last executing test programs: 19.523052962s ago: executing program 0 (id=776): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000000000000580001c00000000081"]) 18.976432425s ago: executing program 0 (id=782): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000b01"]) 18.451089026s ago: executing program 0 (id=791): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'sh\x00', 0x1e, 0x80}, 0x2c) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3bd14", 0x3}], 0x1}, 0x20000000}], 0x1, 0x0) 18.09752533s ago: executing program 0 (id=797): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x89, 0x40000, {r1}}, 0x20) 17.802137504s ago: executing program 0 (id=802): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x1ff) sendto$inet(r0, &(0x7f00000004c0)="ab", 0x1, 0x20c0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback=0x7f0000c0}, 0x10) 16.962826199s ago: executing program 0 (id=811): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 8.736070849s ago: executing program 3 (id=864): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x821, 0x5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 8.350467944s ago: executing program 3 (id=868): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af297baebb0efa284da1403011a00", 0x0, 0x4, 0x81, 0x81}, 0x3c) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 8.146146273s ago: executing program 3 (id=871): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r1, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x20048054) 6.894118842s ago: executing program 1 (id=878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, r1, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 6.738193632s ago: executing program 4 (id=879): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180900000020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86dd, 0x1, 0x8, 0x3b3}, &(0x7f0000001480), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000680)="a2", 0x1) 6.566995749s ago: executing program 4 (id=880): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c4604070003070000004000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f000000040000"], 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 6.423969815s ago: executing program 4 (id=881): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x30, r0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) 2.230071355s ago: executing program 3 (id=882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x75, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2.219806414s ago: executing program 1 (id=883): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, 0x0}, 0x3000c085) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r0, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) 2.178583244s ago: executing program 2 (id=884): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000009c0)={0x1, &(0x7f0000000980)=[{0x6, 0x7f, 0xe6, 0x7}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 2.110172511s ago: executing program 4 (id=885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x22044800) 1.964369353s ago: executing program 4 (id=886): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) 1.914876574s ago: executing program 1 (id=887): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x409, 0x4800003c, r1, 0x0) 1.913497811s ago: executing program 3 (id=888): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0x6, 0x96f9, 0x7}}}}}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x400005aa, 0x0) 1.911924402s ago: executing program 2 (id=889): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0xffde) 902.53311ms ago: executing program 4 (id=890): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000002c0)=0x200, 0x4) 898.04402ms ago: executing program 1 (id=900): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @mcast2, [], "8029335287b7a081"}}}}}}}, 0x0) 897.560748ms ago: executing program 2 (id=891): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x0, 0x1a}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) 897.032442ms ago: executing program 3 (id=892): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2005, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 755.602485ms ago: executing program 2 (id=893): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) mq_unlink(&(0x7f0000000000)='$@\x00') 572.05897ms ago: executing program 1 (id=894): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) 395.431937ms ago: executing program 2 (id=895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 298.424018ms ago: executing program 1 (id=896): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0xe8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xb4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x94, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x60, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x2a, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf77501012"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 2 (id=897): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lstat(0x0, 0x0) kernel console output (not intermixed with test programs): [ 92.731396][ T1247] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.223' (ED25519) to the list of known hosts. [ 100.269183][ T5827] cgroup: Unknown subsys name 'net' [ 100.532542][ T5827] cgroup: Unknown subsys name 'cpuset' [ 100.576510][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.818124][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.130822][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.140299][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.151160][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.209472][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.214499][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.225969][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.227242][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.239034][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.246874][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.253983][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.257302][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.257859][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.263364][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.265138][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.267008][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.269063][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.269875][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.271939][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.273574][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.275702][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.283782][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.399684][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.420213][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.439274][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.457999][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.698199][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 107.722950][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 107.842141][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 108.055459][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 108.148136][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 108.397808][ T5841] Bluetooth: hci4: command tx timeout [ 108.397981][ T5841] Bluetooth: hci1: command tx timeout [ 108.398152][ T5856] Bluetooth: hci2: command tx timeout [ 108.475819][ T5856] Bluetooth: hci3: command tx timeout [ 108.556189][ T5856] Bluetooth: hci0: command tx timeout [ 108.920386][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.922465][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.925178][ T5840] bridge_slave_0: entered allmulticast mode [ 108.948038][ T5840] bridge_slave_0: entered promiscuous mode [ 108.984891][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.985048][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.985254][ T5839] bridge_slave_0: entered allmulticast mode [ 108.999986][ T5839] bridge_slave_0: entered promiscuous mode [ 109.163692][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.164011][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.164444][ T5840] bridge_slave_1: entered allmulticast mode [ 109.171250][ T5840] bridge_slave_1: entered promiscuous mode [ 109.218622][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.218792][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.219043][ T5839] bridge_slave_1: entered allmulticast mode [ 109.221446][ T5839] bridge_slave_1: entered promiscuous mode [ 109.637080][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.637236][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.637409][ T5853] bridge_slave_0: entered allmulticast mode [ 109.640275][ T5853] bridge_slave_0: entered promiscuous mode [ 110.021374][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.021549][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.021795][ T5853] bridge_slave_1: entered allmulticast mode [ 110.024287][ T5853] bridge_slave_1: entered promiscuous mode [ 110.034018][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.034219][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.034558][ T5842] bridge_slave_0: entered allmulticast mode [ 110.048645][ T5842] bridge_slave_0: entered promiscuous mode [ 110.082216][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.187551][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.276997][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.277186][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.277365][ T5842] bridge_slave_1: entered allmulticast mode [ 110.279511][ T5842] bridge_slave_1: entered promiscuous mode [ 110.283517][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.284063][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.284202][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.284368][ T5838] bridge_slave_0: entered allmulticast mode [ 110.289110][ T5838] bridge_slave_0: entered promiscuous mode [ 110.309305][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.475914][ T5841] Bluetooth: hci4: command tx timeout [ 110.475951][ T5841] Bluetooth: hci1: command tx timeout [ 110.476132][ T5856] Bluetooth: hci2: command tx timeout [ 110.565899][ T5856] Bluetooth: hci3: command tx timeout [ 110.567696][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.567877][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.568134][ T5838] bridge_slave_1: entered allmulticast mode [ 110.571397][ T5838] bridge_slave_1: entered promiscuous mode [ 110.635773][ T5856] Bluetooth: hci0: command tx timeout [ 110.727322][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.122595][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.141332][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.154684][ T5840] team0: Port device team_slave_0 added [ 111.331792][ T5839] team0: Port device team_slave_0 added [ 111.450064][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.452161][ T5840] team0: Port device team_slave_1 added [ 111.459559][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.468905][ T5839] team0: Port device team_slave_1 added [ 111.701790][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.791230][ T5853] team0: Port device team_slave_0 added [ 112.081682][ T5853] team0: Port device team_slave_1 added [ 112.094132][ T5842] team0: Port device team_slave_0 added [ 112.096772][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.096793][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.096827][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.275052][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.275074][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.275105][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.410914][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.410940][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.410973][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.414765][ T5842] team0: Port device team_slave_1 added [ 112.539712][ T5838] team0: Port device team_slave_0 added [ 112.541159][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.541178][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.541209][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.555773][ T5156] Bluetooth: hci1: command tx timeout [ 112.555817][ T5156] Bluetooth: hci4: command tx timeout [ 112.555985][ T5856] Bluetooth: hci2: command tx timeout [ 112.636011][ T5856] Bluetooth: hci3: command tx timeout [ 112.715899][ T5856] Bluetooth: hci0: command tx timeout [ 112.720896][ T5838] team0: Port device team_slave_1 added [ 112.754481][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.754505][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.754537][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.940638][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.940660][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.940693][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.956883][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.956912][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.956951][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.166915][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.166940][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.166962][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.168225][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.168243][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.168265][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.412077][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.412096][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.412119][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.514080][ T5840] hsr_slave_0: entered promiscuous mode [ 113.518273][ T5840] hsr_slave_1: entered promiscuous mode [ 113.556488][ T5839] hsr_slave_0: entered promiscuous mode [ 113.558089][ T5839] hsr_slave_1: entered promiscuous mode [ 113.559375][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 113.559533][ T5839] Cannot create hsr debugfs directory [ 113.806837][ T5853] hsr_slave_0: entered promiscuous mode [ 113.808501][ T5853] hsr_slave_1: entered promiscuous mode [ 113.809705][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 113.809735][ T5853] Cannot create hsr debugfs directory [ 114.192894][ T5842] hsr_slave_0: entered promiscuous mode [ 114.194085][ T5842] hsr_slave_1: entered promiscuous mode [ 114.194890][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 114.194921][ T5842] Cannot create hsr debugfs directory [ 114.379689][ T5838] hsr_slave_0: entered promiscuous mode [ 114.380878][ T5838] hsr_slave_1: entered promiscuous mode [ 114.381640][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 114.381668][ T5838] Cannot create hsr debugfs directory [ 114.635781][ T5856] Bluetooth: hci2: command tx timeout [ 114.635829][ T5856] Bluetooth: hci4: command tx timeout [ 114.635857][ T5856] Bluetooth: hci1: command tx timeout [ 114.715797][ T5841] Bluetooth: hci3: command tx timeout [ 114.796162][ T5841] Bluetooth: hci0: command tx timeout [ 116.297371][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 116.341873][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 116.380838][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 116.449018][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 116.663005][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 116.703531][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 116.753417][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 116.820354][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 117.082607][ T5853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.138502][ T5853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.174692][ T5853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.260031][ T5853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.509625][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 117.574466][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 117.622509][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 117.681775][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.713229][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 117.987612][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.037678][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.060940][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.120825][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.201194][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.264732][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.265734][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.359485][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.370656][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.370956][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.561416][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.633472][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.634635][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.722464][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.722724][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.785469][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.018298][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.110029][ T3630] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.111653][ T3630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.145382][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.210313][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.211339][ T3630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.399493][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.433996][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.492612][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.492888][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.574421][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.574653][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.685351][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.721032][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.820515][ T1394] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.822530][ T1394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.898218][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.898403][ T3630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.184396][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.317806][ T5840] veth0_vlan: entered promiscuous mode [ 120.414630][ T5840] veth1_vlan: entered promiscuous mode [ 120.550319][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.771609][ T5839] veth0_vlan: entered promiscuous mode [ 120.879888][ T5840] veth0_macvtap: entered promiscuous mode [ 120.911000][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.930682][ T5839] veth1_vlan: entered promiscuous mode [ 120.958032][ T5840] veth1_macvtap: entered promiscuous mode [ 121.152260][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.228315][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.314001][ T5839] veth0_macvtap: entered promiscuous mode [ 121.329754][ T1164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.343968][ T1164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.364725][ T1164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.388655][ T5839] veth1_macvtap: entered promiscuous mode [ 121.396407][ T1164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.553517][ T5842] veth0_vlan: entered promiscuous mode [ 121.714174][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.732935][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.754001][ T5842] veth1_vlan: entered promiscuous mode [ 121.782015][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.891995][ T1394] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.914958][ T3616] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.983007][ T3616] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.021861][ T3616] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.038732][ T5853] veth0_vlan: entered promiscuous mode [ 122.071617][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.071655][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.250770][ T5853] veth1_vlan: entered promiscuous mode [ 122.341628][ T3630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.341656][ T3630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.396492][ T5842] veth0_macvtap: entered promiscuous mode [ 122.531856][ T5842] veth1_macvtap: entered promiscuous mode [ 122.610422][ T5838] veth0_vlan: entered promiscuous mode [ 122.614433][ T3616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.614459][ T3616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.816703][ T5838] veth1_vlan: entered promiscuous mode [ 122.836386][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.884924][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.884950][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.934438][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.988094][ T5853] veth0_macvtap: entered promiscuous mode [ 123.027569][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.054118][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.055037][ T5853] veth1_macvtap: entered promiscuous mode [ 123.083356][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.116134][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.449701][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.494461][ T5838] veth0_macvtap: entered promiscuous mode [ 123.635176][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.668768][ T5838] veth1_macvtap: entered promiscuous mode [ 123.769611][ T3630] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.774033][ T3630] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.881792][ T3630] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.950350][ T5969] bridge0: entered promiscuous mode [ 123.972220][ T3630] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.157500][ T3616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.157530][ T3616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.241086][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.288296][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.579227][ T1013] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.579711][ T3616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.579730][ T3616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.620644][ T1013] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.660961][ T1013] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.723563][ T1013] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.946281][ T3630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.946309][ T3630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.014778][ T5928] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.237430][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 125.291643][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.291722][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.291754][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 125.291779][ T5928] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 125.291803][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.408101][ T5928] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 125.408141][ T5928] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 125.408165][ T5928] usb 2-1: Manufacturer: syz [ 125.602669][ T5928] usb 2-1: config 0 descriptor?? [ 125.640235][ T3630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.640265][ T3630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.852675][ T1394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.852705][ T1394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.086021][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.086049][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.298040][ T5993] warning: `syz.2.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 126.376029][ T5928] rc_core: IR keymap rc-hauppauge not found [ 126.376053][ T5928] Registered IR keymap rc-empty [ 126.376709][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 126.413236][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 126.488170][ T5996] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 126.601484][ T5928] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 126.821400][ T5928] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 127.056746][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 127.086430][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 127.122839][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 127.146873][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 127.177882][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 127.195995][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 127.216011][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 127.242688][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 127.301772][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 127.316218][ T5928] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 127.517814][ T5928] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 127.517864][ T5928] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 127.672755][ T5928] usb 2-1: USB disconnect, device number 2 [ 128.749021][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.827485][ T5928] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 128.947255][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.947317][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 128.975901][ T31] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 128.975941][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.975965][ T31] usb 1-1: Product: syz [ 128.975983][ T31] usb 1-1: Manufacturer: syz [ 128.976000][ T31] usb 1-1: SerialNumber: syz [ 129.025700][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 129.077948][ T5928] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 129.077988][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 129.078013][ T5928] usb 2-1: Product: syz [ 129.078030][ T5928] usb 2-1: Manufacturer: syz [ 129.078046][ T5928] usb 2-1: SerialNumber: syz [ 129.096019][ T31] usb 1-1: config 0 descriptor?? [ 129.208684][ T5928] usb 2-1: config 0 descriptor?? [ 129.315705][ T31] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 129.507924][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 129.536479][ T31] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 129.536591][ T31] usb 1-1: media controller created [ 129.864051][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.046993][ T5928] usb 2-1: USB disconnect, device number 3 [ 130.058486][ T6034] vxlan0: entered promiscuous mode [ 130.059421][ T6034] vxlan0: entered allmulticast mode [ 130.093459][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.097898][ T1394] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.100733][ T1394] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.103557][ T1394] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.916404][ T31] DVB: Unable to find symbol tda10046_attach() [ 130.916427][ T31] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 130.916472][ T31] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 131.149722][ T31] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 131.192917][ T31] usb 1-1: USB disconnect, device number 2 [ 132.102076][ T6066] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.865644][ T5888] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.026148][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 134.045086][ T5888] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 134.045119][ T5888] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.045143][ T5888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.095295][ T5888] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.095339][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.095362][ T5888] usb 2-1: Product: syz [ 134.095379][ T5888] usb 2-1: Manufacturer: syz [ 134.095396][ T5888] usb 2-1: SerialNumber: syz [ 134.180173][ T6101] vxlan0: entered promiscuous mode [ 134.180211][ T6101] vxlan0: entered allmulticast mode [ 134.184242][ T3536] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.184341][ T3536] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.184385][ T3536] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.184427][ T3536] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.620485][ T6104] program syz.4.52 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.638920][ T5888] usb 2-1: 0:2 : does not exist [ 135.057071][ T5888] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 135.265782][ T5844] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 135.332236][ T5888] usb 2-1: USB disconnect, device number 4 [ 135.441670][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.441711][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 135.441760][ T5844] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 135.441786][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.578416][ T5844] usb 5-1: config 0 descriptor?? [ 135.580034][ T6108] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 135.836437][ T6055] udevd[6055]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.211577][ T5844] glorious 0003:22D4:1503.0001: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.4-1/input0 [ 136.293873][ T5844] usb 5-1: USB disconnect, device number 2 [ 136.657937][ T6120] netlink: 136 bytes leftover after parsing attributes in process `syz.3.58'. [ 136.658060][ T6120] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 136.881845][ T6118] fido_id[6118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 137.095897][ T6124] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.314397][ T6129] vxlan0: entered promiscuous mode [ 137.314439][ T6129] vxlan0: entered allmulticast mode [ 137.328740][ T70] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.328799][ T70] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.328838][ T70] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.328877][ T70] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.455770][ T5848] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.605812][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 137.608699][ T5848] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 137.608734][ T5848] usb 2-1: config 0 has no interface number 0 [ 137.620828][ T5848] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 137.620867][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.620890][ T5848] usb 2-1: Product: syz [ 137.620906][ T5848] usb 2-1: Manufacturer: syz [ 137.620922][ T5848] usb 2-1: SerialNumber: syz [ 137.652779][ T5848] usb 2-1: config 0 descriptor?? [ 137.906222][ T5848] radio-si470x 2-1:0.35: this is not a si470x device. [ 138.005083][ T5848] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 138.304749][ T5848] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 138.465886][ T5848] usb 2-1: USB disconnect, device number 5 [ 138.496839][ T5848] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 138.804467][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.804591][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.245767][ T6009] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 139.395821][ T6009] usb 5-1: Using ep0 maxpacket: 8 [ 139.398735][ T6009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.398787][ T6009] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 139.398812][ T6009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.473414][ T6009] usb 5-1: config 0 descriptor?? [ 139.993602][ T6009] hid-multitouch 0003:0EEF:72C4.0002: unknown main item tag 0x0 [ 139.993662][ T6009] hid-multitouch 0003:0EEF:72C4.0002: unknown main item tag 0x0 [ 139.993691][ T6009] hid-multitouch 0003:0EEF:72C4.0002: unknown main item tag 0x0 [ 139.993718][ T6009] hid-multitouch 0003:0EEF:72C4.0002: unknown main item tag 0x0 [ 139.993759][ T6009] hid-multitouch 0003:0EEF:72C4.0002: unknown main item tag 0x0 [ 140.097365][ T6009] hid-multitouch 0003:0EEF:72C4.0002: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 140.279050][ T6162] vxlan0: entered promiscuous mode [ 140.279090][ T6162] vxlan0: entered allmulticast mode [ 140.281791][ T70] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.281884][ T70] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.281927][ T70] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.281963][ T70] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.332156][ T31] usb 5-1: USB disconnect, device number 3 [ 140.533443][ T6079] syz.2.42 (6079): drop_caches: 1 [ 140.859390][ T6163] fido_id[6163]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 141.218930][ T6181] Illegal XDP return value 4294967294 on prog (id 7) dev N/A, expect packet loss! [ 141.256182][ T6180] Bluetooth: MGMT ver 1.23 [ 141.440476][ T5928] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 141.606058][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 141.609234][ T5928] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.609267][ T5928] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.644935][ T5928] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.644983][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.645010][ T5928] usb 2-1: Product: syz [ 141.645030][ T5928] usb 2-1: Manufacturer: syz [ 141.645049][ T5928] usb 2-1: SerialNumber: syz [ 141.988485][ T5928] usb 2-1: 0:2 : does not exist [ 142.024913][ T5928] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 142.239562][ T5928] usb 2-1: USB disconnect, device number 6 [ 142.744910][ T6055] udevd[6055]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.929095][ T6217] cgroup: fork rejected by pids controller in /syz2 [ 145.323839][ T6285] process 'syz.0.112' launched './file2' with NULL argv: empty string added [ 145.665732][ T6009] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 145.822871][ T6009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.822913][ T6009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.822962][ T6009] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 145.822990][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.942852][ T6009] usb 4-1: config 0 descriptor?? [ 146.401917][ T6009] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 146.401975][ T6009] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 146.402036][ T6009] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 146.402071][ T6009] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 146.402104][ T6009] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 146.402138][ T6009] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 146.402190][ T6009] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 146.482213][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 146.530105][ T6009] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 146.606492][ T6009] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00 [ 146.827271][ T6009] cp2112 0003:10C4:EA90.0003: error requesting SMBus config [ 146.875321][ T6009] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -71 [ 146.929661][ T6009] usb 4-1: USB disconnect, device number 2 [ 146.987492][ T6306] fido_id[6306]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 147.277615][ T31] kernel write not supported for file /binder/transactions (pid: 31 comm: kworker/1:0) [ 149.144007][ T6363] netlink: 52 bytes leftover after parsing attributes in process `syz.3.146'. [ 149.180435][ T6363] netlink: 32 bytes leftover after parsing attributes in process `syz.3.146'. [ 152.532004][ T6413] mmap: syz.2.169 (6413) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 153.571134][ T6431] block nbd0: server does not support multiple connections per device. [ 153.573113][ T6431] block nbd0: shutting down sockets [ 156.714835][ T6483] io-wq is not configured for unbound workers [ 156.786232][ T5928] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 156.950685][ T5928] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 156.950734][ T5928] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 156.950776][ T5928] usb 4-1: config 0 has no interface number 0 [ 156.950832][ T5928] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.950865][ T5928] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 156.950898][ T5928] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.950932][ T5928] usb 4-1: config 0 interface 52 has no altsetting 0 [ 156.966425][ T5928] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 156.966464][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 156.966489][ T5928] usb 4-1: Product: syz [ 156.966507][ T5928] usb 4-1: SerialNumber: syz [ 157.070427][ T5928] usb 4-1: config 0 descriptor?? [ 157.311633][ T5928] input: syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input7 [ 157.568205][ T5928] usb 4-1: USB disconnect, device number 3 [ 157.568337][ C0] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 158.545748][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 158.705681][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 158.708844][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.708885][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.708930][ T9] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 158.708957][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.771204][ T6508] syz.1.212 (6508) used greatest stack depth: 17584 bytes left [ 158.780243][ T9] usb 3-1: config 0 descriptor?? [ 159.381877][ T9] hid (null): invalid report_size -301085748 [ 159.622675][ T9] usb 3-1: string descriptor 0 read error: -71 [ 159.650529][ T9] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 159.650631][ T9] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -32 [ 159.680567][ T9] usb 3-1: USB disconnect, device number 2 [ 160.804137][ T31] hid-generic 0000:0006:0007.0005: unknown main item tag 0x0 [ 160.804189][ T31] hid-generic 0000:0006:0007.0005: unknown main item tag 0x0 [ 160.804220][ T31] hid-generic 0000:0006:0007.0005: unknown main item tag 0x0 [ 160.804250][ T31] hid-generic 0000:0006:0007.0005: unknown main item tag 0x0 [ 160.804282][ T31] hid-generic 0000:0006:0007.0005: unknown main item tag 0x0 [ 160.804311][ T31] hid-generic 0000:0006:0007.0005: unknown main item tag 0x0 [ 160.804341][ T31] hid-generic 0000:0006:0007.0005: unknown main item tag 0x0 [ 160.804369][ T31] hid-generic 0000:0006:0007.0005: unknown main item tag 0x0 [ 160.804397][ T31] hid-generic 0000:0006:0007.0005: unknown main item tag 0x0 [ 160.804423][ T31] hid-generic 0000:0006:0007.0005: unknown main item tag 0x0 [ 161.093532][ T31] hid-generic 0000:0006:0007.0005: hidraw0: HID v0.0b Device [syz1] on syz1 [ 161.361380][ T6539] fido_id[6539]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 161.555914][ T6544] loop8: detected capacity change from 0 to 1 [ 161.616995][ T6055] Dev loop8: unable to read RDB block 1 [ 161.617061][ T6055] loop8: unable to read partition table [ 161.617442][ T6055] loop8: partition table beyond EOD, truncated [ 161.689075][ T6544] Dev loop8: unable to read RDB block 1 [ 161.689135][ T6544] loop8: unable to read partition table [ 161.689404][ T6544] loop8: partition table beyond EOD, truncated [ 161.689441][ T6544] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 162.818520][ T6563] gretap0: entered promiscuous mode [ 162.898574][ T6563] gretap0: left promiscuous mode [ 163.635315][ T6582] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.244'. [ 163.635373][ T6582] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 163.635404][ T6582] openvswitch: netlink: Message has 8454 unknown bytes. [ 164.486889][ T6596] serio: Serial port ptm0 [ 165.196431][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 165.365183][ T6619] tap0: tun_chr_ioctl cmd 2147767520 [ 165.467979][ T37] audit: type=1326 audit(1757720527.426:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6621 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd858eba9 code=0x7ffc0000 [ 165.468537][ T37] audit: type=1326 audit(1757720527.466:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6621 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f0dd858eba9 code=0x7ffc0000 [ 165.477282][ T37] audit: type=1326 audit(1757720527.476:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6621 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd858eba9 code=0x7ffc0000 [ 165.477349][ T37] audit: type=1326 audit(1757720527.476:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6621 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f0dd858eba9 code=0x7ffc0000 [ 165.477399][ T37] audit: type=1326 audit(1757720527.476:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6621 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd858eba9 code=0x7ffc0000 [ 166.575748][ T9] IPVS: starting estimator thread 0... [ 166.686145][ T6648] IPVS: using max 6 ests per chain, 14400 per kthread [ 167.438255][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 167.438381][ T6663] netlink: 3 bytes leftover after parsing attributes in process `syz.0.282'. [ 167.847214][ T6668] netlink: 'syz.0.284': attribute type 10 has an invalid length. [ 168.157561][ T6668] team0: Port device netdevsim0 added [ 168.540411][ T6009] kernel read not supported for file /dsp (pid: 6009 comm: kworker/0:5) [ 169.153096][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 169.304597][ T6693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.296'. [ 171.894996][ T6745] capability: warning: `syz.1.320' uses deprecated v2 capabilities in a way that may be insecure [ 172.495768][ T5844] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 172.658596][ T5844] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 172.658632][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.789095][ T5844] usb 2-1: config 0 descriptor?? [ 172.813903][ T5844] cp210x 2-1:0.0: cp210x converter detected [ 173.255132][ T5844] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 173.417345][ T5844] usb 2-1: cp210x converter now attached to ttyUSB0 [ 173.480893][ T6008] usb 2-1: USB disconnect, device number 7 [ 173.597144][ T6008] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 173.756492][ T6008] cp210x 2-1:0.0: device disconnected [ 174.225716][ T5844] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 174.385702][ T5844] usb 1-1: Using ep0 maxpacket: 16 [ 174.397326][ T5844] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 174.397371][ T5844] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 174.397571][ T5844] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 174.397600][ T5844] usb 1-1: config 0 interface 0 has no altsetting 0 [ 174.411979][ T5844] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 174.412142][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.412165][ T5844] usb 1-1: Product: syz [ 174.412184][ T5844] usb 1-1: Manufacturer: syz [ 174.412202][ T5844] usb 1-1: SerialNumber: syz [ 174.507999][ T5844] usb 1-1: config 0 descriptor?? [ 174.794538][ T5844] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 174.822679][ T5192] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 174.994739][ T6775] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 175.039808][ T5192] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 175.187344][ T6008] usb 1-1: USB disconnect, device number 3 [ 176.005020][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.821973][ T6807] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 176.822162][ T6807] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 176.963292][ T6807] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 177.180258][ T6807] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 177.180359][ T6807] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 177.315452][ T6807] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 177.419739][ T6807] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 177.419917][ T6807] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 177.498878][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.585360][ T6807] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 177.867993][ T6807] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 177.868126][ T6807] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 178.018586][ T6807] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 178.127751][ T6807] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 178.127954][ T6807] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 178.283976][ T6807] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 178.400892][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.195946][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.435707][ T5856] Bluetooth: hci2: command 0x0c1a tx timeout [ 179.916095][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 180.155920][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 180.480712][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.976464][ T6879] openvswitch: netlink: IP tunnel dst address not specified [ 181.275698][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 181.517554][ T5856] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.995717][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.236340][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 182.562814][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.355674][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 183.598932][ T5856] Bluetooth: hci2: command 0x0c1a tx timeout [ 184.081239][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 184.097071][ T6934] Falling back ldisc for ttyprintk. [ 184.315803][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 185.333193][ T6957] netlink: 48 bytes leftover after parsing attributes in process `syz.3.410'. [ 186.159637][ T6974] netlink: 'syz.2.418': attribute type 14 has an invalid length. [ 186.275685][ T31] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 186.457475][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 186.457523][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 186.457554][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 186.462381][ T31] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 186.462419][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.462441][ T31] usb 1-1: Product: syz [ 186.462457][ T31] usb 1-1: Manufacturer: syz [ 186.462473][ T31] usb 1-1: SerialNumber: syz [ 186.507497][ T31] usb 1-1: config 0 descriptor?? [ 186.509448][ T6971] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 186.510196][ T6971] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 186.555147][ T31] usb 1-1: ucan: probing device on interface #0 [ 187.048621][ T31] usb 1-1: ucan: device reported invalid tx-fifo size [ 187.048651][ T31] usb 1-1: ucan: probe failed; try to update the device firmware [ 187.291872][ T5888] usb 1-1: USB disconnect, device number 4 [ 187.967071][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'. [ 188.732973][ T7016] erspan0: entered promiscuous mode [ 189.251397][ T37] audit: type=1326 audit(188.813:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7023 comm="syz.4.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd858eba9 code=0x7fc00000 [ 189.930721][ T37] audit: type=1326 audit(189.503:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7023 comm="syz.4.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0dd858eba9 code=0x7fc00000 [ 190.553006][ T37] audit: type=1326 audit(190.123:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7047 comm="syz.1.450" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f4317eba9 code=0x0 [ 190.965917][ T5928] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 191.144670][ T5928] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 191.144713][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.144739][ T5928] usb 1-1: Product: syz [ 191.144756][ T5928] usb 1-1: Manufacturer: syz [ 191.144774][ T5928] usb 1-1: SerialNumber: syz [ 191.199195][ T5928] usb 1-1: config 0 descriptor?? [ 191.226425][ T5928] ch341 1-1:0.0: ch341-uart converter detected [ 191.766561][ T7067] tipc: Started in network mode [ 191.766598][ T7067] tipc: Node identity ac14140f, cluster identity 4711 [ 191.815939][ T7067] tipc: New replicast peer: 255.255.255.255 [ 191.909531][ T7067] tipc: Enabled bearer , priority 10 [ 192.060437][ T5928] usb 1-1: failed to send control message: -71 [ 192.060513][ T5928] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 192.094763][ T5928] usb 1-1: USB disconnect, device number 5 [ 192.109390][ T5928] ch341 1-1:0.0: device disconnected [ 192.665691][ T37] audit: type=1326 audit(192.233:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7078 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd858eba9 code=0x7ffc0000 [ 192.667190][ T37] audit: type=1326 audit(192.243:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7078 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd858eba9 code=0x7ffc0000 [ 192.667547][ T37] audit: type=1326 audit(192.243:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7078 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f0dd858eba9 code=0x7ffc0000 [ 192.667875][ T37] audit: type=1326 audit(192.243:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7078 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd858eba9 code=0x7ffc0000 [ 192.669579][ T37] audit: type=1326 audit(192.243:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7078 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd858eba9 code=0x7ffc0000 [ 192.669942][ T37] audit: type=1326 audit(192.243:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7078 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f0dd858eba9 code=0x7ffc0000 [ 192.670256][ T37] audit: type=1326 audit(192.243:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7078 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd858eba9 code=0x7ffc0000 [ 192.941026][ T9] tipc: Node number set to 2886997007 [ 193.157544][ T7084] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 193.157924][ T7084] syzkaller1: linktype set to 780 [ 193.546086][ T7089] Zero length message leads to an empty skb [ 194.930623][ T7120] openvswitch: netlink: IPv4 tunnel dst address is zero [ 195.793960][ T5856] Bluetooth: hci1: unexpected cc 0x2039 length: 9 > 1 [ 195.801537][ T5856] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 197.802478][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 197.802528][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.504'. [ 199.145266][ T7195] netlink: 'syz.0.515': attribute type 14 has an invalid length. [ 199.843692][ T5856] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 199.843818][ T5856] Bluetooth: hci1: Injecting HCI hardware error event [ 199.846901][ T5841] Bluetooth: hci1: hardware error 0x00 [ 200.259776][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.259881][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.578677][ T37] audit: type=1326 audit(200.113:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7222 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd858eba9 code=0x7ffc0000 [ 200.578753][ T37] audit: type=1326 audit(200.153:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7222 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0dd858eba9 code=0x7ffc0000 [ 200.578805][ T37] audit: type=1326 audit(200.153:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7222 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd858eba9 code=0x7ffc0000 [ 200.578856][ T37] audit: type=1326 audit(200.153:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7222 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd858eba9 code=0x7ffc0000 [ 200.581703][ T37] audit: type=1326 audit(200.153:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7222 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f0dd858eba9 code=0x7ffc0000 [ 200.707617][ T37] audit: type=1326 audit(200.233:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7222 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd858eba9 code=0x7ffc0000 [ 201.151170][ T5888] kernel write not supported for file /uhid (pid: 5888 comm: kworker/0:3) [ 201.237610][ T7241] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 201.948311][ T5841] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 202.005705][ T5888] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 202.129728][ T37] audit: type=1326 audit(201.683:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7261 comm="syz.1.545" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f4317eba9 code=0x0 [ 202.156530][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 202.159902][ T5888] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.159938][ T5888] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.159967][ T5888] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.159996][ T5888] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.160050][ T5888] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 202.160079][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.470008][ T5888] usb 3-1: GET_CAPABILITIES returned 0 [ 202.470066][ T5888] usbtmc 3-1:16.0: can't read capabilities [ 202.741921][ T5928] usb 3-1: USB disconnect, device number 3 [ 202.905872][ T7271] netlink: 20 bytes leftover after parsing attributes in process `syz.3.548'. [ 203.279922][ T6009] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 203.454970][ T6009] usb 1-1: Using ep0 maxpacket: 32 [ 203.458391][ T6009] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 203.458428][ T6009] usb 1-1: config 0 has no interface number 0 [ 203.482882][ T6009] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 203.482924][ T6009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.482948][ T6009] usb 1-1: Product: syz [ 203.482966][ T6009] usb 1-1: Manufacturer: syz [ 203.482983][ T6009] usb 1-1: SerialNumber: syz [ 203.530935][ T6009] usb 1-1: config 0 descriptor?? [ 203.554787][ T6009] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 203.871392][ T6009] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 203.977278][ T6009] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 204.196675][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 204.254960][ T5844] usb 1-1: USB disconnect, device number 6 [ 204.290213][ T5844] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 204.460807][ T5844] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 204.461954][ T5844] quatech2 1-1:0.51: device disconnected [ 205.928385][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'. [ 207.307653][ T7344] bridge0: port 3(syz_tun) entered blocking state [ 207.318094][ T6009] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 207.339335][ T7344] bridge0: port 3(syz_tun) entered disabled state [ 207.340120][ T7344] syz_tun: entered allmulticast mode [ 207.416102][ T7344] syz_tun: entered promiscuous mode [ 207.417935][ T7344] bridge0: port 3(syz_tun) entered blocking state [ 207.418164][ T7344] bridge0: port 3(syz_tun) entered forwarding state [ 207.477143][ T6009] usb 2-1: Using ep0 maxpacket: 8 [ 207.480469][ T6009] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.480512][ T6009] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.480564][ T6009] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 207.480591][ T6009] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.510216][ T6009] usb 2-1: config 0 descriptor?? [ 208.000742][ T6009] hid_parser_main: 43 callbacks suppressed [ 208.000790][ T6009] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x4 [ 208.000828][ T6009] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 208.000859][ T6009] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 208.000891][ T6009] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0 [ 208.000925][ T6009] hid-rmi 0003:06CB:81A7.0006: unbalanced collection at end of report description [ 208.016116][ T6009] hid-rmi 0003:06CB:81A7.0006: parse failed [ 208.016264][ T6009] hid-rmi 0003:06CB:81A7.0006: probe with driver hid-rmi failed with error -22 [ 208.207366][ T6009] usb 2-1: USB disconnect, device number 8 [ 209.249819][ T7373] syz_tun: entered allmulticast mode [ 209.261610][ T7372] syz_tun: left allmulticast mode [ 209.730433][ T7390] Bluetooth: MGMT ver 1.23 [ 210.386094][ T7402] autofs4:pid:7402:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189379) [ 210.386138][ T7402] autofs4:pid:7402:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 211.182715][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'. [ 211.182753][ T7423] netlink: 'syz.0.613': attribute type 1 has an invalid length. [ 211.182769][ T7423] netlink: 20 bytes leftover after parsing attributes in process `syz.0.613'. [ 212.097265][ T5844] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 212.255654][ T5844] usb 1-1: Using ep0 maxpacket: 8 [ 212.258239][ T5844] usb 1-1: config 0 has no interfaces? [ 212.263825][ T5844] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 212.263854][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.263877][ T5844] usb 1-1: Product: syz [ 212.263892][ T5844] usb 1-1: Manufacturer: syz [ 212.263907][ T5844] usb 1-1: SerialNumber: syz [ 212.322500][ T5844] usb 1-1: config 0 descriptor?? [ 212.561865][ T6009] usb 1-1: USB disconnect, device number 7 [ 212.717360][ T7457] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0) [ 212.895837][ T5844] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 213.075328][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.075365][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.075406][ T5844] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 213.075432][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.088770][ T5844] usb 3-1: config 0 descriptor?? [ 213.366674][ T7471] can0: slcan on ttyS3. [ 213.375648][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 213.511318][ T7473] can0 (unregistered): slcan off ttyS3. [ 213.525742][ T7477] netlink: 32 bytes leftover after parsing attributes in process `syz.4.639'. [ 213.535800][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 213.543798][ T31] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 213.543833][ T31] usb 2-1: config 0 has no interface number 0 [ 213.556698][ T7473] Falling back ldisc for ttyS3. [ 213.561352][ T5844] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 213.561396][ T5844] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 213.561428][ T5844] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 213.561532][ T5844] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 213.561567][ T5844] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 213.594609][ T31] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 213.594645][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.594670][ T31] usb 2-1: Product: syz [ 213.594687][ T31] usb 2-1: Manufacturer: syz [ 213.594703][ T31] usb 2-1: SerialNumber: syz [ 213.657861][ T31] usb 2-1: config 0 descriptor?? [ 213.660978][ T5844] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 213.755411][ T5844] playstation 0003:054C:0DF2.0007: Invalid reportID received, expected 9 got 32 [ 213.755688][ T5844] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense pairing info: -22 [ 213.755743][ T5844] playstation 0003:054C:0DF2.0007: Failed to get MAC address from DualSense [ 213.755765][ T5844] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 213.776078][ T31] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 213.823119][ T5844] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -22 [ 213.982955][ T31] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 214.036528][ T5844] usb 3-1: USB disconnect, device number 4 [ 214.118507][ T31] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 214.245780][ T7487] bpf: Bad value for 'gid' [ 214.362281][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 214.368295][ T6009] usb 2-1: USB disconnect, device number 9 [ 214.436718][ T6009] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 214.464846][ T6009] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 214.485213][ T6009] quatech2 2-1:0.51: device disconnected [ 215.044118][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 216.110882][ T7536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.667'. [ 216.535573][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 216.685695][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 216.688955][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.688991][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.689032][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 216.689056][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.759167][ T31] usb 3-1: config 0 descriptor?? [ 216.884062][ T31] hub 3-1:0.0: USB hub found [ 217.215897][ T31] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 217.455044][ T31] hid-generic 0003:046D:C31C.0008: item fetching failed at offset 0/1 [ 217.464631][ T31] hid-generic 0003:046D:C31C.0008: probe with driver hid-generic failed with error -22 [ 217.756705][ T6008] usb 3-1: USB disconnect, device number 5 [ 217.839374][ T7558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.465955][ T7575] loop7: detected capacity change from 0 to 7 [ 218.473950][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.474083][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 218.526272][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.526329][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 218.552691][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.552727][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 218.561033][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.561073][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 218.566016][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.566051][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 218.566375][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.566404][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 218.568624][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.568656][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 218.568810][ T7575] ldm_validate_partition_table(): Disk read failed. [ 218.575597][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.575634][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 218.579199][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.579231][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 218.579620][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.579651][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 218.581500][ T7575] Dev loop7: unable to read RDB block 0 [ 218.606444][ T7575] loop7: unable to read partition table [ 218.606730][ T7575] loop7: partition table beyond EOD, truncated [ 218.606774][ T7575] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 218.837508][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.687'. [ 218.837537][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.687'. [ 219.298953][ T7589] tipc: Started in network mode [ 219.298981][ T7589] tipc: Node identity ac14140f, cluster identity 4711 [ 219.299249][ T7589] tipc: New replicast peer: 255.255.255.255 [ 219.300304][ T7589] tipc: Enabled bearer , priority 10 [ 219.320033][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.691'. [ 219.320065][ T7589] tipc: Disabling bearer [ 219.802844][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.698'. [ 220.211601][ T7611] block nbd0: shutting down sockets [ 220.431334][ T7615] Invalid ELF header magic: != ELF [ 221.076152][ T6009] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 221.228164][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 221.233335][ T6009] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 221.233365][ T6009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.233386][ T6009] usb 3-1: Product: syz [ 221.233400][ T6009] usb 3-1: Manufacturer: syz [ 221.233413][ T6009] usb 3-1: SerialNumber: syz [ 221.270577][ T6009] usb 3-1: config 0 descriptor?? [ 221.819708][ T5959] usb 3-1: USB disconnect, device number 6 [ 222.057258][ T6056] udevd[6056]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.007652][ T7654] cgroup: fork rejected by pids controller in /syz3 [ 223.228335][ T7696] netlink: 'syz.2.726': attribute type 2 has an invalid length. [ 223.249062][ T7698] netlink: 48 bytes leftover after parsing attributes in process `syz.4.727'. [ 223.249106][ T7698] netlink: 48 bytes leftover after parsing attributes in process `syz.4.727'. [ 223.846966][ T7710] netlink: 'syz.2.732': attribute type 2 has an invalid length. [ 224.865632][ T6008] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 225.027128][ T6008] usb 2-1: Using ep0 maxpacket: 16 [ 225.029991][ T6008] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 225.030015][ T6008] usb 2-1: config 0 has no interface number 0 [ 225.030067][ T6008] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 225.030094][ T6008] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 225.034168][ T6008] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 225.034195][ T6008] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 225.034215][ T6008] usb 2-1: Product: syz [ 225.034229][ T6008] usb 2-1: SerialNumber: syz [ 225.200118][ T6008] usb 2-1: config 0 descriptor?? [ 225.250558][ T6008] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 225.254233][ T6008] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input9 [ 225.432697][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 225.716527][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 225.718264][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 225.718633][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 225.718867][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 225.719092][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 225.719322][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 225.719563][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 225.719827][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 225.720065][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 225.720302][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 225.720395][ T6009] usb 2-1: USB disconnect, device number 10 [ 225.720553][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 225.831752][ T6009] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 226.576684][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'. [ 226.688680][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.425672][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 227.564758][ T7765] bridge_slave_1 (unregistering): left allmulticast mode [ 227.564790][ T7765] bridge_slave_1 (unregistering): left promiscuous mode [ 227.567724][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.618615][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 227.618643][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 227.618667][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 227.618688][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 227.618725][ T31] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 227.618747][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.675668][ T31] usb 5-1: config 0 descriptor?? [ 227.900865][ T31] hdpvr 5-1:0.0: firmware version 0x0 dated [ 227.900885][ T31] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 228.494675][ T31] hdpvr 5-1:0.0: Could not setup controls [ 228.497702][ T31] hdpvr 5-1:0.0: registering videodev failed [ 228.621440][ T31] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 228.652741][ T31] usb 5-1: USB disconnect, device number 4 [ 229.613662][ T7815] capability: warning: `syz.1.777' uses 32-bit capabilities (legacy support in use) [ 229.695983][ T7814] kvm: kvm [7812]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x81 [ 229.888330][ T7822] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 230.599545][ T5844] IPVS: starting estimator thread 0... [ 230.624380][ T7845] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 230.709571][ T7852] netlink: 3 bytes leftover after parsing attributes in process `syz.3.794'. [ 230.719482][ T7847] IPVS: using max 8 ests per chain, 19200 per kthread [ 231.626575][ T7879] program syz.2.808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.794709][ T3555] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.900135][ T7894] netlink: 'syz.4.815': attribute type 2 has an invalid length. [ 233.352644][ T3555] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.905612][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 233.918233][ T3555] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.029382][ T7908] netlink: 'syz.3.822': attribute type 49 has an invalid length. [ 234.055590][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 234.058038][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 234.058067][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 234.061065][ T31] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 234.061092][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.061112][ T31] usb 3-1: Product: syz [ 234.061126][ T31] usb 3-1: Manufacturer: syz [ 234.061139][ T31] usb 3-1: SerialNumber: syz [ 234.128397][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 234.157989][ T31] usb 3-1: config 0 descriptor?? [ 234.166908][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 234.168543][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 234.177653][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 234.178525][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 234.192640][ T31] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 234.192677][ T31] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 234.561709][ T3555] team0: Port device netdevsim0 removed [ 234.575721][ T3555] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.798996][ T31] em28xx 3-1:0.0: chip ID is em2874 [ 235.012045][ T5928] usb 3-1: USB disconnect, device number 7 [ 235.033536][ T5928] em28xx 3-1:0.0: Disconnecting em28xx [ 235.082688][ T5928] em28xx 3-1:0.0: Freeing device [ 235.542168][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.831'. [ 235.562609][ T3555] bridge_slave_1: left allmulticast mode [ 235.563238][ T3555] bridge_slave_1: left promiscuous mode [ 235.567106][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.697694][ T3555] bridge_slave_0: left allmulticast mode [ 235.697727][ T3555] bridge_slave_0: left promiscuous mode [ 235.698356][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.319373][ T5841] Bluetooth: hci0: command tx timeout [ 237.292493][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'. [ 238.258659][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.316192][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.360159][ T3555] bond0 (unregistering): Released all slaves [ 238.395723][ T5841] Bluetooth: hci0: command tx timeout [ 238.759007][ T7959] syz.4.844 (7959): /proc/7958/oom_adj is deprecated, please use /proc/7958/oom_score_adj instead. [ 239.223928][ T7971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.476407][ T5841] Bluetooth: hci0: command tx timeout [ 240.681011][ T8013] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.868'. [ 240.992916][ T3555] hsr_slave_0: left promiscuous mode [ 241.041149][ T3555] hsr_slave_1: left promiscuous mode [ 241.050395][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.050550][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.080940][ T37] audit: type=1326 audit(240.643:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8020 comm="syz.4.872" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dd858eba9 code=0x0 [ 241.118547][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.118579][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.293986][ T3555] veth1_macvtap: left promiscuous mode [ 241.294201][ T3555] veth0_macvtap: left promiscuous mode [ 241.317677][ T3555] veth1_vlan: left promiscuous mode [ 241.317994][ T3555] veth0_vlan: left promiscuous mode [ 242.121882][ T8045] Bluetooth: MGMT ver 1.23 [ 242.555807][ T5841] Bluetooth: hci0: command tx timeout [ 244.057816][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 244.276362][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 246.720894][ T7910] chnl_net:caif_netlink_parms(): no params data found [ 247.592162][ T7910] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.592407][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.592610][ T7910] bridge_slave_0: entered allmulticast mode [ 247.618897][ T7910] bridge_slave_0: entered promiscuous mode [ 247.622615][ T7910] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.622828][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.623020][ T7910] bridge_slave_1: entered allmulticast mode [ 247.652338][ T7910] bridge_slave_1: entered promiscuous mode [ 247.922779][ T7910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.973863][ T7910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.559414][ T7910] team0: Port device team_slave_0 added [ 248.563279][ T3555] IPVS: stop unused estimator thread 0... [ 248.598000][ T7910] team0: Port device team_slave_1 added [ 249.005197][ T3555] ------------[ cut here ]------------ [ 249.005226][ T3555] WARNING: CPU: 1 PID: 3555 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0 [ 249.005275][ T3555] Modules linked in: [ 249.005318][ T3555] CPU: 1 UID: 0 PID: 3555 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 249.005343][ T3555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 249.005357][ T3555] Workqueue: netns cleanup_net [ 249.005394][ T3555] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 249.005420][ T3555] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3b 15 7e f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a9 a1 60 f8 e8 64 da 1e f8 90 <0f> 0b 90 e9 fd fd ff ff e8 56 da 1e f8 90 0f 0b 90 e9 60 fe ff ff [ 249.005494][ T3555] RSP: 0018:ffffc9000d10f898 EFLAGS: 00010293 [ 249.005514][ T3555] RAX: ffffffff899f955c RBX: ffff888033338000 RCX: ffff888030c79dc0 [ 249.005530][ T3555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.005543][ T3555] RBP: ffffc9000d10f9b0 R08: 0000000000000000 R09: 0000000000000000 [ 249.005556][ T3555] R10: dffffc0000000000 R11: fffffbfff1e3abe7 R12: ffffffff8edcd6c0 [ 249.005579][ T3555] R13: 1ffff92001a21f40 R14: ffff8880333397c0 R15: dffffc0000000000 [ 249.005595][ T3555] FS: 0000000000000000(0000) GS:ffff8881269bd000(0000) knlGS:0000000000000000 [ 249.005611][ T3555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.005625][ T3555] CR2: 0000555589705808 CR3: 0000000029cfa000 CR4: 00000000003526f0 [ 249.005643][ T3555] Call Trace: [ 249.005652][ T3555] [ 249.005666][ T3555] xfrm_net_exit+0x2d/0x70 [ 249.005697][ T3555] ops_undo_list+0x49a/0x990 [ 249.005744][ T3555] ? __pfx_ops_undo_list+0x10/0x10 [ 249.005789][ T3555] cleanup_net+0x4cb/0x800 [ 249.005825][ T3555] ? __pfx_cleanup_net+0x10/0x10 [ 249.005860][ T3555] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.005892][ T3555] ? process_scheduled_works+0x9ef/0x17b0 [ 249.005919][ T3555] ? process_scheduled_works+0x9ef/0x17b0 [ 249.005950][ T3555] process_scheduled_works+0xade/0x17b0 [ 249.006022][ T3555] ? __pfx_process_scheduled_works+0x10/0x10 [ 249.006072][ T3555] worker_thread+0x8a0/0xda0 [ 249.006139][ T3555] kthread+0x70e/0x8a0 [ 249.006177][ T3555] ? __pfx_worker_thread+0x10/0x10 [ 249.006205][ T3555] ? __pfx_kthread+0x10/0x10 [ 249.006244][ T3555] ? __pfx_kthread+0x10/0x10 [ 249.006279][ T3555] ret_from_fork+0x439/0x7d0 [ 249.006311][ T3555] ? __pfx_ret_from_fork+0x10/0x10 [ 249.006353][ T3555] ? __switch_to_asm+0x39/0x70 [ 249.006374][ T3555] ? __switch_to_asm+0x33/0x70 [ 249.006393][ T3555] ? __pfx_kthread+0x10/0x10 [ 249.006428][ T3555] ret_from_fork_asm+0x1a/0x30 [ 249.006468][ T3555] [ 249.006484][ T3555] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 249.006500][ T3555] CPU: 1 UID: 0 PID: 3555 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 249.006525][ T3555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 249.006538][ T3555] Workqueue: netns cleanup_net [ 249.006568][ T3555] Call Trace: [ 249.006576][ T3555] [ 249.006585][ T3555] dump_stack_lvl+0x99/0x250 [ 249.006618][ T3555] ? __asan_memcpy+0x40/0x70 [ 249.006643][ T3555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.006676][ T3555] ? __pfx__printk+0x10/0x10 [ 249.006717][ T3555] vpanic+0x281/0x750 [ 249.006750][ T3555] ? __pfx__printk+0x10/0x10 [ 249.006774][ T3555] ? __pfx_vpanic+0x10/0x10 [ 249.006806][ T3555] ? is_bpf_text_address+0x292/0x2b0 [ 249.006850][ T3555] panic+0xb9/0xc0 [ 249.006881][ T3555] ? __pfx_panic+0x10/0x10 [ 249.006933][ T3555] __warn+0x31b/0x4b0 [ 249.006963][ T3555] ? xfrm_state_fini+0x26d/0x2f0 [ 249.006992][ T3555] ? xfrm_state_fini+0x26d/0x2f0 [ 249.007018][ T3555] report_bug+0x2be/0x4f0 [ 249.007048][ T3555] ? xfrm_state_fini+0x26d/0x2f0 [ 249.007074][ T3555] ? xfrm_state_fini+0x26d/0x2f0 [ 249.007100][ T3555] ? xfrm_state_fini+0x26f/0x2f0 [ 249.007134][ T3555] handle_bug+0x84/0x160 [ 249.007157][ T3555] exc_invalid_op+0x1a/0x50 [ 249.007180][ T3555] asm_exc_invalid_op+0x1a/0x20 [ 249.007202][ T3555] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 249.007227][ T3555] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3b 15 7e f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a9 a1 60 f8 e8 64 da 1e f8 90 <0f> 0b 90 e9 fd fd ff ff e8 56 da 1e f8 90 0f 0b 90 e9 60 fe ff ff [ 249.007245][ T3555] RSP: 0018:ffffc9000d10f898 EFLAGS: 00010293 [ 249.007263][ T3555] RAX: ffffffff899f955c RBX: ffff888033338000 RCX: ffff888030c79dc0 [ 249.007280][ T3555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.007293][ T3555] RBP: ffffc9000d10f9b0 R08: 0000000000000000 R09: 0000000000000000 [ 249.007307][ T3555] R10: dffffc0000000000 R11: fffffbfff1e3abe7 R12: ffffffff8edcd6c0 [ 249.007324][ T3555] R13: 1ffff92001a21f40 R14: ffff8880333397c0 R15: dffffc0000000000 [ 249.007356][ T3555] ? xfrm_state_fini+0x26c/0x2f0 [ 249.007390][ T3555] ? xfrm_state_fini+0x26c/0x2f0 [ 249.007420][ T3555] xfrm_net_exit+0x2d/0x70 [ 249.007448][ T3555] ops_undo_list+0x49a/0x990 [ 249.007487][ T3555] ? __pfx_ops_undo_list+0x10/0x10 [ 249.007532][ T3555] cleanup_net+0x4cb/0x800 [ 249.007573][ T3555] ? __pfx_cleanup_net+0x10/0x10 [ 249.007608][ T3555] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.007639][ T3555] ? process_scheduled_works+0x9ef/0x17b0 [ 249.007666][ T3555] ? process_scheduled_works+0x9ef/0x17b0 [ 249.007696][ T3555] process_scheduled_works+0xade/0x17b0 [ 249.007759][ T3555] ? __pfx_process_scheduled_works+0x10/0x10 [ 249.007809][ T3555] worker_thread+0x8a0/0xda0 [ 249.007868][ T3555] kthread+0x70e/0x8a0 [ 249.007906][ T3555] ? __pfx_worker_thread+0x10/0x10 [ 249.007934][ T3555] ? __pfx_kthread+0x10/0x10 [ 249.007974][ T3555] ? __pfx_kthread+0x10/0x10 [ 249.008008][ T3555] ret_from_fork+0x439/0x7d0 [ 249.008039][ T3555] ? __pfx_ret_from_fork+0x10/0x10 [ 249.008076][ T3555] ? __switch_to_asm+0x39/0x70 [ 249.008096][ T3555] ? __switch_to_asm+0x33/0x70 [ 249.008121][ T3555] ? __pfx_kthread+0x10/0x10 [ 249.008156][ T3555] ret_from_fork_asm+0x1a/0x30 [ 249.008197][ T3555] [ 249.008475][ T3555] Kernel Offset: disabled