last executing test programs: 29.119345784s ago: executing program 4 (id=3209): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000380)={0x0, 0x0, {0xffffffffffffffff}}) 4.086358849s ago: executing program 4 (id=3294): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) 3.873534361s ago: executing program 4 (id=3421): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, &(0x7f0000001600)=[{}]}) 2.719778346s ago: executing program 3 (id=3426): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0xff, 0x12) 2.496986007s ago: executing program 4 (id=3428): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000806000108000604"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.49001327s ago: executing program 3 (id=3429): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000240)=""/4084, 0xff4}], 0xd) close_range(r0, 0xffffffffffffffff, 0x0) 2.441420025s ago: executing program 1 (id=3351): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xfffffff0}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x377}]}}]}, 0x40}}, 0x0) 2.271554371s ago: executing program 4 (id=3433): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1000) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 2.223461906s ago: executing program 3 (id=3434): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0xffffffff, 0x0, 0x0, 0x0, "008ef14ba278887cb0baba08431799317e6324"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x100d}}, 0xfffffdef) 2.163319356s ago: executing program 1 (id=3435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2.087442043s ago: executing program 1 (id=3438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@dev, @random="bf9d1b38ff00", @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @remote, @multicast2}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 1.964916978s ago: executing program 1 (id=3441): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) memfd_secret(0x0) 1.919362699s ago: executing program 4 (id=3443): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000b00)="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", 0x166}], 0x1) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 1.794598372s ago: executing program 0 (id=3444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r1, 0x5, 0x0, 0x0, {{0x70}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1.557888183s ago: executing program 0 (id=3446): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) sendto$inet(r0, 0x0, 0x3b, 0x0, &(0x7f0000000600)={0x2, 0x4e20, @multicast2}, 0x10) 1.408984708s ago: executing program 0 (id=3447): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x0, {@ip4=@empty, 0x86dd}}}]}, 0x38}}, 0x0) 1.347598203s ago: executing program 2 (id=3448): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 1.23738526s ago: executing program 3 (id=3449): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$inet6_udplite(0xa, 0x2, 0x88) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) 1.196701185s ago: executing program 0 (id=3450): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2a8, 0x30, 0x2, 0x70b52d, 0x25dfdbff, {}, [{0x294, 0x1, [@m_skbmod={0x1a8, 0x1f, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x81}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x7fff}, 0x7}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xff, 0x9, 0x20000000, 0x80000001, 0x8}, 0x9}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x2, 0x1, 0x7, 0x5}, 0xb}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0xd5, 0x6, "f35b172d7baa6650224966c3f64eab2c30518026962cf5e57280dcc6e0b661da29afad601525508fce3d07af5dbb2381b08ccd78556c2f647620132671db1d7c309ebf6ed9bc2f6b34c06c478c617dcc6317198463a26239ee99dff9479ece66ca5a638081721d7abf577a62661f2fd72b9861bd4c0ec269d5a8d476a77a8d3e900d3ab9594606b9a1193813c8fa3b6eae4487242a39bb08c3fb5efe0513a176efe7d453756955a40048b74b617760e6e0ab30fae7f4eb7e131dbd8abb4dc20c8a58b1ebd68afbb719dbdcc144b12d5e71"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0xb8, 0x12, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xa40f, 0x9, 0x0, 0xa, 0x80000000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x3, 0x2, 0x7}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xd944}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xd47, 0x1, 0x7, 0xfffffd4c, 0xe37}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xb39, 0x1, 0x0, 0xb94, 0x7f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x30, 0x11, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x2a8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0xfffffffffffffedf) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.165890271s ago: executing program 2 (id=3451): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') read$FUSE(r0, &(0x7f0000001c00)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)=""/142, 0x8e}], 0x1, 0x0, 0x0) read(r0, &(0x7f0000001b00)=""/194, 0xc2) 1.158699077s ago: executing program 1 (id=3452): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010101}], 0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) 1.04318854s ago: executing program 0 (id=3453): r0 = syz_io_uring_setup(0x516b, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x4395, &(0x7f0000000280), &(0x7f0000000300)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000140), 0x1000000000000221}) io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0) 1.017935345s ago: executing program 2 (id=3454): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1fffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000c40)=[{0x40, 0x0, 0x0, 0x9}, {0x0, 0x4, 0xfffffffe, 0x6}, {0x0, 0x0, 0xf, 0x6}], 0x10, 0xa, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x8a7}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) 865.532077ms ago: executing program 0 (id=3455): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0, 0x0, 0x5c}) 781.084913ms ago: executing program 2 (id=3456): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) socket$inet_sctp(0x2, 0x4, 0x84) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b"], 0xfc) 387.795662ms ago: executing program 2 (id=3457): pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x1107323b) close(r0) writev(0xffffffffffffffff, 0x0, 0x0) 273.639436ms ago: executing program 3 (id=3458): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7aa, &(0x7f0000000000)={{@any, 0xffffffff}}) 158.908065ms ago: executing program 1 (id=3459): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 146.683066ms ago: executing program 2 (id=3460): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 0s ago: executing program 3 (id=3461): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) ppoll(&(0x7f0000000500)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 55f, idProduct=d001, bcdDevice=88.92 [ 265.775847][ T5337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.801418][ T5337] usb 3-1: config 0 descriptor?? [ 265.825457][ T5337] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 265.853618][ T1661] usb 2-1: Using ep0 maxpacket: 8 [ 265.866440][ T1661] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 265.889193][ T1661] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.909085][ T1661] usb 2-1: Product: syz [ 265.913414][ T5279] (null): failure reading functionality [ 265.916239][ T5279] i2c i2c-1: failure reading functionality [ 265.937657][ T1661] usb 2-1: Manufacturer: syz [ 265.942316][ T1661] usb 2-1: SerialNumber: syz [ 265.949836][ T5279] i2c i2c-1: connected i2c-tiny-usb device [ 265.983778][ T5279] usb 4-1: USB disconnect, device number 26 [ 265.984539][ T1661] usb 2-1: config 0 descriptor?? [ 266.228915][ T1661] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 266.241699][ T1661] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 266.268287][ T1661] usb 2-1: USB disconnect, device number 29 [ 266.323643][ T5288] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 266.429797][ T5337] usb 3-1: USB disconnect, device number 23 [ 266.505076][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.517073][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.533602][ T5288] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 266.553586][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.570676][ T5288] usb 1-1: config 0 descriptor?? [ 266.592979][T11642] netlink: 'syz.3.2408': attribute type 1 has an invalid length. [ 266.836518][ T5288] usbhid 1-1:0.0: can't add hid device: -71 [ 266.842671][ T5288] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 266.861679][ T5288] usb 1-1: USB disconnect, device number 26 [ 267.013388][ T5337] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 267.051334][T11660] vcan0: tx drop: invalid sa for name 0x0000000020000000 [ 267.183407][ T5337] usb 4-1: Using ep0 maxpacket: 8 [ 267.196573][ T5337] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 267.211012][ T5337] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 267.227499][ T5337] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 267.237895][ T5337] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.257003][ T5337] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 267.270847][ T5337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.433817][ T5288] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 267.502751][ T5337] usb 4-1: GET_CAPABILITIES returned 0 [ 267.517463][ T5337] usbtmc 4-1:16.0: can't read capabilities [ 267.604140][ T5288] usb 5-1: Using ep0 maxpacket: 16 [ 267.612743][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 267.629095][ T5288] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 267.639061][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.661278][ T5288] usb 5-1: Product: syz [ 267.672721][ T5288] usb 5-1: Manufacturer: syz [ 267.681878][ T5288] usb 5-1: SerialNumber: syz [ 267.691610][ T5288] usb 5-1: config 0 descriptor?? [ 267.701695][ T5288] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 267.715870][ T47] usb 4-1: USB disconnect, device number 27 [ 267.734584][ T5288] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 267.914339][ T1661] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 268.073706][ T1661] usb 1-1: Using ep0 maxpacket: 8 [ 268.080817][ T1661] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 268.090090][ T1661] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.103753][ T1661] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.119338][ T1661] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.130004][ T1661] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.163592][ T1661] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 268.198044][ T1661] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.201827][T11695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2432'. [ 268.317304][ T5288] em28xx 5-1:0.0: chip ID is em2765 [ 268.594592][ T5288] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 268.602940][ T5288] em28xx 5-1:0.0: board has no eeprom [ 268.655411][ T5337] usb 1-1: USB disconnect, device number 27 [ 268.685448][ T5288] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 268.712376][ T5288] em28xx 5-1:0.0: dvb set to bulk mode. [ 268.742067][ T1661] em28xx 5-1:0.0: Binding DVB extension [ 268.756925][ T5288] usb 5-1: USB disconnect, device number 32 [ 268.780689][ T5288] em28xx 5-1:0.0: Disconnecting em28xx [ 268.847154][ T1661] em28xx 5-1:0.0: Registering input extension [ 268.874208][ T5288] em28xx 5-1:0.0: Closing input extension [ 268.916048][ T5288] em28xx 5-1:0.0: Freeing device [ 269.381530][T11733] syz.4.2450 uses obsolete (PF_INET,SOCK_PACKET) [ 269.810222][T11766] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2465'. [ 269.852825][T11766] ipvlan2: entered promiscuous mode [ 270.034013][T11779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2469'. [ 270.219811][ T5337] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 270.405075][ T5337] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 270.423176][ T5337] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 270.443521][ T5337] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 270.478575][ T5337] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 270.513584][ T5337] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 270.534936][ T5337] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 270.542404][ T5337] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 270.573861][ T5337] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 270.603176][ T5337] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 270.635062][ T5337] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 270.657798][ T5337] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 270.666170][ T5337] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 270.703234][ T5337] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 270.726944][ T5337] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 270.753133][ T5337] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 270.799083][ T5337] usb 1-1: string descriptor 0 read error: -22 [ 270.809979][ T5337] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 270.843203][ T5337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.901531][ T5337] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 271.593318][ T1173] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 271.753655][ T1173] usb 4-1: Using ep0 maxpacket: 8 [ 271.775818][ T1173] usb 4-1: config 0 has no interfaces? [ 271.784204][ T1173] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 271.793929][ T1173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.802305][ T1173] usb 4-1: Product: syz [ 271.806734][ T1173] usb 4-1: Manufacturer: syz [ 271.811357][ T1173] usb 4-1: SerialNumber: syz [ 271.821744][ T1173] usb 4-1: config 0 descriptor?? [ 272.069177][ T5337] usb 4-1: USB disconnect, device number 28 [ 272.502252][T11868] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2506'. [ 272.595105][ T25] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 272.761565][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.782507][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.793723][ T25] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 272.802898][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.820934][ T25] usb 5-1: config 0 descriptor?? [ 273.285805][ T25] arvo 0003:1E7D:30D4.0028: unknown main item tag 0x0 [ 273.292664][ T25] arvo 0003:1E7D:30D4.0028: unknown main item tag 0x0 [ 273.324031][ T25] arvo 0003:1E7D:30D4.0028: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 273.423718][ T1661] usb 1-1: USB disconnect, device number 28 [ 273.731671][ T1173] usb 5-1: USB disconnect, device number 33 [ 273.777895][T11911] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 274.034881][T11923] netlink: 'syz.1.2529': attribute type 12 has an invalid length. [ 274.045666][T11923] netlink: 'syz.1.2529': attribute type 10 has an invalid length. [ 274.548202][T11949] netlink: 'syz.0.2539': attribute type 11 has an invalid length. [ 274.643244][ T1173] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 274.803161][ T1173] usb 5-1: Using ep0 maxpacket: 32 [ 274.813201][ T1173] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.827530][ T1173] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.848243][ T1173] usb 5-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 274.862643][ T1173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.904825][ T1173] usb 5-1: config 0 descriptor?? [ 275.332186][ T1173] hid_mf 0003:0079:1801.0029: unknown main item tag 0x0 [ 275.349783][ T1173] hid_mf 0003:0079:1801.0029: unknown main item tag 0x0 [ 275.373815][ T1173] hid_mf 0003:0079:1801.0029: hidraw0: USB HID v0.00 Device [HID 0079:1801] on usb-dummy_hcd.4-1/input0 [ 275.401539][ T1173] hid_mf 0003:0079:1801.0029: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 275.582087][ T1173] usb 5-1: USB disconnect, device number 34 [ 275.582529][T11999] tun0: tun_chr_ioctl cmd 1074025677 [ 275.629270][T11999] tun0: linktype set to 825 [ 275.649562][T12006] tipc: Started in network mode [ 275.669869][T12006] tipc: Node identity ac14140f, cluster identity 4711 [ 275.678131][T12006] tipc: New replicast peer: 255.255.255.255 [ 275.685630][T12006] tipc: Enabled bearer , priority 10 [ 276.233233][ T5288] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 276.404056][ T5288] usb 3-1: Using ep0 maxpacket: 32 [ 276.418777][ T5288] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 276.448120][ T5288] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 276.483243][ T5288] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 276.499995][ T2935] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.523968][ T5288] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 276.558826][ T5288] usb 3-1: config 0 interface 0 has no altsetting 0 [ 276.589044][ T5288] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 276.599887][ T5288] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 276.615972][ T5288] usb 3-1: Product: syz [ 276.620258][ T5288] usb 3-1: Manufacturer: syz [ 276.629621][ T5288] usb 3-1: SerialNumber: syz [ 276.666422][ T2935] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.678421][ T5288] usb 3-1: config 0 descriptor?? [ 276.701307][ T5288] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 276.727876][ T5288] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 276.803633][ T5288] tipc: Node number set to 2886997007 [ 276.816506][ T2935] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.972863][ T5288] usb 3-1: USB disconnect, device number 24 [ 276.979381][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 277.029845][ T5288] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 277.089333][ T2935] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.089373][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.124050][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.134414][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.142760][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.166643][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.185674][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.256683][ T2935] bridge_slave_1: left allmulticast mode [ 277.262389][ T2935] bridge_slave_1: left promiscuous mode [ 277.268617][ T2935] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.277844][ T2935] bridge_slave_0: left allmulticast mode [ 277.285307][ T2935] bridge_slave_0: left promiscuous mode [ 277.291080][ T2935] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.292799][T12026] ldusb: No device or device unplugged -19 [ 277.775453][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.784467][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.795141][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.803673][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.814006][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.821522][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.999716][ T2935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.011669][ T2935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.022591][ T2935] bond0 (unregistering): Released all slaves [ 278.176841][T12068] syz.4.2596 (12068) used greatest stack depth: 16336 bytes left [ 278.485670][T12086] ALSA: mixer_oss: invalid OSS volume 'Ńc›' [ 278.636777][ T2935] hsr_slave_0: left promiscuous mode [ 278.653655][ T2935] hsr_slave_1: left promiscuous mode [ 278.676959][ T2935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.693817][ T2935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.713904][ T2935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.729226][ T2935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.783563][ T2935] veth1_macvtap: left promiscuous mode [ 278.789685][ T2935] veth0_macvtap: left promiscuous mode [ 278.809268][ T2935] veth1_vlan: left allmulticast mode [ 278.828798][ T2935] veth1_vlan: left promiscuous mode [ 278.849380][ T2935] veth0_vlan: left promiscuous mode [ 278.963498][ T1173] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 279.068117][ T2935] pim6reg (unregistering): left allmulticast mode [ 279.124274][ T1173] usb 5-1: Using ep0 maxpacket: 32 [ 279.131111][ T1173] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 279.152783][ T1173] usb 5-1: config 0 has no interface number 0 [ 279.170815][ T1173] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 279.182033][ T1173] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 279.192321][ T1173] usb 5-1: config 0 interface 126 has no altsetting 0 [ 279.229559][ T2935] macvlan0 (unregistering): left allmulticast mode [ 279.237152][ T1173] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 279.247327][ T1173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.255532][ T5232] Bluetooth: hci0: command tx timeout [ 279.272621][ T1173] usb 5-1: Product: syz [ 279.289536][ T1173] usb 5-1: Manufacturer: syz [ 279.294681][ T1173] usb 5-1: SerialNumber: syz [ 279.319907][ T1173] usb 5-1: config 0 descriptor?? [ 279.327966][T12099] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 279.351663][T12099] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 279.617321][ T2935] team0 (unregistering): Port device team_slave_1 removed [ 279.670530][ T2935] team0 (unregistering): Port device team_slave_0 removed [ 279.778159][ T1173] ir_usb 5-1:0.126: IR Dongle converter detected [ 279.903662][ T5232] Bluetooth: hci4: command tx timeout [ 280.000608][ T1173] usb 5-1: IR Dongle converter now attached to ttyUSB0 [ 280.201808][ T47] usb 5-1: USB disconnect, device number 35 [ 280.213674][ T47] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 280.226949][ T47] ir_usb 5-1:0.126: device disconnected [ 280.241674][T12109] netlink: 'syz.2.2609': attribute type 10 has an invalid length. [ 280.258728][T12109] team0: Device hsr_slave_0 failed to register rx_handler [ 280.465273][T12055] chnl_net:caif_netlink_parms(): no params data found [ 280.563280][ T1661] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 280.575214][T12062] chnl_net:caif_netlink_parms(): no params data found [ 280.725673][ T1661] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.739344][T12055] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.746915][ T1661] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.759777][T12055] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.767502][ T1661] usb 3-1: config 0 interface 0 has no altsetting 0 [ 280.781729][ T1661] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 280.782462][T12055] bridge_slave_0: entered allmulticast mode [ 280.791095][ T1661] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.808388][ T1661] usb 3-1: config 0 descriptor?? [ 280.839567][T12055] bridge_slave_0: entered promiscuous mode [ 280.888323][T12055] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.906052][T12055] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.919303][T12055] bridge_slave_1: entered allmulticast mode [ 280.927935][T12055] bridge_slave_1: entered promiscuous mode [ 280.953299][ T5337] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 281.035867][T12055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.049645][T12055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.111937][ T5279] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 281.122165][ T5337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.126745][ T2935] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.139319][ T5337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.159355][ T5337] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 281.170864][T12062] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.178559][T12062] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.184922][ T5337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.186527][T12062] bridge_slave_0: entered allmulticast mode [ 281.206122][ T5337] usb 4-1: config 0 descriptor?? [ 281.224541][T12062] bridge_slave_0: entered promiscuous mode [ 281.240009][ T1661] zydacron 0003:13EC:0006.002A: unknown main item tag 0x0 [ 281.250615][ T1661] zydacron 0003:13EC:0006.002A: unknown main item tag 0x0 [ 281.258227][ T1661] zydacron 0003:13EC:0006.002A: unexpected long global item [ 281.267995][ T1661] zydacron 0003:13EC:0006.002A: parse failed [ 281.274312][ T1661] zydacron 0003:13EC:0006.002A: probe with driver zydacron failed with error -22 [ 281.284894][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.304815][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.326516][ T5279] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 281.338277][ T2935] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.343221][ T5232] Bluetooth: hci0: command tx timeout [ 281.349516][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.370190][T12062] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.370394][ T5279] usb 5-1: config 0 descriptor?? [ 281.378009][T12062] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.390835][T12062] bridge_slave_1: entered allmulticast mode [ 281.398239][T12062] bridge_slave_1: entered promiscuous mode [ 281.423835][T12055] team0: Port device team_slave_0 added [ 281.445088][T12055] team0: Port device team_slave_1 added [ 281.455377][ T9] usb 3-1: USB disconnect, device number 25 [ 281.555548][ T2935] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.636845][ T5337] lenovo 0003:17EF:6062.002B: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.3-1/input0 [ 281.724409][ T2935] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.749944][T12055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.770141][T12055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.810439][T12055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.842811][ T5279] hid-thrustmaster 0003:044F:B65D.002C: unknown main item tag 0x0 [ 281.870006][T12055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.885045][T12055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.885268][ T9] usb 4-1: USB disconnect, device number 29 [ 281.911937][T12055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.925416][ T5279] hid-thrustmaster 0003:044F:B65D.002C: hidraw1: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 281.939675][T12062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.952065][ T5279] hid-thrustmaster 0003:044F:B65D.002C: Wrong number of endpoints? [ 281.954389][T12062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.973273][ T5232] Bluetooth: hci4: command tx timeout [ 282.096193][ C0] hid-thrustmaster 0003:044F:B65D.002C: Unknown packet type 0x0, unable to proceed further with wheel init [ 282.129970][T12062] team0: Port device team_slave_0 added [ 282.168290][T12062] team0: Port device team_slave_1 added [ 282.191835][T12055] hsr_slave_0: entered promiscuous mode [ 282.207262][T12055] hsr_slave_1: entered promiscuous mode [ 282.271719][ T2935] bridge_slave_1: left allmulticast mode [ 282.285155][ T2935] bridge_slave_1: left promiscuous mode [ 282.290926][ T2935] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.298297][ T47] usb 5-1: USB disconnect, device number 36 [ 282.319801][ T2935] bridge_slave_0: left allmulticast mode [ 282.331459][ T2935] bridge_slave_0: left promiscuous mode [ 282.338867][ T2935] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.771765][ T2935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.797203][ T2935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.811088][ T2935] bond0 (unregistering): Released all slaves [ 282.836461][T12171] vlan2: entered promiscuous mode [ 282.842085][T12171] vlan2: entered allmulticast mode [ 282.848196][T12171] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 282.855850][T12171] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 282.867490][T12171] team0: Port device vlan2 added [ 282.909640][T12062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.929648][T12062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.966249][T12062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.011406][ T2935] tipc: Disabling bearer [ 283.043351][ T2935] tipc: Left network mode [ 283.123609][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2625'. [ 283.134166][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2625'. [ 283.145732][T12062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.152739][T12062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.161902][T12189] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2626'. [ 283.215456][T12062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.372594][T12189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2626'. [ 283.413600][ T5232] Bluetooth: hci0: command tx timeout [ 283.828470][T12062] hsr_slave_0: entered promiscuous mode [ 283.839204][T12062] hsr_slave_1: entered promiscuous mode [ 283.846845][T12062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.873276][T12062] Cannot create hsr debugfs directory [ 284.013822][ T2935] hsr_slave_0: left promiscuous mode [ 284.030719][ T2935] hsr_slave_1: left promiscuous mode [ 284.037396][ T2935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.053438][ T5232] Bluetooth: hci4: command tx timeout [ 284.060683][ T2935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.079321][ T2935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.093208][ T2935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.142459][ T2935] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 284.149923][ T2935] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 284.166289][ T2935] veth1_macvtap: left promiscuous mode [ 284.171853][ T2935] veth0_macvtap: left promiscuous mode [ 284.181042][ T2935] veth1_vlan: left promiscuous mode [ 284.191138][ T2935] veth0_vlan: left promiscuous mode [ 284.415676][ T2935] team0 (unregistering): Port device vlan2 removed [ 285.495872][ T5232] Bluetooth: hci0: command tx timeout [ 285.575612][ T2935] team0 (unregistering): Port device team_slave_1 removed [ 285.666804][ T2935] team0 (unregistering): Port device team_slave_0 removed [ 286.118928][ T47] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 286.135857][ T5232] Bluetooth: hci4: command tx timeout [ 286.273335][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 286.300012][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.317081][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 286.330838][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 286.347817][ T47] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 286.359256][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.381652][ T47] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 286.390987][ T47] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 286.424589][ T47] usb 3-1: Manufacturer: syz [ 286.431710][ T47] usb 3-1: config 0 descriptor?? [ 286.724236][ T47] rc_core: IR keymap rc-hauppauge not found [ 286.730202][ T47] Registered IR keymap rc-empty [ 286.738266][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 286.773667][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 286.812000][ T47] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 286.842480][ T47] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input44 [ 286.905366][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 286.933990][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 286.974415][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 287.018624][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 287.043652][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 287.063275][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 287.083328][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 287.127323][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 287.174464][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 287.213682][ T47] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 287.260398][T12055] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 287.269788][ T47] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 287.283401][ T2935] IPVS: stop unused estimator thread 0... [ 287.303802][ T47] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 287.338014][T12055] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 287.345172][ T47] usb 3-1: USB disconnect, device number 26 [ 287.366095][T12055] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 287.410976][T12055] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 287.867110][T12055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.971200][T12055] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.989055][ T4010] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.996229][ T4010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.052578][T12062] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 288.068951][T12062] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 288.100119][ T4010] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.107320][ T4010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.141139][T12062] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 288.152827][T12062] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 288.348439][T12055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.588427][T12055] veth0_vlan: entered promiscuous mode [ 288.639116][T12055] veth1_vlan: entered promiscuous mode [ 288.650498][T12062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.737261][T12062] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.774490][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.781621][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.877593][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.884792][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.979011][T12055] veth0_macvtap: entered promiscuous mode [ 289.042410][T12055] veth1_macvtap: entered promiscuous mode [ 289.097344][T12055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.143337][T12055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.178543][T12055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.206075][T12055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.226812][T12055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.277010][T12055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.296391][T12055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.309259][T12055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.325903][T12055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.357821][T12055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.390976][T12055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.415271][T12055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.454972][T12055] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.479026][T12055] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.500201][T12055] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.523341][T12055] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.557284][T12062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.744450][T12062] veth0_vlan: entered promiscuous mode [ 289.800033][T12062] veth1_vlan: entered promiscuous mode [ 289.815217][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.829845][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.886338][ T2935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.909495][ T2935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.975103][T12062] veth0_macvtap: entered promiscuous mode [ 290.016703][T12062] veth1_macvtap: entered promiscuous mode [ 290.102080][T12062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.147872][T12062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.172485][T12062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.198816][T12062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.223635][T12062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.245384][T12062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.277210][T12062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.449275][T12062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.464589][T12062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.474739][T12062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.485459][T12062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.495568][T12062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.506243][T12062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.516327][T12062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.527050][T12062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.539666][T12062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.587582][T12062] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.602332][T12062] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.611719][T12062] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.631802][T12062] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.673205][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 290.765745][T12411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2695'. [ 290.898740][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 290.915155][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.924324][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 290.935454][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 290.944124][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.963478][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.032525][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 291.064088][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.086996][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.098273][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.121244][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 291.150308][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.181529][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.247606][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 291.293709][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.302655][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.349986][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.374654][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 291.414587][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.453189][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.483950][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 291.492632][ T2935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.506963][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.529927][ T2935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.533133][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.598355][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 291.671125][ T5229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 291.678446][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.689482][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.700651][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 291.710317][ T5229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.716153][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.728807][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 291.739263][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.746424][ T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 291.755094][ T9] usb 5-1: Product: syz [ 291.759386][ T9] usb 5-1: Manufacturer: syz [ 291.764302][ T9] usb 5-1: SerialNumber: syz [ 291.770277][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 291.780675][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 291.788833][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 291.797764][ T9] usb 5-1: config 0 descriptor?? [ 291.813822][ T9] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 291.909288][ T11] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 291.929999][ T11] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 292.005610][T12447] trusted_key: syz.3.2702 sent an empty control message without MSG_MORE. [ 292.032850][ T11] team0: Port device vlan2 removed [ 292.089506][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 292.090119][ T5288] usb 5-1: USB disconnect, device number 37 [ 292.107896][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.121246][ T5288] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 292.181916][ T4010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.219157][ T4010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.530216][ T11] bridge_slave_1: left allmulticast mode [ 292.560991][ T11] bridge_slave_1: left promiscuous mode [ 292.571286][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.591224][ T11] bridge_slave_0: left allmulticast mode [ 292.621409][ T11] bridge_slave_0: left promiscuous mode [ 292.646885][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.306731][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.318017][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.330429][ T11] bond0 (unregistering): Released all slaves [ 293.414017][T12443] chnl_net:caif_netlink_parms(): no params data found [ 293.671108][T12519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2719'. [ 293.903226][ T5232] Bluetooth: hci3: command tx timeout [ 294.117481][T12533] netlink: 'syz.1.2724': attribute type 6 has an invalid length. [ 294.178490][T12443] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.208617][T12443] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.248658][T12443] bridge_slave_0: entered allmulticast mode [ 294.263430][T12443] bridge_slave_0: entered promiscuous mode [ 294.275471][T12443] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.290522][T12443] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.304146][T12443] bridge_slave_1: entered allmulticast mode [ 294.314208][T12443] bridge_slave_1: entered promiscuous mode [ 294.364217][ T11] hsr_slave_0: left promiscuous mode [ 294.390097][ T11] hsr_slave_1: left promiscuous mode [ 294.425241][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.432719][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.466390][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.493460][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.537206][ T11] veth1_macvtap: left promiscuous mode [ 294.542803][ T11] veth0_macvtap: left promiscuous mode [ 294.561435][ T11] veth1_vlan: left promiscuous mode [ 294.569582][ T11] veth0_vlan: left promiscuous mode [ 294.623446][ T2935] tipc: Subscription rejected, illegal request [ 294.943215][ T25] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 295.108154][ T25] usb 2-1: config index 0 descriptor too short (expected 106, got 36) [ 295.116710][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 295.140573][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33295, setting to 1024 [ 295.151963][ T25] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 295.170861][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.202796][ T25] usb 2-1: config 0 descriptor?? [ 295.320501][ T11] team0 (unregistering): Port device team_slave_1 removed [ 295.372847][ T11] team0 (unregistering): Port device team_slave_0 removed [ 295.646789][ T25] corsair 0003:1B1C:1B3E.002D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0 [ 295.857342][ T1173] usb 2-1: USB disconnect, device number 30 [ 295.973493][ T5232] Bluetooth: hci3: command tx timeout [ 296.038428][T12443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.057978][T12443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.189186][T12443] team0: Port device team_slave_0 added [ 296.197985][T12443] team0: Port device team_slave_1 added [ 296.282227][T12591] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 296.299715][T12443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.309963][T12443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.375995][T12443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.436788][T12443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.453008][T12443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.479498][T12443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.533787][T12600] openvswitch: netlink: Actions may not be safe on all matching packets [ 296.786617][T12443] hsr_slave_0: entered promiscuous mode [ 296.803532][T12443] hsr_slave_1: entered promiscuous mode [ 296.826094][T12443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.866836][T12443] Cannot create hsr debugfs directory [ 297.118201][T12627] vlan2: entered allmulticast mode [ 297.141646][T12627] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 297.177929][T12627] mac80211_hwsim hwsim37 wlan1: left allmulticast mode [ 297.259271][ T11] IPVS: stop unused estimator thread 0... [ 298.058003][ T5232] Bluetooth: hci3: command tx timeout [ 298.529741][T12443] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 298.568267][T12443] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 298.647108][T12443] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 298.678161][T12443] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 298.793724][ T960] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.025104][ T960] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.174740][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.184692][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.233584][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.246193][ T960] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.267123][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.281036][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 299.289380][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.439474][ T960] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.503033][T12443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.577472][T12443] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.656483][T12743] netlink: 'syz.0.2794': attribute type 1 has an invalid length. [ 299.688375][ T7014] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.695571][ T7014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.759475][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.766664][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.009669][ T960] bridge_slave_1: left allmulticast mode [ 300.025913][ T960] bridge_slave_1: left promiscuous mode [ 300.033738][ T960] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.077700][ T960] bridge_slave_0: left allmulticast mode [ 300.090652][ T960] bridge_slave_0: left promiscuous mode [ 300.118423][ T960] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.141507][ T5232] Bluetooth: hci3: command tx timeout [ 300.659136][ T960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.669958][ T960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.680767][ T960] bond0 (unregistering): Released all slaves [ 300.925783][T12733] chnl_net:caif_netlink_parms(): no params data found [ 300.975299][T12443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.193545][ T5288] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 301.270310][T12809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2811'. [ 301.324110][ T960] hsr_slave_0: left promiscuous mode [ 301.338933][ T5232] Bluetooth: hci4: command tx timeout [ 301.357046][ T960] hsr_slave_1: left promiscuous mode [ 301.363555][ T5288] usb 1-1: Using ep0 maxpacket: 32 [ 301.372920][ T5288] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 301.382583][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.393495][ T5288] usb 1-1: config 0 descriptor?? [ 301.401148][ T5288] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 301.407741][ T960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.433585][ T960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.448153][ T960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.470124][ T960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.541050][ T960] veth1_macvtap: left promiscuous mode [ 301.553784][ T960] veth0_macvtap: left promiscuous mode [ 301.573583][ T960] veth1_vlan: left promiscuous mode [ 301.579001][ T960] veth0_vlan: left promiscuous mode [ 302.247340][ T5288] gspca_nw80x: reg_r err -71 [ 302.252092][ T5288] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 302.267848][ T5288] usb 1-1: USB disconnect, device number 29 [ 302.277411][ T960] team0 (unregistering): Port device team_slave_1 removed [ 302.328821][ T960] team0 (unregistering): Port device team_slave_0 removed [ 302.807851][T12443] veth0_vlan: entered promiscuous mode [ 302.859601][T12733] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.877324][T12733] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.890840][T12733] bridge_slave_0: entered allmulticast mode [ 302.898020][T12733] bridge_slave_0: entered promiscuous mode [ 302.927063][T12443] veth1_vlan: entered promiscuous mode [ 302.934303][T12733] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.941406][T12733] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.971014][T12733] bridge_slave_1: entered allmulticast mode [ 302.979573][T12733] bridge_slave_1: entered promiscuous mode [ 303.039380][T12443] veth0_macvtap: entered promiscuous mode [ 303.076042][T12733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.086587][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2822'. [ 303.167382][T12733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.251382][T12443] veth1_macvtap: entered promiscuous mode [ 303.340146][T12733] team0: Port device team_slave_0 added [ 303.360372][T12854] warning: `syz.0.2824' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 303.402755][T12733] team0: Port device team_slave_1 added [ 303.413871][ T5232] Bluetooth: hci4: command tx timeout [ 303.423874][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.465018][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.493340][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.523512][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.554861][T12443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.687112][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.718254][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.753247][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.783169][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.802126][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.819414][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.837140][T12443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.851658][T12733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.862822][T12733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.919909][T12733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.933125][T12733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.940096][T12733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.992699][T12733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.045628][T12443] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.060670][T12443] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.070662][T12443] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.080059][T12443] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.291079][T12733] hsr_slave_0: entered promiscuous mode [ 304.323947][T12733] hsr_slave_1: entered promiscuous mode [ 304.359610][T12733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.373178][T12733] Cannot create hsr debugfs directory [ 304.573352][ T960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.602391][ T960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.753396][ T9] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 304.761336][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.779894][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.943955][ T9] usb 1-1: config 0 has no interfaces? [ 304.949535][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 304.974695][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.989743][ T9] usb 1-1: config 0 descriptor?? [ 305.242998][ T9] usb 1-1: USB disconnect, device number 30 [ 305.493915][ T5232] Bluetooth: hci4: command tx timeout [ 305.680221][T12733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 305.715880][T12733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 305.736685][T12733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 305.766464][T12733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 305.881855][T12935] support for cryptoloop has been removed. Use dm-crypt instead. [ 305.923409][ T25] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 306.007870][T12733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.028828][T12942] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 306.094505][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 306.109230][T12733] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.125108][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.153625][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.165439][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.172549][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.193456][ T25] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 306.222955][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.246375][ T7014] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.253561][ T7014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.262983][ T25] usb 5-1: config 0 descriptor?? [ 306.412239][T12733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.544330][T12733] veth0_vlan: entered promiscuous mode [ 306.592751][T12733] veth1_vlan: entered promiscuous mode [ 306.634206][T12733] veth0_macvtap: entered promiscuous mode [ 306.645905][T12733] veth1_macvtap: entered promiscuous mode [ 306.667802][T12733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.678532][T12733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.688742][T12733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.699387][T12733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.709358][T12733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.720106][T12733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.731769][T12733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.756134][T12733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.772498][T12733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.782652][T12733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.793435][T12733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.803450][T12733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.814021][T12733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.823906][T12733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.834480][T12733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.846479][T12733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.857145][T12733] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.865987][T12733] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.875031][T12733] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.883868][T12733] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.903003][ T25] ft260 0003:0403:6030.002E: unknown main item tag 0x0 [ 307.019777][ T2935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.028137][ T2935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.031570][ T25] ft260 0003:0403:6030.002E: chip code: 0000 0000 [ 307.035708][ T7014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.071666][ T7014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.123344][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 307.221393][ T25] ft260 0003:0403:6030.002E: failed to retrieve system status [ 307.236057][ T25] ft260 0003:0403:6030.002E: probe with driver ft260 failed with error -71 [ 307.262229][ T25] usb 5-1: USB disconnect, device number 38 [ 307.306368][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.363754][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.415485][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 307.433106][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 307.463027][ T9] usb 1-1: SerialNumber: syz [ 307.574086][ T5232] Bluetooth: hci4: command tx timeout [ 307.718407][ T9] usb 1-1: 0:2 : does not exist [ 307.776852][ T9] usb 1-1: USB disconnect, device number 31 [ 308.153763][ T5337] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 308.173263][ T5281] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 308.326424][ T5337] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 308.333185][ T5281] usb 5-1: Using ep0 maxpacket: 32 [ 308.347075][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.353170][ T5337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.362733][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.374889][ T5337] usb 3-1: Product: syz [ 308.382130][ T5337] usb 3-1: Manufacturer: syz [ 308.402622][ T5281] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 308.415756][ T5337] usb 3-1: SerialNumber: syz [ 308.433535][ T5337] usb 3-1: config 0 descriptor?? [ 308.473951][ T5281] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 308.496317][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.518016][ T5281] usb 5-1: config 0 descriptor?? [ 308.535802][T13025] tipc: Started in network mode [ 308.541039][T13025] tipc: Node identity -, cluster identity 4711 [ 308.559917][T13025] tipc: Enabling of bearer rejected, failed to enable media [ 308.692593][ T25] usb 3-1: USB disconnect, device number 27 [ 308.972979][ T5281] hid (null): global environment stack underflow [ 308.996584][ T5281] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.002F/input/input45 [ 309.093778][ T5281] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.002F/input/input46 [ 309.236495][ T5281] kye 0003:0458:5011.002F: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 309.309441][ T5281] usb 5-1: USB disconnect, device number 39 [ 309.389169][T13051] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2886'. [ 309.668956][ T2935] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.246980][ T2935] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.343873][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.353966][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.446086][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.456690][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.466251][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 310.478999][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.526186][ T2935] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.985700][ T2935] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.479194][ T2935] bridge_slave_1: left allmulticast mode [ 311.506363][ T2935] bridge_slave_1: left promiscuous mode [ 311.543904][ T2935] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.597182][ T2935] bridge_slave_0: left allmulticast mode [ 311.612374][ T2935] bridge_slave_0: left promiscuous mode [ 311.637671][ T2935] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.535954][ T5229] Bluetooth: hci0: command tx timeout [ 312.753002][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.762791][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.771782][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.780796][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.792440][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 312.800233][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 313.281338][ T2935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.292404][ T2935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.304863][ T2935] bond0 (unregistering): Released all slaves [ 313.417581][T13078] chnl_net:caif_netlink_parms(): no params data found [ 313.432806][ T2935] tipc: Left network mode [ 313.553453][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2915'. [ 313.804998][T13078] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.849819][T13078] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.872639][T13078] bridge_slave_0: entered allmulticast mode [ 313.891425][T13078] bridge_slave_0: entered promiscuous mode [ 314.105423][T13078] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.112851][T13078] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.124966][T13078] bridge_slave_1: entered allmulticast mode [ 314.131973][T13078] bridge_slave_1: entered promiscuous mode [ 314.286514][ T2935] hsr_slave_0: left promiscuous mode [ 314.309769][ T2935] hsr_slave_1: left promiscuous mode [ 314.329329][ T2935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.353150][ T2935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.364731][ T2935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.372200][ T2935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.415415][ T2935] veth1_macvtap: left promiscuous mode [ 314.423514][ T2935] veth0_macvtap: left promiscuous mode [ 314.429089][ T2935] veth1_vlan: left promiscuous mode [ 314.443816][ T2935] veth0_vlan: left promiscuous mode [ 314.544254][ T5283] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 314.620810][ T5229] Bluetooth: hci0: command tx timeout [ 314.717703][ T5283] usb 3-1: Using ep0 maxpacket: 16 [ 314.728545][ T5283] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 314.751011][ T5283] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 314.761886][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.790188][ T5283] usb 3-1: config 0 descriptor?? [ 314.816808][ T5283] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input47 [ 314.861301][ T5229] Bluetooth: hci2: command tx timeout [ 315.030359][ T2935] team0 (unregistering): Port device team_slave_1 removed [ 315.075513][ T4670] bcm5974 3-1:0.0: could not read from device [ 315.101803][ T2935] team0 (unregistering): Port device team_slave_0 removed [ 315.112964][T13179] bcm5974 3-1:0.0: could not read from device [ 315.153002][ T4670] bcm5974 3-1:0.0: could not read from device [ 315.154975][ T5283] usb 3-1: USB disconnect, device number 28 [ 315.592783][T13174] netlink: 1040 bytes leftover after parsing attributes in process `syz.4.2927'. [ 315.605702][T13174] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 315.666008][T13078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.700442][T13078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.738671][T13119] chnl_net:caif_netlink_parms(): no params data found [ 315.827610][T13078] team0: Port device team_slave_0 added [ 315.848869][T13078] team0: Port device team_slave_1 added [ 316.028636][T13078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.054143][T13078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.118940][T13078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.185866][T13194] tap0: tun_chr_ioctl cmd 1074025676 [ 316.191309][T13194] tap0: owner set to 0 [ 316.203406][T13078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.210388][T13078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.272556][T13078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.312266][T13119] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.329176][T13119] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.343285][T13119] bridge_slave_0: entered allmulticast mode [ 316.354456][T13119] bridge_slave_0: entered promiscuous mode [ 316.385114][T13119] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.403198][T13119] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.410496][T13119] bridge_slave_1: entered allmulticast mode [ 316.418154][T13119] bridge_slave_1: entered promiscuous mode [ 316.521793][T13119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.538728][T13119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.597614][T13078] hsr_slave_0: entered promiscuous mode [ 316.603503][T13078] hsr_slave_1: entered promiscuous mode [ 316.704541][ T5229] Bluetooth: hci0: command tx timeout [ 316.780623][T13119] team0: Port device team_slave_0 added [ 316.856442][T13119] team0: Port device team_slave_1 added [ 316.942171][T13119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.949341][ T5229] Bluetooth: hci2: command tx timeout [ 316.978026][T13119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.003950][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.011224][T13119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.038296][T13119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.047820][T13119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.073724][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.083008][T13119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.255035][T13119] hsr_slave_0: entered promiscuous mode [ 317.283576][T13119] hsr_slave_1: entered promiscuous mode [ 317.313739][T13119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.321390][T13119] Cannot create hsr debugfs directory [ 317.353467][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.363212][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.359826][T13288] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 318.543750][T13291] usb usb9: usbfs: interface 0 claimed by hub while 'syz.1.2963' sets config #7 [ 318.662484][T13119] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.779056][T13119] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.791665][ T5232] Bluetooth: hci0: command tx timeout [ 318.920573][T13119] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.013416][ T5232] Bluetooth: hci2: command tx timeout [ 319.058340][T13119] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.269491][T13078] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.327195][T13078] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 319.366551][T13078] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 319.387381][T13078] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 319.462396][T13078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.479071][T13078] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.491959][ T7014] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.499132][ T7014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.561106][ T7014] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.568326][ T7014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.673995][T13119] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 319.707449][T13119] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 319.727725][T13119] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 319.763449][T13119] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 319.942851][T13119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.966027][T13119] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.017187][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.024389][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.057029][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.064215][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.172496][T13078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.338195][T13119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.467142][T13078] veth0_vlan: entered promiscuous mode [ 320.502920][T13119] veth0_vlan: entered promiscuous mode [ 320.566487][T13119] veth1_vlan: entered promiscuous mode [ 320.606243][T13078] veth1_vlan: entered promiscuous mode [ 320.702121][T13119] veth0_macvtap: entered promiscuous mode [ 320.764623][T13119] veth1_macvtap: entered promiscuous mode [ 320.772281][T13078] veth0_macvtap: entered promiscuous mode [ 320.808467][T13078] veth1_macvtap: entered promiscuous mode [ 320.919656][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.951039][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.988502][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.011853][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.050117][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.066857][T13384] Cannot find add_set index 1 as target [ 321.069420][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.093636][ T5232] Bluetooth: hci2: command 0x0419 tx timeout [ 321.115577][T13078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.213790][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.224658][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.234958][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.245737][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.255868][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.266616][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.276604][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.287559][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.299112][T13119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.366221][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.417233][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.458157][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.476318][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.492017][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.511095][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.525881][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.553109][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.575505][T13078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.584331][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.595614][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.633342][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.678859][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.707898][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.730891][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.752573][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.779623][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.799977][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.819589][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.844972][T13119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.857896][T13405] netlink: 'syz.2.2996': attribute type 1 has an invalid length. [ 321.910654][T13119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.968646][T13119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.981933][T13119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.999711][T13119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.021680][T13078] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.044879][T13078] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.067522][T13078] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.085998][T13078] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.341828][ T7014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.353711][ T7014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.429276][ T960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.464290][ T960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.470843][ T2935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.470869][ T2935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.529179][ T2935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.584642][ T2935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.185359][ T5232] Bluetooth: hci2: command 0x0419 tx timeout [ 323.293448][ T8] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 323.513634][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 323.530820][ T8] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 323.541811][ T8] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 323.578334][ T8] usb 1-1: config 0 has no interface number 0 [ 323.599363][ T8] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.653648][ T8] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 323.684642][ T8] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 323.755130][ T8] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 323.766499][ T5337] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 323.793984][ T8] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 323.802020][ T8] usb 1-1: Product: syz [ 323.832151][ T8] usb 1-1: config 0 descriptor?? [ 323.929867][T13517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3026'. [ 323.939251][ T5337] usb 3-1: Using ep0 maxpacket: 32 [ 323.950984][ T5337] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.968908][ T5337] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.993156][ T5337] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.036391][ T5337] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 324.053816][ T5337] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 324.069646][ T5337] usb 3-1: Product: syz [ 324.073993][ T5337] usb 3-1: Manufacturer: syz [ 324.078671][ T5337] usb 3-1: SerialNumber: syz [ 324.097489][ T5337] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input49 [ 324.338252][ T5337] usb 3-1: USB disconnect, device number 29 [ 324.379105][ T5337] appletouch 3-1:1.0: input: appletouch disconnected [ 324.495842][ T8] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input48 [ 324.525832][ T8] input: failed to attach handler kbd to device input48, error: -5 [ 324.709944][ T47] usb 1-1: USB disconnect, device number 32 [ 324.831906][T13553] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 324.923349][ T8] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 325.084912][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.106649][ T8] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 325.116405][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.129155][ T8] usb 5-1: config 0 descriptor?? [ 325.263210][ T5232] Bluetooth: hci2: command 0x0419 tx timeout [ 325.571428][ T8] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor [ 325.584670][ T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0030/input/input50 [ 325.669269][ T8] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 325.819801][T13581] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3053'. [ 325.846430][T13581] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 325.931096][T13583] kvm: kvm [13582]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x20006 [ 326.038597][ T25] usb 5-1: USB disconnect, device number 40 [ 326.184151][ T47] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 326.347230][ T47] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 326.362466][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.381765][ T47] usb 4-1: Product: syz [ 326.390982][ T47] usb 4-1: Manufacturer: syz [ 326.405189][ T47] usb 4-1: SerialNumber: syz [ 326.419367][ T47] usb 4-1: config 0 descriptor?? [ 326.644538][ T47] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 326.683613][ T8] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 326.867292][ T8] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 326.875768][ T8] usb 1-1: config 0 has no interface number 0 [ 326.881887][ T8] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.896174][ T8] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.923945][ T8] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 326.933023][ T8] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 326.949759][ T8] usb 1-1: Manufacturer: syz [ 326.956781][ T8] usb 1-1: config 0 descriptor?? [ 327.007567][ T5337] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 327.046501][ T47] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 327.195416][ T5337] usb 3-1: Using ep0 maxpacket: 32 [ 327.213343][ T5337] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 327.235076][ T5337] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 327.244852][ T5337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.252913][ T5337] usb 3-1: Product: syz [ 327.260105][ T47] usb 4-1: USB disconnect, device number 30 [ 327.261642][ T5337] usb 3-1: Manufacturer: syz [ 327.279370][ T5337] usb 3-1: SerialNumber: syz [ 327.288982][ T5337] usb 3-1: config 0 descriptor?? [ 327.295723][T13610] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 327.304293][ T5337] hub 3-1:0.0: bad descriptor, ignoring hub [ 327.313993][ T5337] hub 3-1:0.0: probe with driver hub failed with error -5 [ 327.338448][ T5337] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input52 [ 327.359336][T13628] vxcan3: entered promiscuous mode [ 327.365173][T13628] vxcan3: entered allmulticast mode [ 327.401194][ T8] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.18/0003:054C:03D5.0031/input/input53 [ 327.463384][ T5279] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 327.506828][ T8] sony 0003:054C:03D5.0031: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.0-1/input18 [ 327.559791][ T47] usb 3-1: USB disconnect, device number 30 [ 327.559791][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 327.656323][ T5279] usb 2-1: Using ep0 maxpacket: 32 [ 327.669763][ T8] usb 1-1: USB disconnect, device number 33 [ 327.686325][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.712970][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.753718][ T5279] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 327.762811][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.773817][ T5279] usb 2-1: config 0 descriptor?? [ 327.787990][ T5279] hub 2-1:0.0: USB hub found [ 327.999402][T13624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.023707][T13624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.033687][ T5279] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 328.048349][ T5279] usbhid 2-1:0.0: can't add hid device: -71 [ 328.055102][ T5279] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 328.094041][ T5279] usb 2-1: USB disconnect, device number 31 [ 328.393309][ T47] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 328.543282][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 328.561392][ T47] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 328.569810][ T47] usb 4-1: config 0 has no interface number 1 [ 328.576500][ T47] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 328.588558][ T47] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 328.600833][ T47] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 328.610354][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.613220][ T5279] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 328.626545][ T47] usb 4-1: Product: syz [ 328.631175][ T47] usb 4-1: Manufacturer: syz [ 328.636232][ T47] usb 4-1: SerialNumber: syz [ 328.642800][ T47] usb 4-1: config 0 descriptor?? [ 328.647964][ T5288] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 328.661964][ T47] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 328.693236][ T8] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 328.803338][ T5288] usb 3-1: Using ep0 maxpacket: 16 [ 328.813354][ T5279] usb 2-1: Using ep0 maxpacket: 8 [ 328.819695][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.824253][ T5279] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 328.839050][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.839096][ T5288] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 328.863927][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 328.872475][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.879339][ T8] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 328.893382][ T47] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 328.893683][ T5279] usb 2-1: config 179 has no interface number 0 [ 328.911080][ T2035] pvrusb2: Failed to submit write-control URB status=-2 [ 328.920202][ T5288] usb 3-1: config 0 descriptor?? [ 328.923138][ T8] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 328.953927][ T2035] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 328.965709][ T5279] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 256, setting to 64 [ 328.977706][ T8] usb 5-1: Product: syz [ 328.986454][ T8] usb 5-1: Manufacturer: syz [ 328.991093][ T8] usb 5-1: SerialNumber: syz [ 328.995908][ T2035] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 329.004489][ T5279] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.025059][ T8] usb 5-1: config 0 descriptor?? [ 329.042422][ T5279] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.060079][ T5279] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 329.083184][ T5279] usb 2-1: config 179 interface 65 has no altsetting 0 [ 329.092476][ T5279] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 329.112330][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.127701][ T47] usb 4-1: USB disconnect, device number 31 [ 329.260957][ T5281] usb 5-1: USB disconnect, device number 41 [ 329.365678][ T5279] usb 2-1: USB disconnect, device number 32 [ 329.395640][ T5288] mcp2200 0003:04D8:00DF.0032: unknown main item tag 0x0 [ 329.415163][ T5288] mcp2200 0003:04D8:00DF.0032: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.2-1/input0 [ 329.624654][ T5281] usb 3-1: USB disconnect, device number 31 [ 329.932813][T13676] tun0: tun_chr_ioctl cmd 1074025677 [ 329.942890][T13676] tun0: linktype set to 774 [ 330.011513][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3098'. [ 330.078496][T13684] netlink: 'syz.3.3100': attribute type 9 has an invalid length. [ 330.099322][T13684] netlink: 91148 bytes leftover after parsing attributes in process `syz.3.3100'. [ 330.116830][T13684] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 330.403597][ T5281] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 330.536216][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3110'. [ 330.553380][ T5281] usb 5-1: Using ep0 maxpacket: 8 [ 330.559841][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3110'. [ 330.560716][ T5281] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.598930][ T5281] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 330.619265][ T5281] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 330.630723][ T5281] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 330.641018][ T5281] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.654129][ T5281] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 330.663309][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.900959][ T5281] usb 5-1: GET_CAPABILITIES returned 0 [ 330.907596][ T5281] usbtmc 5-1:16.0: can't read capabilities [ 331.165350][T13686] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 331.190374][ T5281] usb 5-1: USB disconnect, device number 42 [ 331.918569][T13770] bond_slave_0: entered promiscuous mode [ 331.924790][T13770] bond_slave_1: entered promiscuous mode [ 331.961202][T13770] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 332.005063][T13770] bond_slave_0: left promiscuous mode [ 332.010543][T13770] bond_slave_1: left promiscuous mode [ 332.104834][T13776] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 332.682590][T13803] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3153'. [ 333.448041][T13847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.458667][T13847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.502653][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3174'. [ 333.539737][T13847] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 333.679298][T13855] bridge_slave_1: left allmulticast mode [ 333.703204][T13855] bridge_slave_1: left promiscuous mode [ 333.712167][T13855] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.734916][T13855] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 333.756817][T13857] netlink: 'syz.2.3179': attribute type 22 has an invalid length. [ 333.765068][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3179'. [ 333.913190][ T5288] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 333.956816][T13869] pimreg: entered allmulticast mode [ 333.975664][T13868] pimreg: left allmulticast mode [ 334.096631][ T5288] usb 2-1: Using ep0 maxpacket: 8 [ 334.113349][ T5288] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 334.130169][ T5288] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.153422][ T5288] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 334.185982][ T5288] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 334.207155][ T5288] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.225478][ T5288] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 334.238831][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.465818][ T5288] usb 2-1: GET_CAPABILITIES returned 0 [ 334.491725][ T5288] usbtmc 2-1:16.0: can't read capabilities [ 334.669405][ T5279] usb 2-1: USB disconnect, device number 33 [ 335.137119][T13927] tap0: tun_chr_ioctl cmd 1074025677 [ 335.159868][T13927] tap0: linktype set to 821 [ 335.572509][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3219'. [ 337.656180][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.491682][T14000] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3247'. [ 339.097538][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.107940][ T5279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.153237][ T8] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 339.305471][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.324160][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.343354][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 339.355040][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.408040][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.483925][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 339.539604][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 339.610200][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.674652][ T8] usb 1-1: config 0 descriptor?? [ 340.148671][ T8] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 340.186639][ T8] microsoft 0003:045E:07DA.0033: ignoring exceeding usage max [ 340.284829][ T8] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0033/input/input54 [ 340.461603][ T8] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 340.607139][ T8] usb 1-1: USB disconnect, device number 34 [ 341.930654][T14047] io-wq is not configured for unbound workers [ 342.390804][ T5279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.513838][T14061] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3273'. [ 342.555873][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.633660][ T8] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 342.804436][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 342.833488][ T8] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 342.841926][ T8] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 342.873445][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 342.882458][ T8] usb 1-1: config 1 has no interface number 0 [ 342.914590][ T8] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.963433][ T8] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 343.003170][ T8] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 343.012263][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.113721][ T5232] Bluetooth: hci3: command tx timeout [ 343.585550][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.784300][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3281'. [ 344.309473][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3281'. [ 345.004182][ T8] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 345.023172][ T5232] Bluetooth: hci1: command 0x0406 tx timeout [ 345.282514][T14112] bridge0: entered promiscuous mode [ 345.307353][T14112] bridge0: left promiscuous mode [ 345.573975][ T8] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 345.642183][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 345.673364][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 345.682452][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 345.721343][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 345.732384][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 345.742513][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.806092][ T5288] usb 1-1: USB disconnect, device number 35 [ 345.829572][ T5288] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 345.834958][ T29] kauditd_printk_skb: 3009 callbacks suppressed [ 345.834977][ T29] audit: type=1326 audit(1729103779.389:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14122 comm="syz.2.3299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f895697dff9 code=0x0 [ 345.870478][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.998357][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.161431][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.178122][T14136] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3304'. [ 346.232867][T14123] chnl_net:caif_netlink_parms(): no params data found [ 346.312891][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.371390][T14148] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 346.371390][T14148] The task syz.3.3305 (14148) triggered the difference, watch for misbehavior. [ 346.455430][T14123] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.465983][T14123] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.474466][T14123] bridge_slave_0: entered allmulticast mode [ 346.481657][T14123] bridge_slave_0: entered promiscuous mode [ 346.490048][T14123] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.497716][T14123] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.507523][T14123] bridge_slave_1: entered allmulticast mode [ 346.514710][T14123] bridge_slave_1: entered promiscuous mode [ 346.662532][T14123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.719850][T14123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.916442][T14123] team0: Port device team_slave_0 added [ 346.925505][T14123] team0: Port device team_slave_1 added [ 346.931453][ T67] bridge_slave_1: left allmulticast mode [ 346.965908][ T67] bridge_slave_1: left promiscuous mode [ 346.971682][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.019491][ T67] bridge_slave_0: left allmulticast mode [ 347.038676][ T67] bridge_slave_0: left promiscuous mode [ 347.064802][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.191502][T14190] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3320'. [ 347.816875][ T5229] Bluetooth: hci1: command tx timeout [ 347.855528][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.874076][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.898688][ T67] bond0 (unregistering): Released all slaves [ 347.935461][T14123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.942625][T14123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.968700][T14123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.113439][T14123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.128375][T14123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.195170][T14123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.310068][T14205] netlink: 'syz.3.3326': attribute type 1 has an invalid length. [ 348.506700][T14123] hsr_slave_0: entered promiscuous mode [ 348.547918][T14123] hsr_slave_1: entered promiscuous mode [ 348.560045][T14123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.583240][T14123] Cannot create hsr debugfs directory [ 348.885746][ T67] hsr_slave_0: left promiscuous mode [ 348.906526][ T67] hsr_slave_1: left promiscuous mode [ 348.932963][T14243] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3337'. [ 348.945402][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.961584][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.980431][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.998786][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.045327][ T67] veth1_macvtap: left promiscuous mode [ 349.050917][ T67] veth0_macvtap: left promiscuous mode [ 349.056842][ T67] veth1_vlan: left promiscuous mode [ 349.062206][ T67] veth0_vlan: left promiscuous mode [ 349.671827][ T67] team0 (unregistering): Port device team_slave_1 removed [ 349.738356][ T67] team0 (unregistering): Port device team_slave_0 removed [ 349.899366][ T5229] Bluetooth: hci1: command tx timeout [ 351.037536][ T67] IPVS: stop unused estimator thread 0... [ 351.283665][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 351.304803][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 351.317668][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 351.327540][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 351.335718][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 351.343431][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 351.349430][T14298] net veth1_virt_wifi virt_wifi0: invalid flags given to default FDB implementation [ 351.577870][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.623221][ T5288] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 351.631133][T14308] netlink: 420 bytes leftover after parsing attributes in process `syz.0.3360'. [ 351.716277][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.778410][T14316] netlink: zone id is out of range [ 351.801017][T14316] netlink: zone id is out of range [ 351.813325][ T5288] usb 3-1: Using ep0 maxpacket: 32 [ 351.827372][T14316] netlink: zone id is out of range [ 351.827613][ T5288] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 351.832694][T14316] netlink: zone id is out of range [ 351.856626][T14316] netlink: zone id is out of range [ 351.864732][T14316] netlink: set zone limit has 4 unknown bytes [ 351.895031][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.935345][ T5288] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 351.944602][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 351.952814][ T5288] usb 3-1: Product: syz [ 351.957178][ T5288] usb 3-1: Manufacturer: syz [ 351.961787][ T5288] usb 3-1: SerialNumber: syz [ 351.970228][ T5288] usb 3-1: config 0 descriptor?? [ 351.977587][ T5229] Bluetooth: hci1: command tx timeout [ 351.980375][T14299] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 352.061718][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.162320][T14123] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 352.176259][T14123] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 352.281024][T14123] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 352.308357][T14123] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.315800][ T5288] usb 3-1: USB disconnect, device number 32 [ 352.460491][ T67] bridge_slave_1: left allmulticast mode [ 352.480194][ T67] bridge_slave_1: left promiscuous mode [ 352.494595][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.515471][ T67] bridge_slave_0: left allmulticast mode [ 352.521184][ T67] bridge_slave_0: left promiscuous mode [ 352.537352][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.964721][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.976250][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.987948][ T67] bond0 (unregistering): Released all slaves [ 353.017175][T14302] chnl_net:caif_netlink_parms(): no params data found [ 353.247661][ T29] audit: type=1326 audit(1729103786.809:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz.2.3371" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f895697dff9 code=0x0 [ 353.414952][ T5229] Bluetooth: hci4: command tx timeout [ 353.476646][T14302] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.497673][T14302] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.516658][T14302] bridge_slave_0: entered allmulticast mode [ 353.531048][T14302] bridge_slave_0: entered promiscuous mode [ 353.569896][T14302] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.586678][T14302] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.601257][T14302] bridge_slave_1: entered allmulticast mode [ 353.612886][T14302] bridge_slave_1: entered promiscuous mode [ 353.638665][ T67] hsr_slave_0: left promiscuous mode [ 353.649003][ T67] hsr_slave_1: left promiscuous mode [ 353.661663][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.673033][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.696782][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.716831][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.767330][ T67] veth1_macvtap: left promiscuous mode [ 353.776387][ T67] veth0_macvtap: left promiscuous mode [ 353.787787][ T67] veth1_vlan: left promiscuous mode [ 353.793938][ T67] veth0_vlan: left promiscuous mode [ 354.054510][ T5229] Bluetooth: hci1: command tx timeout [ 354.810074][ T67] team0 (unregistering): Port device team_slave_1 removed [ 354.917238][ T67] team0 (unregistering): Port device team_slave_0 removed [ 355.493244][ T5229] Bluetooth: hci4: command tx timeout Stopping sshd: [ 356.037781][T14383] tun0: tun_chr_ioctl cmd 1074025675 [ 356.061541][T14383] tun0: persist disabled [ 356.135970][T14123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.207763][T14302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.247506][T14302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link Connection to 10.128.0.253 closed by remote host. OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 4898) [ 356.540547][T14302] team0: Port device team_slave_0 added [ 356.601386][T14302] team0: Port device team_slave_1 added Stopping network: [ 356.805127][T14302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.812119][T14302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.883117][T14302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.937095][T14123] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.973947][T14302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.980942][T14302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.061230][T14302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.152517][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.159706][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.288542][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.295739][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.367935][T14496] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.487691][T14302] hsr_slave_0: entered promiscuous mode [ 357.497367][T14302] hsr_slave_1: entered promiscuous mode [ 357.514482][T14302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.522131][T14302] Cannot create hsr debugfs directory [ 357.578615][ T5229] Bluetooth: hci4: command tx timeout [ 357.667266][T14509] input: syz1 as /devices/virtual/input/input55 [ 357.840048][T14123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.943235][ T5288] usb 3-1: new high-speed USB device number 33 using dummy_hcd OK [ 358.113476][ T5288] usb 3-1: Using ep0 maxpacket: 32 [ 358.157462][ T5288] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 358.181734][T14123] veth0_vlan: entered promiscuous mode [ 358.190745][ T5288] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 Stopping iptables: [ 358.209709][T14123] veth1_vlan: entered promiscuous mode [ 358.235938][ T5288] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 358.270043][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.309879][ T5288] usb 3-1: Product: syz OK [ 358.343662][ T5288] usb 3-1: Manufacturer: syz [ 358.348361][ T5288] usb 3-1: SerialNumber: syz Stopping system message bus: [ 358.447952][T14123] veth0_macvtap: entered promiscuous mode [ 358.520637][T14123] veth1_macvtap: entered promiscuous mode [ 358.615896][ T5288] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 358.774772][T14123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.794638][T14123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.823212][T14123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.861752][ T5288] usb 3-1: USB disconnect, device number 33 [ 358.879968][ T5288] usblp0: removed [ 358.884222][T14123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.922918][T14123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.952714][T14123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.968232][T14123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.982589][T14123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 done [ 359.023234][T14123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.049798][T14123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.071173][T14123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.103722][T14123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.129160][T14123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.146288][T14123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.190831][T14123] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.209996][T14123] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.230952][T14123] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.240664][T14123] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.523295][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.531159][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.578710][T14302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 359.653214][ T5229] Bluetooth: hci4: command tx timeout [ 359.679210][T14302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 359.717748][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.730922][T14302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 359.765797][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.812900][T14302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 359.902668][T14585] input: syz0 as /devices/virtual/input/input56 [ 360.092624][T14302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.201157][T14302] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.270873][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.278074][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.389650][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.396875][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.448743][T14302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 360.459312][T14302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.487074][T14302] 8021q: adding VLAN 0 to HW filter on device batadv0 Stopping klogd: [ 360.526748][T14302] veth0_vlan: entered promiscuous mode [ 360.537988][T14302] veth1_vlan: entered promiscuous mode [ 360.559366][T14302] veth0_macvtap: entered promiscuous mode [ 360.568499][T14302] veth1_macvtap: entered promiscuous mode [ 360.585808][T14302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.605194][T14302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.633186][T14302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.673183][T14302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.693611][T14302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.718467][T14302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.739939][T14302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.827012][T14302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 OK [ 360.842399][T14302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.852372][T14302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.863798][T14302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.874171][T14302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.884837][T14302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.894728][T14302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.905257][T14302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.915555][T14302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.926535][T14302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.937788][T14302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.947945][T14302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.956831][T14302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.965638][T14302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.975053][T14302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 Stopping acpid: [ 361.321800][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.356449][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.427091][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.455589][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.502729][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3427'. OK [ 362.363381][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd Stopping syslogd: [ 362.555176][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 362.574237][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.594888][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 OK [ 362.637146][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 362.672863][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 362.708860][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.739406][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 362.757149][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 362.777184][ T9] usb 5-1: Manufacturer: syz [ 362.807051][ T9] usb 5-1: config 0 descriptor?? [ 362.856877][ T29] audit: type=1326 audit(1729103796.409:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14687 comm="syz.3.3449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74eb17dff9 code=0x0 [ 362.878803][ C0] vkms_vblank_simulate: vblank timer overrun umount: can't remount debugfs read-only umount: can't remount tmpfs read-only [ 363.054273][T14701] netlink: 'syz.2.3454': attribute type 12 has an invalid length. [ 363.073329][T14701] netlink: 'syz.2.3454': attribute type 11 has an invalid length. [ 363.091623][T14701] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.3454'. [ 363.157814][ T9] rc_core: IR keymap rc-hauppauge not found [ 363.178943][ T9] Registered IR keymap rc-empty [ 363.195036][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 363.225977][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 363.276243][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 363.310111][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input57 [ 363.350777][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 363.396059][ T5229] Bluetooth: hci3: Malformed LE Event: 0x0b [ 363.410671][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 363.473295][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 363.503605][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 363.523287][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 363.554339][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 363.594191][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 363.610420][ T12] bridge_slave_1: left allmulticast mode [ 363.634343][ T12] bridge_slave_1: left promiscuous mode [ 363.643432][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 363.660151][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.683365][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 363.708455][ T12] bridge_slave_0: left allmulticast mode [ 363.714815][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 363.729239][ T12] bridge_slave_0: left promiscuous mode [ 363.764112][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.784780][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 363.823519][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 363.872799][ T9] usb 5-1: USB disconnect, device number 43 [ 363.920996][T14719] ptrace attach of "./syz-executor exec"[14302] was attempted by "./syz-executor exec"[14719] umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 365.215431][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.227631][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.239450][ T12] bond0 (unregistering): Released all slaves Sent SIGKILL to all processes Requesting system poweroff [ 365.706130][ T12] hsr_slave_0: left promiscuous mode [ 365.712101][ T12] hsr_slave_1: left promiscuous mode [ 365.724919][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.732658][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.740333][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.759556][ T12] veth1_macvtap: left promiscuous mode [ 365.765234][ T12] veth0_macvtap: left promiscuous mode [ 365.770774][ T12] veth1_vlan: left promiscuous mode [ 365.778205][ T12] veth0_vlan: left promiscuous mode [ 366.212111][ T12] team0 (unregistering): Port device team_slave_1 removed [ 366.252483][ T12] team0 (unregistering): Port device team_slave_0 removed [ 366.558342][ T2035] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 366.572303][ T2035] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 366.581963][ T2035] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 366.591929][ T2035] pvrusb2: Failure uploading firmware1 [ 366.597484][ T2035] pvrusb2: Device initialization was not successful. [ 366.605724][ T2035] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 366.615974][ T47] pvrusb2: Device being rendered inoperable [ 366.637028][ T2035] pvrusb2: Failed to submit write-control URB status=-19 [ 366.652853][ T2035] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 366.667092][ T2035] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 366.677448][ T2035] ------------[ cut here ]------------ [ 366.682911][ T2035] WARNING: CPU: 1 PID: 2035 at drivers/base/firmware_loader/fallback.c:148 firmware_fallback_sysfs+0x782/0x9e0 [ 366.695327][ T2035] Modules linked in: [ 366.699244][ T2035] CPU: 1 UID: 0 PID: 2035 Comm: pvrusb2-context Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 366.710664][ T2035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 366.720873][ T2035] RIP: 0010:firmware_fallback_sysfs+0x782/0x9e0 [ 366.727374][ T2035] Code: 1c 24 e9 4d fc ff ff e8 fc a2 93 fb c6 05 c8 81 05 0a 01 48 c7 c7 40 54 87 8c e8 a9 f2 c1 05 e9 72 fc ff ff e8 df a2 93 fb 90 <0f> 0b 90 48 89 df 48 c7 c6 20 55 87 8c 4c 89 ea e8 c9 67 c4 05 e9 [ 366.747335][ T2035] RSP: 0018:ffffc900051ff730 EFLAGS: 00010293 [ 366.753723][ T2035] RAX: ffffffff86014471 RBX: ffff8880651930a8 RCX: ffff888029a00000 [ 366.761724][ T2035] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 366.769782][ T2035] RBP: 000000000000003c R08: ffffffff86013e80 R09: 1ffffffff285932f [ 366.777956][ T2035] R10: dffffc0000000000 R11: fffffbfff2859330 R12: 00000000fffffff5 [ 366.786013][ T2035] R13: ffffffff8cdf0fe0 R14: 0000000000000001 R15: 0000000000001770 [ 366.794047][ T2035] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 366.802988][ T2035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.809620][ T2035] CR2: 00005640bee89680 CR3: 00000000323ac000 CR4: 00000000003526f0 [ 366.817632][ T2035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 366.825660][ T2035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 366.833702][ T2035] Call Trace: [ 366.836988][ T2035] [ 366.839908][ T2035] ? __warn+0x168/0x4e0 [ 366.844169][ T2035] ? firmware_fallback_sysfs+0x782/0x9e0 [ 366.850047][ T2035] ? report_bug+0x2b3/0x500 [ 366.854908][ T2035] ? firmware_fallback_sysfs+0x782/0x9e0 [ 366.860566][ T2035] ? handle_bug+0x60/0x90 [ 366.864940][ T2035] ? exc_invalid_op+0x1a/0x50 [ 366.869610][ T2035] ? asm_exc_invalid_op+0x1a/0x20 [ 366.874684][ T2035] ? firmware_fallback_sysfs+0x190/0x9e0 [ 366.880328][ T2035] ? firmware_fallback_sysfs+0x781/0x9e0 [ 366.886038][ T2035] ? firmware_fallback_sysfs+0x782/0x9e0 [ 366.891774][ T2035] ? _request_firmware+0xd5a/0x13b0 [ 366.897019][ T2035] ? kmem_cache_free+0x1a2/0x420 [ 366.901951][ T2035] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 366.907423][ T2035] ? _request_firmware+0xd5a/0x13b0 [ 366.912635][ T2035] _request_firmware+0xdf7/0x13b0 [ 366.917775][ T2035] ? __pfx__request_firmware+0x10/0x10 [ 366.923302][ T2035] ? pvr2_hdw_initialize+0x33e/0x3d10 [ 366.928697][ T2035] ? __pfx_lock_release+0x10/0x10 [ 366.933990][ T2035] ? pvr2_send_request_ex+0x1a4d/0x22a0 [ 366.939573][ T2035] request_firmware+0x36/0x50 [ 366.944420][ T2035] pvr2_locate_firmware+0xb1/0x500 [ 366.949528][ T2035] pvr2_upload_firmware1+0x1c6/0x950 [ 366.954962][ T2035] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 366.960939][ T2035] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 366.967093][ T2035] pvr2_hdw_initialize+0x411/0x3d10 [ 366.972358][ T2035] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 366.978034][ T2035] ? pvr2_context_thread_func+0x220/0xb50 [ 366.983832][ T2035] ? __pfx_lock_release+0x10/0x10 [ 366.988872][ T2035] ? rcu_is_watching+0x15/0xb0 [ 366.993680][ T2035] ? trace_contention_end+0x3c/0x120 [ 366.998977][ T2035] ? __mutex_lock+0x2ef/0xd70 [ 367.003705][ T2035] ? __mutex_unlock_slowpath+0x21d/0x750 [ 367.009330][ T2035] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 367.015508][ T2035] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 367.021851][ T2035] ? finish_wait+0xd4/0x1e0 [ 367.026429][ T2035] pvr2_context_thread_func+0x4b3/0xb50 [ 367.031970][ T2035] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 367.037889][ T2035] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 367.044018][ T2035] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 367.049956][ T2035] ? __pfx_autoremove_wake_function+0x10/0x10 [ 367.056327][ T2035] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 367.062257][ T2035] ? __kthread_parkme+0x169/0x1d0 [ 367.067564][ T2035] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 367.073703][ T2035] kthread+0x2f0/0x390 [ 367.077784][ T2035] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 367.083930][ T2035] ? __pfx_kthread+0x10/0x10 [ 367.088536][ T2035] ret_from_fork+0x4b/0x80 [ 367.092948][ T2035] ? __pfx_kthread+0x10/0x10 [ 367.097692][ T2035] ret_from_fork_asm+0x1a/0x30 [ 367.102478][ T2035] [ 367.105574][ T2035] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 367.112854][ T2035] CPU: 1 UID: 0 PID: 2035 Comm: pvrusb2-context Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 367.123952][ T2035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 367.133995][ T2035] Call Trace: [ 367.137263][ T2035] [ 367.140179][ T2035] dump_stack_lvl+0x241/0x360 [ 367.144849][ T2035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.150033][ T2035] ? __pfx__printk+0x10/0x10 [ 367.154606][ T2035] ? _printk+0xd5/0x120 [ 367.158757][ T2035] ? __init_begin+0x41000/0x41000 [ 367.163782][ T2035] ? vscnprintf+0x5d/0x90 [ 367.168113][ T2035] panic+0x349/0x880 [ 367.172004][ T2035] ? __warn+0x177/0x4e0 [ 367.176154][ T2035] ? __pfx_panic+0x10/0x10 [ 367.180562][ T2035] ? show_trace_log_lvl+0x3b2/0x410 [ 367.185763][ T2035] ? ret_from_fork_asm+0x1a/0x30 [ 367.190702][ T2035] __warn+0x34b/0x4e0 [ 367.194677][ T2035] ? firmware_fallback_sysfs+0x782/0x9e0 [ 367.200307][ T2035] report_bug+0x2b3/0x500 [ 367.204639][ T2035] ? firmware_fallback_sysfs+0x782/0x9e0 [ 367.210268][ T2035] handle_bug+0x60/0x90 [ 367.214424][ T2035] exc_invalid_op+0x1a/0x50 [ 367.218922][ T2035] asm_exc_invalid_op+0x1a/0x20 [ 367.223770][ T2035] RIP: 0010:firmware_fallback_sysfs+0x782/0x9e0 [ 367.230015][ T2035] Code: 1c 24 e9 4d fc ff ff e8 fc a2 93 fb c6 05 c8 81 05 0a 01 48 c7 c7 40 54 87 8c e8 a9 f2 c1 05 e9 72 fc ff ff e8 df a2 93 fb 90 <0f> 0b 90 48 89 df 48 c7 c6 20 55 87 8c 4c 89 ea e8 c9 67 c4 05 e9 [ 367.249613][ T2035] RSP: 0018:ffffc900051ff730 EFLAGS: 00010293 [ 367.255676][ T2035] RAX: ffffffff86014471 RBX: ffff8880651930a8 RCX: ffff888029a00000 [ 367.263652][ T2035] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 367.271638][ T2035] RBP: 000000000000003c R08: ffffffff86013e80 R09: 1ffffffff285932f [ 367.279611][ T2035] R10: dffffc0000000000 R11: fffffbfff2859330 R12: 00000000fffffff5 [ 367.287578][ T2035] R13: ffffffff8cdf0fe0 R14: 0000000000000001 R15: 0000000000001770 [ 367.295554][ T2035] ? firmware_fallback_sysfs+0x190/0x9e0 [ 367.301186][ T2035] ? firmware_fallback_sysfs+0x781/0x9e0 [ 367.306823][ T2035] ? _request_firmware+0xd5a/0x13b0 [ 367.312015][ T2035] ? kmem_cache_free+0x1a2/0x420 [ 367.316950][ T2035] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 367.322320][ T2035] ? _request_firmware+0xd5a/0x13b0 [ 367.327556][ T2035] _request_firmware+0xdf7/0x13b0 [ 367.332586][ T2035] ? __pfx__request_firmware+0x10/0x10 [ 367.338040][ T2035] ? pvr2_hdw_initialize+0x33e/0x3d10 [ 367.343411][ T2035] ? __pfx_lock_release+0x10/0x10 [ 367.348436][ T2035] ? pvr2_send_request_ex+0x1a4d/0x22a0 [ 367.353980][ T2035] request_firmware+0x36/0x50 [ 367.358651][ T2035] pvr2_locate_firmware+0xb1/0x500 [ 367.363769][ T2035] pvr2_upload_firmware1+0x1c6/0x950 [ 367.369080][ T2035] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 367.375083][ T2035] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 367.380916][ T2035] pvr2_hdw_initialize+0x411/0x3d10 [ 367.386129][ T2035] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 367.391762][ T2035] ? pvr2_context_thread_func+0x220/0xb50 [ 367.397484][ T2035] ? __pfx_lock_release+0x10/0x10 [ 367.402511][ T2035] ? rcu_is_watching+0x15/0xb0 [ 367.407278][ T2035] ? trace_contention_end+0x3c/0x120 [ 367.412559][ T2035] ? __mutex_lock+0x2ef/0xd70 [ 367.417248][ T2035] ? __mutex_unlock_slowpath+0x21d/0x750 [ 367.422894][ T2035] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 367.428870][ T2035] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 367.435200][ T2035] ? finish_wait+0xd4/0x1e0 [ 367.439705][ T2035] pvr2_context_thread_func+0x4b3/0xb50 [ 367.445247][ T2035] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 367.451170][ T2035] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 367.457232][ T2035] ? _raw_spin_unlock_irqrestore+0xdd/