 4-1: config 0 has no interface number 0 [ 119.906720][ T5700] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 119.906979][ T5700] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 119.907028][ T5700] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 119.907053][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.036218][ T37] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 120.036541][ T37] asix 1-1:0.34: probe with driver asix failed with error -32 [ 120.083786][ T5700] usb 4-1: config 0 descriptor?? [ 120.084831][ T5964] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.152988][ T5700] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 121.139835][ T5700] usb 1-1: USB disconnect, device number 4 [ 121.601908][ T37] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.649992][ T5963] ------------[ cut here ]------------ [ 121.650006][ T5963] task_rq(p) != rq [ 121.650013][ T5963] WARNING: kernel/sched/fair.c:7656 at hrtick_start_fair+0x196/0x1f0, CPU#0: syz.3.73/5963 [ 121.650051][ T5963] Modules linked in: [ 121.650073][ T5963] CPU: 0 UID: 0 PID: 5963 Comm: syz.3.73 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 121.650092][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.650102][ T5963] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 121.650124][ T5963] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 121.650137][ T5963] RSP: 0018:ffffc9000584f900 EFLAGS: 00010087 [ 121.650151][ T5963] RAX: ffff8880b873ba40 RBX: ffff8880b863ba40 RCX: ffffffff8197d8ae [ 121.650164][ T5963] RDX: 0000000000000000 RSI: ffff888059c80000 RDI: ffff8880b863ba40 [ 121.650175][ T5963] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 121.650186][ T5963] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 121.650198][ T5963] R13: 1ffff110170c78d6 R14: ffff888059c80000 R15: ffffffff8dc257d8 [ 121.650210][ T5963] FS: 0000555590676500(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 121.650225][ T5963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.650236][ T5963] CR2: 0000559eddf42040 CR3: 0000000037e68000 CR4: 00000000003526f0 [ 121.650251][ T5963] Call Trace: [ 121.650258][ T5963] [ 121.650268][ T5963] set_next_task_fair+0xa68/0xce0 [ 121.650292][ T5963] __schedule+0x3e03/0x5550 [ 121.650333][ T5963] ? __pfx___schedule+0x10/0x10 [ 121.650359][ T5963] ? schedule+0x90/0x360 [ 121.650380][ T5963] schedule+0x164/0x360 [ 121.650399][ T5963] do_nanosleep+0x287/0x730 [ 121.650420][ T5963] ? do_nanosleep+0x8a/0x730 [ 121.650440][ T5963] ? __pfx_do_nanosleep+0x10/0x10 [ 121.650458][ T5963] ? __asan_memset+0x22/0x50 [ 121.650481][ T5963] ? __hrtimer_setup+0x1c2/0x260 [ 121.650497][ T5963] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 121.650517][ T5963] hrtimer_nanosleep+0x217/0x450 [ 121.650537][ T5963] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 121.650558][ T5963] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 121.650586][ T5963] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 121.650607][ T5963] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 121.650631][ T5963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.650649][ T5963] do_syscall_64+0x174/0x580 [ 121.650672][ T5963] ? clear_bhb_loop+0x40/0x90 [ 121.650695][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.650712][ T5963] RIP: 0033:0x7f26b6c1d68e [ 121.650726][ T5963] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.650739][ T5963] RSP: 002b:00007ffdbf28de48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 121.650755][ T5963] RAX: ffffffffffffffda RBX: 0000555590676500 RCX: 00007f26b6c1d68e [ 121.650767][ T5963] RDX: 00007ffdbf28dea0 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.650776][ T5963] RBP: 00007f26b6ed7da0 R08: 0000000000000000 R09: 0000000000000000 [ 121.650786][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001e132 [ 121.650796][ T5963] R13: 00007f26b6ed609c R14: 000000000001d59e R15: 00007f26b6ed6090 [ 121.650820][ T5963] [ 121.650828][ T5963] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 121.650840][ T5963] CPU: 0 UID: 0 PID: 5963 Comm: syz.3.73 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 121.650858][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.650867][ T5963] Call Trace: [ 121.650873][ T5963] [ 121.650879][ T5963] vpanic+0x56c/0xa60 [ 121.650904][ T5963] ? __pfx__printk+0x10/0x10 [ 121.650920][ T5963] ? __pfx_vpanic+0x10/0x10 [ 121.650942][ T5963] ? is_bpf_text_address+0x292/0x2b0 [ 121.650965][ T5963] ? is_bpf_text_address+0x26/0x2b0 [ 121.650994][ T5963] panic+0xc5/0xd0 [ 121.651016][ T5963] ? __pfx_panic+0x10/0x10 [ 121.651052][ T5963] __warn+0x315/0x4c0 [ 121.651083][ T5963] ? hrtick_start_fair+0x196/0x1f0 [ 121.651109][ T5963] ? hrtick_start_fair+0x196/0x1f0 [ 121.651137][ T5963] __report_bug+0x339/0x540 [ 121.651158][ T5963] ? hrtick_start_fair+0x196/0x1f0 [ 121.651174][ T5963] ? __pfx___report_bug+0x10/0x10 [ 121.651190][ T5963] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 121.651211][ T5963] ? hrtick_start_fair+0x196/0x1f0 [ 121.651226][ T5963] report_bug+0x16a/0x220 [ 121.651242][ T5963] ? hrtick_start_fair+0x196/0x1f0 [ 121.651257][ T5963] ? hrtick_start_fair+0x198/0x1f0 [ 121.651272][ T5963] handle_bug+0x9c/0x200 [ 121.651290][ T5963] exc_invalid_op+0x1a/0x50 [ 121.651308][ T5963] asm_exc_invalid_op+0x1a/0x20 [ 121.651319][ T5963] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 121.651336][ T5963] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 121.651345][ T5963] RSP: 0018:ffffc9000584f900 EFLAGS: 00010087 [ 121.651355][ T5963] RAX: ffff8880b873ba40 RBX: ffff8880b863ba40 RCX: ffffffff8197d8ae [ 121.651364][ T5963] RDX: 0000000000000000 RSI: ffff888059c80000 RDI: ffff8880b863ba40 [ 121.651373][ T5963] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 121.651381][ T5963] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 121.651390][ T5963] R13: 1ffff110170c78d6 R14: ffff888059c80000 R15: ffffffff8dc257d8 [ 121.651403][ T5963] ? set_next_task_fair+0xa4e/0xce0 [ 121.651421][ T5963] set_next_task_fair+0xa68/0xce0 [ 121.651438][ T5963] __schedule+0x3e03/0x5550 [ 121.651466][ T5963] ? __pfx___schedule+0x10/0x10 [ 121.651485][ T5963] ? schedule+0x90/0x360 [ 121.651500][ T5963] schedule+0x164/0x360 [ 121.651515][ T5963] do_nanosleep+0x287/0x730 [ 121.651530][ T5963] ? do_nanosleep+0x8a/0x730 [ 121.651545][ T5963] ? __pfx_do_nanosleep+0x10/0x10 [ 121.651559][ T5963] ? __asan_memset+0x22/0x50 [ 121.651579][ T5963] ? __hrtimer_setup+0x1c2/0x260 [ 121.651590][ T5963] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 121.651606][ T5963] hrtimer_nanosleep+0x217/0x450 [ 121.651620][ T5963] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 121.651636][ T5963] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 121.651655][ T5963] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 121.651670][ T5963] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 121.651688][ T5963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.651701][ T5963] do_syscall_64+0x174/0x580 [ 121.651718][ T5963] ? clear_bhb_loop+0x40/0x90 [ 121.651733][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.651744][ T5963] RIP: 0033:0x7f26b6c1d68e [ 121.651755][ T5963] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.651764][ T5963] RSP: 002b:00007ffdbf28de48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 121.651776][ T5963] RAX: ffffffffffffffda RBX: 0000555590676500 RCX: 00007f26b6c1d68e [ 121.651784][ T5963] RDX: 00007ffdbf28dea0 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.651792][ T5963] RBP: 00007f26b6ed7da0 R08: 0000000000000000 R09: 0000000000000000 [ 121.651799][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001e132 [ 121.651806][ T5963] R13: 00007f26b6ed609c R14: 000000000001d59e R15: 00007f26b6ed6090 [ 121.651824][ T5963] [ 122.771708][ T5963] Shutting down cpus with NMI [ 122.771923][ T5963] Kernel Offset: disabled