last executing test programs: 54.332427337s ago: executing program 3 (id=549): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x4000, 0x4000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x80a0000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) 54.03327134s ago: executing program 3 (id=554): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_CREATE(r0, 0x5501) 53.82584246s ago: executing program 3 (id=557): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf41, 0x4) sendto$packet(r0, &(0x7f0000000700)="654279e05daa2b7293bfcecaf78668bbb02ac98606ec4545dde6943e05af70707d4446622c0ff743", 0x28, 0x4800, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf9}}, 0x14) 53.603392302s ago: executing program 3 (id=560): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x4) 53.412445054s ago: executing program 3 (id=562): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x10, r0) ptrace(0x11, r0) 52.879371084s ago: executing program 3 (id=566): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 52.466420323s ago: executing program 32 (id=566): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 4.279891794s ago: executing program 2 (id=1045): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x1ff) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x1, 0x4, 0x3, 0x0, 0x5, 0xe, 0x8f}}], 0x30, 0x41}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 4.064157559s ago: executing program 2 (id=1046): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getpgrp(0x0) 3.714112615s ago: executing program 0 (id=1050): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0x0, 0xfffe, 0x7}, 0x8) 3.264022873s ago: executing program 4 (id=1054): r0 = socket(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @empty, 0x6}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e01400004fcff", 0x58}], 0x1) 2.901378511s ago: executing program 4 (id=1057): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 2.442532924s ago: executing program 0 (id=1061): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x38, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 2.276480833s ago: executing program 2 (id=1062): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x1116, &(0x7f0000000100)={0x0, 0xbfdc, 0x8, 0x0, 0x1}, &(0x7f0000000940), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x19, &(0x7f0000000000)={0x9, 0x0, 0x0}, 0x0) 2.266979386s ago: executing program 5 (id=1063): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = syz_io_uring_setup(0xcd0, &(0x7f0000000dc0)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x152}, &(0x7f00000005c0)=0x0, &(0x7f0000000e40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0xff39) 2.123284916s ago: executing program 0 (id=1065): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0x10, 0xff, 0x0, 0x9, 0x35, 0x81, 0x30, 0xb, 0x5, 0x7, 0x8, 0x0, 0x8, 0x6, 0x7, 0x3, 0x6, 0xa0, '\x00', 0x5, 0xb8}) 2.009437314s ago: executing program 5 (id=1066): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f0000000040)="3f031c000302140006001e00890000004a1b7880610cc945000088a800008100000081000000", 0x26, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r1, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 1.970888935s ago: executing program 2 (id=1067): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'xfrm0\x00', &(0x7f0000000200)=@ethtool_coalesce={0xf, 0xb6, 0x9, 0x2, 0x1, 0x200, 0x4, 0x8, 0xc, 0x0, 0xae22, 0x0, 0x3, 0x5, 0x1000, 0x3, 0x8002, 0x1, 0x7, 0x9, 0x5, 0x9, 0x3}}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)) 1.919673152s ago: executing program 1 (id=1068): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x2d, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x39596cc5be47277d}}}}]}, 0x40}}, 0x0) 1.791598783s ago: executing program 2 (id=1069): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000304) 1.652023944s ago: executing program 5 (id=1070): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r0, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) 1.462917167s ago: executing program 1 (id=1071): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x80000, @dev={0xfe, 0x80, '\x00', 0x13}, 0x101}, 0x1c) 1.263553044s ago: executing program 0 (id=1072): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f00000000c0)={0x30, r2, 0x0, 0x0, 0x8000, 0x200000000000, 0xffffffffffffffff, 0x0}) 1.199804335s ago: executing program 5 (id=1073): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffd}]}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x0, 0x0}) 1.155668836s ago: executing program 1 (id=1074): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r2, @ANYBLOB="800002000a0002"], 0x28}}, 0x0) 996.858283ms ago: executing program 4 (id=1075): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @local}, 0x3ff, 0x0, 0x2}}, 0x2e) 982.887034ms ago: executing program 1 (id=1076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) 821.136935ms ago: executing program 0 (id=1077): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x45d) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) 782.882599ms ago: executing program 5 (id=1078): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{0x0, 0x0, 0x57b2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_LOSS={0x28, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x3, 0x1, 0xedff, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x5, 0x5, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x9da, 0x1, 0x141, 0xffff}}]}]}}}]}, 0xa0}}, 0x0) 751.719657ms ago: executing program 4 (id=1079): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 589.694308ms ago: executing program 0 (id=1080): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x40, 0x6, &(0x7f0000000080)={0x1f, "b30a69283a9587dfa6434e07f695f3984820a74426495306bbced9189f724c0546"}}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000006c0)={&(0x7f0000000540)=[{0x5, 0x1000, 0x0, 0x0}, {0x8, 0x10, 0x0, 0x0}], 0x2}) 501.641548ms ago: executing program 4 (id=1081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x0) 235.656942ms ago: executing program 5 (id=1082): r0 = socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="5980a642beaf34ff0f0000121690ad0d2b", 0x11}], 0x1}, 0x20040015) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 221.328115ms ago: executing program 4 (id=1083): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x10001064, 0x1, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, 0x0, 0x0, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 213.001824ms ago: executing program 1 (id=1084): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r1}, &(0x7f0000000980), &(0x7f00000009c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r1, &(0x7f0000000680), &(0x7f0000000700)=""/168}, 0x20) 101.685448ms ago: executing program 2 (id=1085): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a3865) 0s ago: executing program 1 (id=1086): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0xb49e2000, 0x200, 0xa, 0x8001, 0x1e8b}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x9}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x3}]}}}]}, 0x64}}, 0x2400c000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.139' (ED25519) to the list of known hosts. [ 87.302936][ T5848] cgroup: Unknown subsys name 'net' [ 87.455863][ T5848] cgroup: Unknown subsys name 'cpuset' [ 87.465283][ T5848] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.195684][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.908621][ T44] cfg80211: failed to load regulatory.db [ 93.643256][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.652999][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.660694][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.661842][ T5875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.669789][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.682746][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.683501][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.702296][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.702383][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.718627][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.727500][ T5882] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.729326][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.742730][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.743473][ T5882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.750672][ T5875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.758307][ T5882] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.765583][ T5875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.772509][ T5882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.780081][ T5875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.787983][ T5882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.798805][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.798990][ T5882] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.807620][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.821506][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.837708][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.494150][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 94.553081][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 94.669503][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 94.745553][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 94.782299][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 94.848879][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.856266][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.864002][ T5868] bridge_slave_0: entered allmulticast mode [ 94.871412][ T5868] bridge_slave_0: entered promiscuous mode [ 94.880170][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.887361][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.894833][ T5868] bridge_slave_1: entered allmulticast mode [ 94.902496][ T5868] bridge_slave_1: entered promiscuous mode [ 94.992766][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.999970][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.007238][ T5866] bridge_slave_0: entered allmulticast mode [ 95.014533][ T5866] bridge_slave_0: entered promiscuous mode [ 95.060918][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.068425][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.075796][ T5866] bridge_slave_1: entered allmulticast mode [ 95.083078][ T5866] bridge_slave_1: entered promiscuous mode [ 95.113294][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.158401][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.165766][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.173231][ T5869] bridge_slave_0: entered allmulticast mode [ 95.180458][ T5869] bridge_slave_0: entered promiscuous mode [ 95.190408][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.230739][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.238032][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.245279][ T5869] bridge_slave_1: entered allmulticast mode [ 95.253268][ T5869] bridge_slave_1: entered promiscuous mode [ 95.287280][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.297227][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.304547][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.312481][ T5867] bridge_slave_0: entered allmulticast mode [ 95.319777][ T5867] bridge_slave_0: entered promiscuous mode [ 95.367393][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.376703][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.383967][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.391170][ T5867] bridge_slave_1: entered allmulticast mode [ 95.399213][ T5867] bridge_slave_1: entered promiscuous mode [ 95.422228][ T5868] team0: Port device team_slave_0 added [ 95.428278][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.435475][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.442781][ T5881] bridge_slave_0: entered allmulticast mode [ 95.450047][ T5881] bridge_slave_0: entered promiscuous mode [ 95.485443][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.496796][ T5868] team0: Port device team_slave_1 added [ 95.503247][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.510440][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.517684][ T5881] bridge_slave_1: entered allmulticast mode [ 95.525000][ T5881] bridge_slave_1: entered promiscuous mode [ 95.559367][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.608164][ T5866] team0: Port device team_slave_0 added [ 95.616980][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.639640][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.646996][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.674275][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.699689][ T5866] team0: Port device team_slave_1 added [ 95.708306][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.730877][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.738253][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.764270][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.777776][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.815359][ T5869] team0: Port device team_slave_0 added [ 95.822937][ T5876] Bluetooth: hci3: command tx timeout [ 95.847163][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.884233][ T5869] team0: Port device team_slave_1 added [ 95.891998][ T5867] team0: Port device team_slave_0 added [ 95.900983][ T5867] team0: Port device team_slave_1 added [ 95.907038][ T5876] Bluetooth: hci0: command tx timeout [ 95.912814][ T5182] Bluetooth: hci2: command tx timeout [ 95.912828][ T5870] Bluetooth: hci1: command tx timeout [ 95.913038][ T5870] Bluetooth: hci4: command tx timeout [ 95.933235][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.940216][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.966326][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.016248][ T5881] team0: Port device team_slave_0 added [ 96.023074][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.030047][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.056775][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.107000][ T5881] team0: Port device team_slave_1 added [ 96.119949][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.127066][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.154100][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.171055][ T5868] hsr_slave_0: entered promiscuous mode [ 96.177810][ T5868] hsr_slave_1: entered promiscuous mode [ 96.185412][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.192451][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.218412][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.256670][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.263709][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.289860][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.322413][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.329577][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.355874][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.368378][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.375586][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.402650][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.416631][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.423650][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.449752][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.565656][ T5866] hsr_slave_0: entered promiscuous mode [ 96.572914][ T5866] hsr_slave_1: entered promiscuous mode [ 96.579124][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 96.585409][ T5866] Cannot create hsr debugfs directory [ 96.595546][ T5869] hsr_slave_0: entered promiscuous mode [ 96.602088][ T5869] hsr_slave_1: entered promiscuous mode [ 96.608213][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 96.614027][ T5869] Cannot create hsr debugfs directory [ 96.727062][ T5867] hsr_slave_0: entered promiscuous mode [ 96.733540][ T5867] hsr_slave_1: entered promiscuous mode [ 96.739730][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 96.745634][ T5867] Cannot create hsr debugfs directory [ 96.816113][ T5881] hsr_slave_0: entered promiscuous mode [ 96.822572][ T5881] hsr_slave_1: entered promiscuous mode [ 96.828670][ T5881] debugfs: 'hsr0' already exists in 'hsr' [ 96.834478][ T5881] Cannot create hsr debugfs directory [ 97.194181][ T5868] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.244582][ T5868] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.271084][ T5868] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.308244][ T5868] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.383228][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.394090][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.405132][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.416459][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.502770][ T5869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.519010][ T5869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.529684][ T5869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.560492][ T5869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.655620][ T5881] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.678463][ T5881] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.689942][ T5881] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.701450][ T5881] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.797999][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.809101][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.820031][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.831319][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.859049][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.895178][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.902243][ T5870] Bluetooth: hci3: command tx timeout [ 97.929579][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.964028][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.982553][ T5870] Bluetooth: hci4: command tx timeout [ 97.984538][ T5882] Bluetooth: hci2: command tx timeout [ 97.988016][ T5870] Bluetooth: hci1: command tx timeout [ 97.993935][ T5876] Bluetooth: hci0: command tx timeout [ 98.018498][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.025806][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.054592][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.061791][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.072571][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.079702][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.110286][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.117472][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.159433][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.227168][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.257295][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.316107][ T202] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.323319][ T202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.387760][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.394996][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.407587][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.440829][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.448044][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.483963][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.491156][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.515075][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.598511][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.650720][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.657975][ T3025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.711501][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.730312][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.737573][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.960041][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.014772][ T5868] veth0_vlan: entered promiscuous mode [ 99.083286][ T5868] veth1_vlan: entered promiscuous mode [ 99.154295][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.198392][ T5866] veth0_vlan: entered promiscuous mode [ 99.276832][ T5868] veth0_macvtap: entered promiscuous mode [ 99.304062][ T5868] veth1_macvtap: entered promiscuous mode [ 99.316712][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.329719][ T5866] veth1_vlan: entered promiscuous mode [ 99.386124][ T5869] veth0_vlan: entered promiscuous mode [ 99.396525][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.417450][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.448256][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.461087][ T5869] veth1_vlan: entered promiscuous mode [ 99.500455][ T5866] veth0_macvtap: entered promiscuous mode [ 99.510261][ T1339] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.537263][ T1339] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.557845][ T5866] veth1_macvtap: entered promiscuous mode [ 99.567993][ T1339] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.580339][ T1339] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.650261][ T5869] veth0_macvtap: entered promiscuous mode [ 99.665963][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.701957][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.711623][ T5869] veth1_macvtap: entered promiscuous mode [ 99.754337][ T5867] veth0_vlan: entered promiscuous mode [ 99.807894][ T3025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.808869][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.823859][ T3025] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.833384][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.850885][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.863403][ T3025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.872537][ T3025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.910502][ T5867] veth1_vlan: entered promiscuous mode [ 99.922354][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.970566][ T202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.979283][ T202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.987554][ T5876] Bluetooth: hci3: command tx timeout [ 100.027617][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.036555][ T202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.041827][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.055288][ T202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.066266][ T5876] Bluetooth: hci0: command tx timeout [ 100.071815][ T5882] Bluetooth: hci2: command tx timeout [ 100.072614][ T5870] Bluetooth: hci4: command tx timeout [ 100.077333][ T5882] Bluetooth: hci1: command tx timeout [ 100.102555][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.125900][ T5881] veth0_vlan: entered promiscuous mode [ 100.143913][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.169950][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.209692][ T5867] veth0_macvtap: entered promiscuous mode [ 100.220658][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.235444][ T5881] veth1_vlan: entered promiscuous mode [ 100.244095][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.257821][ T5867] veth1_macvtap: entered promiscuous mode [ 100.387839][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.448006][ T202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.468621][ T202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.484154][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.497128][ T5981] netlink: 'syz.2.3': attribute type 19 has an invalid length. [ 100.516130][ T5881] veth0_macvtap: entered promiscuous mode [ 100.533328][ T5981] Zero length message leads to an empty skb [ 100.606364][ T202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.610733][ T5881] veth1_macvtap: entered promiscuous mode [ 100.629138][ T202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.659064][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.674684][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.714186][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.724732][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.740194][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.777607][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.903964][ T202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.936405][ T202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.998736][ T202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.010937][ T202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.071994][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.087137][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.217265][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.231738][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.250505][ T5998] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.387401][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.425959][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.542955][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.550829][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.066771][ T5882] Bluetooth: hci3: command tx timeout [ 102.142849][ T5882] Bluetooth: hci1: command tx timeout [ 102.148736][ T5882] Bluetooth: hci4: command tx timeout [ 102.154400][ T5882] Bluetooth: hci0: command tx timeout [ 102.159939][ T5882] Bluetooth: hci2: command tx timeout [ 102.215795][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.231887][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.274854][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.308262][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.716128][ T6022] bond0: option ad_select: unable to set because the bond device is up [ 102.973769][ T6032] bond0: option all_slaves_active: invalid value (128) [ 103.177822][ T6039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.542214][ T5947] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.745017][ T5947] usb 1-1: Using ep0 maxpacket: 8 [ 103.761041][ T5947] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 103.806056][ T5947] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 103.823551][ T5947] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.845484][ T5947] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.871912][ T5947] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 103.881008][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.080504][ T6063] warning: `syz.2.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.151825][ T5947] usb 1-1: GET_CAPABILITIES returned 0 [ 104.157498][ T5947] usbtmc 1-1:16.0: can't read capabilities [ 104.173330][ T5958] IPVS: starting estimator thread 0... [ 104.271828][ T6066] IPVS: using max 27 ests per chain, 64800 per kthread [ 104.325811][ T6072] process 'syz.3.41' launched '/dev/fd/3' with NULL argv: empty string added [ 104.390223][ T9] usb 1-1: USB disconnect, device number 2 [ 105.354100][ T5947] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.433085][ T6113] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.473822][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.60'. [ 105.542211][ T5947] usb 5-1: Using ep0 maxpacket: 32 [ 105.611752][ T5947] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 105.619978][ T5947] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 105.659174][ T5947] usb 5-1: config 4 has no interface number 0 [ 105.683259][ T5947] usb 5-1: config 4 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 105.733308][ T5947] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 105.777256][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.820448][ T5947] hub 5-1:4.128: bad descriptor, ignoring hub [ 105.842437][ T5947] hub 5-1:4.128: probe with driver hub failed with error -5 [ 105.877258][ T5947] usbhid 5-1:4.128: couldn't find an input interrupt endpoint [ 106.048750][ T6103] netlink: 16 bytes leftover after parsing attributes in process `syz.4.55'. [ 106.192652][ T5958] usb 5-1: USB disconnect, device number 2 [ 108.951956][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 109.150188][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 109.193600][ T9] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 109.222867][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.244935][ T9] usb 4-1: config 0 descriptor?? [ 109.252093][ T6225] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 109.285118][ T6248] netlink: 'syz.1.111': attribute type 13 has an invalid length. [ 109.301355][ T6246] netlink: 24 bytes leftover after parsing attributes in process `syz.0.110'. [ 109.515173][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.523409][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.718405][ T9] hkems 0003:2006:0118.0001: unknown main item tag 0x0 [ 109.786213][ T6248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.805303][ T6248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.868311][ T9] hkems 0003:2006:0118.0001: item fetching failed at offset 3/5 [ 109.883491][ T9] hkems 0003:2006:0118.0001: parse failed [ 109.939297][ T9] hkems 0003:2006:0118.0001: probe with driver hkems failed with error -22 [ 110.072858][ T6260] netlink: 136 bytes leftover after parsing attributes in process `syz.0.115'. [ 110.074693][ T9] usb 4-1: USB disconnect, device number 2 [ 110.096659][ T6260] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 110.160345][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.192167][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.275984][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.316136][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.622426][ T5882] block nbd0: Receive control failed (result -32) [ 110.675514][ T6283] bridge0: port 3(ipvlan2) entered blocking state [ 110.701877][ T6283] bridge0: port 3(ipvlan2) entered disabled state [ 110.738033][ T6283] ipvlan2: entered allmulticast mode [ 110.764385][ T6283] bridge0: entered allmulticast mode [ 110.797319][ T6283] ipvlan2: left allmulticast mode [ 110.827785][ T6283] bridge0: left allmulticast mode [ 111.922410][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 111.986786][ T6326] Bluetooth: MGMT ver 1.23 [ 112.203326][ T6333] Bluetooth: MGMT ver 1.23 [ 112.285170][ T6336] debugfs: 'netdev:nicvf0' already exists in 'phy11' [ 112.679891][ T6347] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.834655][ T6347] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.994004][ T6347] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.200500][ T6347] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.260852][ T6377] ip6gretap1: entered promiscuous mode [ 113.289172][ T6377] ip6gretap1: entered allmulticast mode [ 113.500721][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.580161][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.673590][ T202] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.690254][ T202] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.747287][ T6392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'. [ 113.989027][ T6403] netlink: 'syz.2.163': attribute type 6 has an invalid length. [ 114.046862][ T6403] netlink: 'syz.2.163': attribute type 6 has an invalid length. [ 114.121715][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.337589][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 114.363742][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 114.370427][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 114.388071][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.414588][ T9] usb 4-1: config 0 descriptor?? [ 114.941199][ T9] hid (null): global environment stack underflow [ 114.971782][ T9] hid (null): report_id 0 is invalid [ 114.979164][ T9] hid (null): global environment stack underflow [ 114.985855][ T9] hid (null): unknown global tag 0xc [ 114.991226][ T9] hid (null): report_id 25068 is invalid [ 114.999003][ T9] hid (null): report_id 0 is invalid [ 115.004710][ T9] hid (null): global environment stack overflow [ 115.016481][ T9] hid (null): unknown global tag 0xc [ 115.022043][ T9] hid (null): unknown global tag 0x58 [ 115.169854][ T44] usb 4-1: USB disconnect, device number 3 [ 115.781776][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.229323][ T10] usb 3-1: config 0 has no interfaces? [ 116.246147][ T10] usb 3-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 116.262286][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.270320][ T10] usb 3-1: Product: syz [ 116.275089][ T10] usb 3-1: Manufacturer: syz [ 116.279746][ T10] usb 3-1: SerialNumber: syz [ 116.302250][ T10] usb 3-1: config 0 descriptor?? [ 116.432528][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.565470][ T10] usb 3-1: USB disconnect, device number 2 [ 116.592231][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 116.617110][ T24] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 116.632924][ T24] usb 5-1: config 0 has no interface number 0 [ 116.650048][ T24] usb 5-1: config 0 interface 184 has no altsetting 0 [ 116.662951][ T6462] block nbd1: Unsupported socket: should be TCP or UNIX. [ 116.670276][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 116.690343][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.698855][ T24] usb 5-1: Product: syz [ 116.708951][ T24] usb 5-1: Manufacturer: syz [ 116.739350][ T24] usb 5-1: SerialNumber: syz [ 116.761192][ T24] usb 5-1: config 0 descriptor?? [ 116.775135][ T24] smsc75xx v1.0.0 [ 116.881100][ T6466] netlink: 'syz.0.189': attribute type 1 has an invalid length. [ 117.120585][ T6477] netlink: 48 bytes leftover after parsing attributes in process `syz.3.194'. [ 117.205844][ T6482] netlink: 184 bytes leftover after parsing attributes in process `syz.0.192'. [ 117.595681][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 117.621885][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 117.641946][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 117.662305][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 117.689138][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 117.700027][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 117.710888][ T24] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 117.724598][ T24] usb 5-1: USB disconnect, device number 3 [ 118.423055][ T6491] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 118.504648][ T6508] blkio.reset_stats is deprecated [ 118.956099][ T6517] gfs2: fsid=meta: Trying to join cluster "lock_nolock", "meta" [ 118.963969][ T6517] gfs2: fsid=meta: Now mounting FS (format 0)... [ 118.973852][ T6517] I/O error, dev loop4, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 118.984401][ T6517] gfs2: error -5 reading superblock [ 118.989864][ T6517] gfs2: fsid=meta: can't read superblock [ 118.995594][ T6517] gfs2: fsid=meta: can't read superblock: -5 [ 119.075906][ T6528] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 119.133930][ T6528] EXT4-fs (loop0): unable to read superblock [ 119.750629][ T6560] netlink: 'syz.4.226': attribute type 13 has an invalid length. [ 119.865084][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.873412][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.892331][ T5947] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.057593][ T5947] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 120.069413][ T5947] usb 3-1: config 0 has no interface number 0 [ 120.080800][ T5947] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 120.105544][ T5947] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 120.148107][ T5947] usb 3-1: config 0 interface 255 has no altsetting 0 [ 120.176500][ T5947] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 120.185980][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.202459][ T5947] usb 3-1: config 0 descriptor?? [ 120.211046][ T5947] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 120.429305][ T5947] usb 3-1: USB disconnect, device number 3 [ 120.501871][ T1339] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.545162][ T67] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.557284][ T67] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.614804][ T67] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.808047][ T6583] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.828867][ T6583] exFAT-fs (loop4): unable to read boot sector [ 120.842974][ T6583] exFAT-fs (loop4): failed to read boot sector [ 120.859512][ T6583] exFAT-fs (loop4): failed to recognize exfat type [ 121.123174][ T10] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 121.284721][ T10] usb 5-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 121.302106][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 121.327717][ T10] usb 5-1: too many endpoints for config 1 interface 1 altsetting 78: 168, using maximum allowed: 30 [ 121.353843][ T10] usb 5-1: config 1 interface 1 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 168 [ 121.372409][ T10] usb 5-1: config 1 interface 1 has no altsetting 0 [ 121.392929][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.407896][ T6603] ======================================================= [ 121.407896][ T6603] WARNING: The mand mount option has been deprecated and [ 121.407896][ T6603] and is ignored by this kernel. Remove the mand [ 121.407896][ T6603] option from the mount to silence this warning. [ 121.407896][ T6603] ======================================================= [ 121.411842][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.498447][ T10] usb 5-1: Product: syz [ 121.508560][ T10] usb 5-1: Manufacturer: syz [ 121.526669][ T10] usb 5-1: SerialNumber: syz [ 121.557274][ T10] usb 5-1: selecting invalid altsetting 0 [ 121.571533][ T10] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 121.752637][ T10] usb 5-1: selecting invalid altsetting 0 [ 121.770183][ T10] usbtest 5-1:1.1: probe with driver usbtest failed with error -22 [ 121.803370][ T10] usb 5-1: USB disconnect, device number 4 [ 121.894654][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.081731][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 122.099640][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.126162][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 122.142147][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.177257][ T6629] sctp: [Deprecated]: syz.0.255 (pid 6629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.177257][ T6629] Use struct sctp_sack_info instead [ 122.180630][ T9] usb 3-1: config 0 descriptor?? [ 122.649108][ T9] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 122.661702][ T6027] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 122.842017][ T6027] usb 5-1: Using ep0 maxpacket: 16 [ 122.864197][ T6027] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.906267][ T6027] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.925683][ T6027] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 122.936702][ T6027] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 122.956263][ T6027] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.971324][ T6027] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 122.991054][ T6027] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 123.011713][ T6027] usb 5-1: Manufacturer: syz [ 123.027080][ T6027] usb 5-1: config 0 descriptor?? [ 123.100283][ T9] usb 3-1: USB disconnect, device number 4 [ 123.412029][ T6027] rc_core: IR keymap rc-hauppauge not found [ 123.417978][ T6027] Registered IR keymap rc-empty [ 123.437096][ T6027] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.483323][ T6027] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.516241][ T6027] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 123.553351][ T6027] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 123.599059][ T6027] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.651896][ T6027] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.681812][ T6027] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.702098][ T6027] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.723122][ T6027] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.771874][ T6027] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.812318][ T6027] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.862133][ T6027] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.905408][ T6027] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.951838][ T6027] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.989238][ T6027] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 124.008515][ T6027] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 124.060522][ T6027] usb 5-1: USB disconnect, device number 5 [ 124.592050][ T44] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 124.712160][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.772028][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 124.791037][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.800009][ T44] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 124.811932][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.823494][ T44] usb 2-1: config 0 descriptor?? [ 124.872498][ T24] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 124.887517][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.908168][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.935598][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.974016][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.988332][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.004199][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.014621][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.041908][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.044294][ T6705] program syz.0.286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.069923][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.088616][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.110427][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.123100][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.131355][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.145238][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.193724][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.212925][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.240862][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.241428][ T6708] netlink: 200 bytes leftover after parsing attributes in process `syz.4.288'. [ 125.270836][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.280299][ T44] corsair-cpro 0003:1B1C:0C10.0004: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 125.294951][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.307017][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.331707][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.340030][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.354385][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.378801][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.428231][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 125.458368][ T24] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 125.478084][ T24] usb 3-1: Product: syz [ 125.506100][ T24] usb 3-1: Manufacturer: syz [ 125.510798][ T24] usb 3-1: SerialNumber: syz [ 125.555424][ T24] usb 3-1: config 0 descriptor?? [ 125.598911][ T24] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 125.648115][ T44] corsair-cpro 0003:1B1C:0C10.0004: probe with driver corsair-cpro failed with error -71 [ 125.703792][ T44] usb 2-1: USB disconnect, device number 2 [ 125.719013][ T6722] Driver unsupported XDP return value 0 on prog (id 31) dev N/A, expect packet loss! [ 125.831075][ T24] usb 3-1: USB disconnect, device number 5 [ 125.840014][ T24] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 126.111749][ T5958] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 126.171707][ T939] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 126.289409][ T5958] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 126.298817][ T5958] usb 5-1: can't read configurations, error -71 [ 126.347086][ T939] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 126.360072][ T939] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 126.370174][ T939] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 126.379377][ T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.400606][ T6726] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 126.432180][ T939] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 126.761016][ T9] usb 1-1: USB disconnect, device number 3 [ 127.048516][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'. [ 127.329038][ T6760] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.373341][ T6760] I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.412511][ T6760] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 127.447278][ T6760] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.469484][ T6760] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 127.501954][ T6760] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 127.510676][ T6760] UDF-fs: Scanning with blocksize 512 failed [ 127.534211][ T6760] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.563956][ T6760] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.593017][ T6760] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 127.621194][ T6760] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.641863][ T6760] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 127.651524][ T6760] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 127.677596][ T6760] UDF-fs: Scanning with blocksize 1024 failed [ 127.688797][ T6760] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.698673][ T6760] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.708983][ T6760] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 127.720696][ T6760] I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.731239][ T6760] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 127.741479][ T6760] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 127.769919][ T6760] UDF-fs: Scanning with blocksize 2048 failed [ 127.802980][ T6760] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.832553][ T6760] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 127.845805][ T6760] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 127.857002][ T6760] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 127.934755][ T6760] UDF-fs: Scanning with blocksize 4096 failed [ 127.951402][ T6760] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 128.381234][ T6783] netlink: 64 bytes leftover after parsing attributes in process `syz.4.321'. [ 129.081755][ T5958] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.229214][ T6818] capability: warning: `syz.4.336' uses deprecated v2 capabilities in a way that may be insecure [ 129.256178][ T6820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.337'. [ 129.276089][ T5958] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.295865][ T5958] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 129.335702][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.373801][ T5958] usb 3-1: config 0 descriptor?? [ 129.392915][ T5958] pwc: Askey VC010 type 2 USB webcam detected. [ 129.791293][ T5958] pwc: recv_control_msg error -32 req 02 val 2b00 [ 129.796654][ T6834] overlayfs: statfs failed on './file0' [ 130.022525][ T5958] pwc: recv_control_msg error -71 req 02 val 2c00 [ 130.029701][ T5958] pwc: recv_control_msg error -71 req 04 val 1000 [ 130.048487][ T5958] pwc: recv_control_msg error -71 req 04 val 1300 [ 130.073355][ T5958] pwc: recv_control_msg error -71 req 04 val 1400 [ 130.090493][ T5958] pwc: recv_control_msg error -71 req 02 val 2000 [ 130.106895][ T6847] netlink: 'syz.1.348': attribute type 12 has an invalid length. [ 130.116165][ T5958] pwc: recv_control_msg error -71 req 02 val 2100 [ 130.129983][ T6847] netlink: 'syz.1.348': attribute type 29 has an invalid length. [ 130.138575][ T5958] pwc: recv_control_msg error -71 req 04 val 1500 [ 130.149788][ T5958] pwc: recv_control_msg error -71 req 02 val 2500 [ 130.165590][ T6847] netlink: 148 bytes leftover after parsing attributes in process `syz.1.348'. [ 130.180599][ T5958] pwc: recv_control_msg error -71 req 02 val 2400 [ 130.201400][ T5958] pwc: recv_control_msg error -71 req 02 val 2600 [ 130.223266][ T5958] pwc: recv_control_msg error -71 req 02 val 2900 [ 130.241788][ T5958] pwc: recv_control_msg error -71 req 02 val 2800 [ 130.266128][ T5958] pwc: recv_control_msg error -71 req 04 val 1100 [ 130.287646][ T5958] pwc: recv_control_msg error -71 req 04 val 1200 [ 130.399054][ T5958] pwc: Registered as video103. [ 130.439275][ T5958] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 130.480614][ T5958] usb 3-1: USB disconnect, device number 6 [ 130.492750][ T6853] netlink: 'syz.0.350': attribute type 13 has an invalid length. [ 130.851207][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.859032][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.020570][ T6864] trusted_key: encrypted_key: keyword '5pdate' not recognized [ 131.085997][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.103946][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.585230][ T1339] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.605021][ T1339] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.612954][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 131.636085][ T1339] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.654174][ T1339] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.813749][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 131.821380][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.841721][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 131.863099][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.890110][ T24] usb 3-1: config 0 descriptor?? [ 132.323204][ T24] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 132.736733][ T24] usb 3-1: USB disconnect, device number 7 [ 133.072838][ T6942] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 133.079018][ T6942] syzkaller1: linktype set to 805 [ 133.232857][ T5958] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.403991][ T5958] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 133.426164][ T5958] usb 2-1: config 0 has no interface number 0 [ 133.438441][ T5958] usb 2-1: config 0 interface 98 has no altsetting 0 [ 133.464611][ T5958] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 133.481408][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.505780][ T5958] usb 2-1: Product: syz [ 133.524544][ T5958] usb 2-1: Manufacturer: syz [ 133.529197][ T5958] usb 2-1: SerialNumber: syz [ 133.537338][ T6951] input: syz1 as /devices/virtual/input/input7 [ 133.553425][ T6953] netlink: 'syz.2.393': attribute type 39 has an invalid length. [ 133.556014][ T5958] usb 2-1: config 0 descriptor?? [ 133.795980][ T5958] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 134.237627][ T6975] capability: warning: `syz.2.405' uses 32-bit capabilities (legacy support in use) [ 134.446517][ T5958] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 134.836274][ T5958] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 134.861137][ T5958] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 134.872322][ T9] usb 2-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 134.881317][ T9] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 135.053363][ T10] usb 2-1: USB disconnect, device number 3 [ 135.125084][ T7005] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.257099][ T7005] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.460757][ T7005] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.624903][ T7005] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.667205][ T7027] macsec1: entered allmulticast mode [ 135.681857][ T7027] veth1_macvtap: entered allmulticast mode [ 135.722126][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 135.731582][ T7027] veth1_macvtap: left allmulticast mode [ 135.854848][ T1339] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.892528][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 135.902011][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.932241][ T10] usb 4-1: config 0 has no interface number 0 [ 135.954859][ T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 135.968662][ T202] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.976997][ T202] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.985940][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.005131][ T10] usb 4-1: Product: syz [ 136.012096][ T10] usb 4-1: Manufacturer: syz [ 136.016818][ T10] usb 4-1: SerialNumber: syz [ 136.022642][ T202] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.039596][ T10] usb 4-1: config 0 descriptor?? [ 136.076245][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 136.504550][ T7053] netem: incorrect ge model size [ 136.509895][ T7053] netem: change failed [ 136.901853][ T10] gspca_spca1528: reg_w err -71 [ 136.956544][ T10] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 136.973071][ T10] usb 4-1: USB disconnect, device number 4 [ 137.708644][ T7087] bpf: Bad value for 'uid' [ 137.990173][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.001964][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.798631][ T7134] blk_print_req_error: 2 callbacks suppressed [ 138.798651][ T7134] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 138.826087][ T7134] EXT4-fs (loop0): unable to read superblock [ 139.072561][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 139.244278][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.256933][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 139.289287][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.311712][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 139.354030][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 139.382518][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.400776][ T10] usb 1-1: Manufacturer: syz [ 139.417423][ T10] usb 1-1: config 0 descriptor?? [ 139.697956][ T7170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.496'. [ 139.763105][ T7173] netlink: 'syz.4.498': attribute type 3 has an invalid length. [ 139.785646][ T7173] netlink: 'syz.4.498': attribute type 3 has an invalid length. [ 139.811726][ T10] rc_core: IR keymap rc-hauppauge not found [ 139.831200][ T10] Registered IR keymap rc-empty [ 139.842153][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 139.893476][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 139.922962][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 139.972470][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 140.014575][ T7183] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.036433][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.050327][ T7183] FAT-fs (loop2): unable to read boot sector [ 140.062078][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.081976][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.090483][ C0] mceusb 1-1:0.0: short-range (0x3a) receiver active [ 140.121865][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.145141][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.172956][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.211806][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.242175][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.293159][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.382093][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.416033][ T10] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 140.456786][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x3a active) [ 140.488977][ T10] usb 1-1: USB disconnect, device number 4 [ 140.787070][ T7206] binder: 7205:7206 ioctl 400c620e 200000000240 returned -22 [ 141.266576][ T7225] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 141.298061][ T7225] SQUASHFS error: Failed to read block 0x0: -5 [ 141.318163][ T7225] unable to read squashfs_super_block [ 141.403369][ T5958] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.582552][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 141.590654][ T5958] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 141.609772][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.629681][ T5958] usb 1-1: config 0 descriptor?? [ 141.681753][ T44] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 141.847976][ T5958] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 141.852035][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 141.879071][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.913117][ T5958] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.921815][ T44] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 141.934868][ T5958] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 141.940184][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.951457][ T5958] usb 1-1: media controller created [ 141.989132][ T44] usb 5-1: config 0 descriptor?? [ 142.038937][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.100889][ T5958] az6027: usb out operation failed. (-71) [ 142.124408][ T5958] az6027: usb out operation failed. (-71) [ 142.162126][ T5958] stb0899_attach: Driver disabled by Kconfig [ 142.176400][ T5958] az6027: no front-end attached [ 142.176400][ T5958] [ 142.192969][ T5958] az6027: usb out operation failed. (-71) [ 142.213018][ T5958] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 142.253901][ T5958] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 142.291529][ T5958] dvb-usb: schedule remote query interval to 400 msecs. [ 142.336569][ T5958] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 142.383937][ T5958] usb 1-1: USB disconnect, device number 5 [ 142.446349][ T44] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 142.556886][ T5958] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 142.854529][ T5958] usb 5-1: USB disconnect, device number 8 [ 143.506538][ T7307] input: syz1 as /devices/virtual/input/input10 [ 143.541930][ T5958] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 143.704224][ T5958] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.713068][ T5958] usb 3-1: config 0 has no interface number 0 [ 143.719244][ T5958] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 143.749867][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.784440][ T5958] usb 3-1: config 0 descriptor?? [ 143.808381][ T5958] usb 3-1: selecting invalid altsetting 1 [ 143.836014][ T5958] dvb_ttusb_budget: ttusb_init_controller: error [ 143.866081][ T5958] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 144.135073][ T5958] DVB: Unable to find symbol cx22700_attach() [ 144.326803][ T5958] DVB: Unable to find symbol tda10046_attach() [ 144.351660][ T5958] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 144.402169][ T5958] usb 3-1: USB disconnect, device number 8 [ 144.743581][ T7337] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 144.908322][ T3025] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.050784][ T3025] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.140004][ T7344] netlink: 'syz.2.571': attribute type 10 has an invalid length. [ 145.254805][ T3025] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.331815][ T44] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 145.365839][ T7341] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 145.386286][ T7341] EXT4-fs (loop4): unable to read superblock [ 145.480382][ T3025] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.532442][ T44] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 145.551765][ T44] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 145.754034][ T5876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.763281][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.771027][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.780844][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.789918][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.914541][ T44] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 145.998129][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.073864][ T7345] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 146.110264][ T44] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.324486][ T3025] bridge_slave_1: left allmulticast mode [ 146.366070][ T3025] bridge_slave_1: left promiscuous mode [ 146.405918][ T3025] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.429883][ T44] usb 2-1: USB disconnect, device number 4 [ 146.443360][ T3025] bridge_slave_0: left promiscuous mode [ 146.451891][ T3025] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.082417][ T3025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.109063][ T3025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.120250][ T3025] bond0 (unregistering): Released all slaves [ 147.285113][ T7358] chnl_net:caif_netlink_parms(): no params data found [ 147.747042][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 147.774827][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 147.823973][ T5876] Bluetooth: hci3: command tx timeout [ 148.171839][ T7358] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.210384][ T7358] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.242838][ T7358] bridge_slave_0: entered allmulticast mode [ 148.267709][ T7358] bridge_slave_0: entered promiscuous mode [ 148.305463][ T7358] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.352345][ T7358] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.359623][ T7358] bridge_slave_1: entered allmulticast mode [ 148.395485][ T7358] bridge_slave_1: entered promiscuous mode [ 148.497128][ T3025] hsr_slave_0: left promiscuous mode [ 148.531929][ T3025] hsr_slave_1: left promiscuous mode [ 148.543457][ T3025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.571337][ T3025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.600074][ T3025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.629071][ T3025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.756031][ T7452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.608'. [ 148.779486][ T3025] veth1_macvtap: left promiscuous mode [ 148.786649][ T3025] veth0_macvtap: left promiscuous mode [ 148.804171][ T3025] veth1_vlan: left promiscuous mode [ 148.825088][ T3025] veth0_vlan: left promiscuous mode [ 148.941501][ T7456] netlink: 'syz.0.609': attribute type 16 has an invalid length. [ 148.969589][ T7456] netlink: 'syz.0.609': attribute type 3 has an invalid length. [ 149.008450][ T7456] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.609'. [ 149.418869][ T7465] exfat: Unknown parameter 'ÿÿÿ0xffffffffffffffff0x0000000000000000' [ 149.867022][ T3025] team0 (unregistering): Port device team_slave_1 removed [ 149.901844][ T5876] Bluetooth: hci3: command tx timeout [ 149.908953][ T3025] team0 (unregistering): Port device team_slave_0 removed [ 150.487184][ T7358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.525240][ T7358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.716886][ T7358] team0: Port device team_slave_0 added [ 150.736435][ T7358] team0: Port device team_slave_1 added [ 150.842657][ T7358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.858261][ T7358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.941007][ T7358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.983570][ T7358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.028932][ T7358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.104393][ T7358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.377561][ T7358] hsr_slave_0: entered promiscuous mode [ 151.407947][ T7358] hsr_slave_1: entered promiscuous mode [ 151.507949][ T3025] IPVS: stop unused estimator thread 0... [ 151.572799][ T7501] input: syz1 as /devices/virtual/input/input11 [ 151.983762][ T5876] Bluetooth: hci3: command tx timeout [ 152.384696][ T7358] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 152.425606][ T7358] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 152.473224][ T7358] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 152.513705][ T7358] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.790396][ T7358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.802004][ T7539] mmap: syz.4.637 (7539) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 152.854835][ T7358] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.884799][ T7266] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.892026][ T7266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.920005][ T7269] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.927276][ T7269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.247208][ T7358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.410436][ T7555] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 153.520149][ T7555] EXT4-fs (loop0): unable to read superblock [ 153.587234][ T7558] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.662572][ T7558] I/O error, dev loop4, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.713716][ T7558] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=7, location=7 [ 153.735309][ T7558] I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.771747][ T7558] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 153.814995][ T7558] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.843548][ T7558] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 153.873507][ T7558] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.915175][ T7358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.922335][ T44] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 153.927076][ T7558] I/O error, dev loop4, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.952382][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'. [ 153.958768][ T7558] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=7, location=7 [ 153.997186][ T7558] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.051911][ T7558] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 154.065495][ T5876] Bluetooth: hci3: command tx timeout [ 154.098244][ T7558] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.103971][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 154.131913][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.155333][ T44] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 154.158814][ T7558] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 154.181716][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.208211][ T44] usb 2-1: config 0 descriptor?? [ 154.222862][ T7565] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.248347][ T7558] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.288491][ T7558] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=7, location=7 [ 154.306720][ T7558] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 154.328724][ T7558] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 154.350280][ T7558] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=7, location=7 [ 154.426504][ T7558] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 154.438539][ T7558] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 154.512040][ T7558] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 154.660633][ T44] playstation 0003:054C:0BA0.0007: unknown main item tag 0x0 [ 154.693012][ T44] playstation 0003:054C:0BA0.0007: unknown main item tag 0x0 [ 154.749308][ T44] playstation 0003:054C:0BA0.0007: unknown main item tag 0x0 [ 154.787764][ T44] playstation 0003:054C:0BA0.0007: unknown main item tag 0x0 [ 154.812287][ T44] playstation 0003:054C:0BA0.0007: unknown main item tag 0x0 [ 154.877465][ T44] playstation 0003:054C:0BA0.0007: hidraw0: USB HID v1.01 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 154.987151][ T44] playstation 0003:054C:0BA0.0007: Invalid reportID received, expected 18 got 9 [ 155.022001][ T44] playstation 0003:054C:0BA0.0007: Failed to retrieve DualShock4 pairing info: -22 [ 155.063140][ T7358] veth0_vlan: entered promiscuous mode [ 155.071206][ T44] playstation 0003:054C:0BA0.0007: Failed to get MAC address from DualShock4 [ 155.110274][ T44] playstation 0003:054C:0BA0.0007: Failed to create dualshock4. [ 155.121458][ T7358] veth1_vlan: entered promiscuous mode [ 155.146428][ T44] playstation 0003:054C:0BA0.0007: probe with driver playstation failed with error -22 [ 155.183131][ T44] usb 2-1: USB disconnect, device number 5 [ 155.298781][ T7358] veth0_macvtap: entered promiscuous mode [ 155.348506][ T7358] veth1_macvtap: entered promiscuous mode [ 155.402317][ T7358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.429032][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 155.461195][ T7358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.497937][ T7269] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.526112][ T7269] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.556582][ T7269] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.567296][ T7269] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.780521][ T3025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.833528][ T3025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.941176][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.958182][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.662992][ T7668] input: syz1 as /devices/virtual/input/input12 [ 157.034191][ T5958] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 157.212058][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 157.226013][ T5958] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 157.255992][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.276252][ T5958] usb 1-1: Product: syz [ 157.296550][ T5958] usb 1-1: Manufacturer: syz [ 157.301198][ T5958] usb 1-1: SerialNumber: syz [ 157.332406][ T5958] usb 1-1: config 0 descriptor?? [ 157.364686][ T5958] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 157.971199][ T5958] gspca_sunplus: reg_r err -71 [ 157.977799][ T5958] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 158.024013][ T5958] usb 1-1: USB disconnect, device number 6 [ 158.437974][ T7729] blk_print_req_error: 7 callbacks suppressed [ 158.437994][ T7729] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 158.519669][ T7729] EXT4-fs (loop4): unable to read superblock [ 159.318176][ T7766] netlink: 'syz.0.707': attribute type 1 has an invalid length. [ 159.329047][ T7766] netlink: 224 bytes leftover after parsing attributes in process `syz.0.707'. [ 159.331720][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 159.540598][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 159.560160][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10168, setting to 1024 [ 159.616672][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 159.658650][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.710686][ T24] usb 2-1: config 0 descriptor?? [ 159.722744][ T7757] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.743974][ T24] hub 2-1:0.0: USB hub found [ 159.944100][ T24] hub 2-1:0.0: 1 port detected [ 160.145773][ T24] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 160.174850][ T24] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 160.208147][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 160.221860][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 160.263268][ T24] usb 2-1: USB disconnect, device number 6 [ 161.872446][ T30] audit: type=1326 audit(1758286323.550:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.2.733" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7e1d8ec29 code=0x0 [ 162.137379][ T7856] syz.1.735 uses obsolete (PF_INET,SOCK_PACKET) [ 162.857238][ T7886] netlink: 300 bytes leftover after parsing attributes in process `syz.4.746'. [ 163.689977][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.759'. [ 163.722071][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.759'. [ 164.067647][ T7948] input: syz1 as /devices/virtual/input/input13 [ 164.222880][ T7954] input: syz0 as /devices/virtual/input/input14 [ 164.366184][ T7959] program syz.1.772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.549461][ T7965] netlink: 40 bytes leftover after parsing attributes in process `syz.2.775'. [ 164.920031][ T7983] bond0: entered allmulticast mode [ 164.961834][ T7983] bond_slave_0: entered allmulticast mode [ 164.967624][ T7983] bond_slave_1: entered allmulticast mode [ 165.578192][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.788'. [ 165.607585][ T8000] netlink: 27 bytes leftover after parsing attributes in process `syz.5.788'. [ 166.503469][ T8033] bridge0: port 3(veth0_to_bridge) entered blocking state [ 166.523362][ T8033] bridge0: port 3(veth0_to_bridge) entered disabled state [ 166.537960][ T8033] veth0_to_bridge: entered allmulticast mode [ 166.546552][ T8033] veth0_to_bridge: entered promiscuous mode [ 166.556973][ T8033] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 166.571113][ T8033] bridge0: port 3(veth0_to_bridge) entered blocking state [ 166.578517][ T8033] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 166.779791][ T8043] netlink: 20 bytes leftover after parsing attributes in process `syz.5.808'. [ 167.285231][ T939] hid-generic 0005:15C2:5505.0008: unknown main item tag 0x0 [ 167.324953][ T939] hid-generic 0005:15C2:5505.0008: unknown main item tag 0x0 [ 167.353128][ T939] hid-generic 0005:15C2:5505.0008: item fetching failed at offset 2/3 [ 167.362199][ T939] hid-generic 0005:15C2:5505.0008: probe with driver hid-generic failed with error -22 [ 167.423693][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 167.436122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.448497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 167.460864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.473231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 167.485619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.498029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 167.510405][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.522810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 167.535106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.661709][ T5876] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 167.776002][ T7999] sp0: Synchronizing with TNC [ 168.137752][ T8093] netlink: 27 bytes leftover after parsing attributes in process `syz.0.830'. [ 169.380594][ T8113] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 169.431055][ T8113] CPU: 1 UID: 0 PID: 8113 Comm: syz.1.838 Not tainted syzkaller #0 PREEMPT(full) [ 169.431085][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 169.431111][ T8113] Call Trace: [ 169.431120][ T8113] [ 169.431131][ T8113] dump_stack_lvl+0x189/0x250 [ 169.431178][ T8113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.431206][ T8113] ? __pfx__printk+0x10/0x10 [ 169.431243][ T8113] ? kernfs_path_from_node+0x2f/0x290 [ 169.431274][ T8113] ? kernfs_path_from_node+0x250/0x290 [ 169.431301][ T8113] ? kernfs_path_from_node+0x2f/0x290 [ 169.431335][ T8113] sysfs_warn_dup+0x8e/0xa0 [ 169.431362][ T8113] sysfs_do_create_link_sd+0xc0/0x110 [ 169.431394][ T8113] device_add_class_symlinks+0x1cf/0x240 [ 169.431430][ T8113] device_add+0x475/0xb50 [ 169.431465][ T8113] wiphy_register+0x1c81/0x2aa0 [ 169.431511][ T8113] ? __pfx_wiphy_register+0x10/0x10 [ 169.431535][ T8113] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 169.431574][ T8113] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 169.431611][ T8113] ieee80211_register_hw+0x3442/0x40a0 [ 169.431672][ T8113] ? ieee80211_register_hw+0x13c1/0x40a0 [ 169.431712][ T8113] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 169.431746][ T8113] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 169.431787][ T8113] ? __hrtimer_setup+0x187/0x210 [ 169.431817][ T8113] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 169.431847][ T8113] mac80211_hwsim_new_radio+0x2f0e/0x5350 [ 169.431905][ T8113] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 169.431926][ T8113] ? trace_kmalloc+0x1f/0xd0 [ 169.431954][ T8113] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 169.431984][ T8113] ? __x64_sys_sendmsg+0x19b/0x260 [ 169.432008][ T8113] ? kstrndup+0xbf/0x160 [ 169.432043][ T8113] hwsim_new_radio_nl+0xea4/0x1b10 [ 169.432069][ T8113] ? __pfx___nla_validate_parse+0x10/0x10 [ 169.432131][ T8113] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 169.432162][ T8113] ? rcu_is_watching+0x15/0xb0 [ 169.432200][ T8113] ? __nla_parse+0x40/0x60 [ 169.432236][ T8113] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 169.432275][ T8113] genl_family_rcv_msg_doit+0x215/0x300 [ 169.432313][ T8113] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 169.432358][ T8113] ? bpf_lsm_capable+0x9/0x20 [ 169.432384][ T8113] ? security_capable+0x7e/0x2e0 [ 169.432419][ T8113] genl_rcv_msg+0x60e/0x790 [ 169.432455][ T8113] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.432482][ T8113] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 169.432522][ T8113] netlink_rcv_skb+0x208/0x470 [ 169.432541][ T8113] ? __lock_acquire+0xab9/0xd20 [ 169.432570][ T8113] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.432600][ T8113] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.432645][ T8113] ? down_read+0x1ad/0x2e0 [ 169.432672][ T8113] genl_rcv+0x28/0x40 [ 169.432697][ T8113] netlink_unicast+0x82f/0x9e0 [ 169.432741][ T8113] ? __pfx_netlink_unicast+0x10/0x10 [ 169.432776][ T8113] ? netlink_sendmsg+0x642/0xb30 [ 169.432795][ T8113] ? skb_put+0x11b/0x210 [ 169.432822][ T8113] netlink_sendmsg+0x805/0xb30 [ 169.432856][ T8113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.432882][ T8113] ? aa_sock_msg_perm+0xf1/0x1d0 [ 169.432913][ T8113] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 169.432935][ T8113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.432958][ T8113] __sock_sendmsg+0x21c/0x270 [ 169.432993][ T8113] ____sys_sendmsg+0x505/0x830 [ 169.433025][ T8113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.433062][ T8113] ? import_iovec+0x74/0xa0 [ 169.433090][ T8113] ___sys_sendmsg+0x21f/0x2a0 [ 169.433127][ T8113] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.433197][ T8113] ? __fget_files+0x2a/0x420 [ 169.433218][ T8113] ? __fget_files+0x3a0/0x420 [ 169.433253][ T8113] __x64_sys_sendmsg+0x19b/0x260 [ 169.433282][ T8113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.433328][ T8113] ? do_syscall_64+0xbe/0xfa0 [ 169.433353][ T8113] do_syscall_64+0xfa/0xfa0 [ 169.433372][ T8113] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.433391][ T8113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.433411][ T8113] ? clear_bhb_loop+0x60/0xb0 [ 169.433437][ T8113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.433458][ T8113] RIP: 0033:0x7f22d3d8ec29 [ 169.433485][ T8113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.433503][ T8113] RSP: 002b:00007f22d4b7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.433529][ T8113] RAX: ffffffffffffffda RBX: 00007f22d3fd5fa0 RCX: 00007f22d3d8ec29 [ 169.433544][ T8113] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 169.433556][ T8113] RBP: 00007f22d3e11e41 R08: 0000000000000000 R09: 0000000000000000 [ 169.433568][ T8113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.433580][ T8113] R13: 00007f22d3fd6038 R14: 00007f22d3fd5fa0 R15: 00007ffdb55cbe38 [ 169.433616][ T8113] [ 170.530599][ T8131] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 170.625620][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055c7cc00: rx timeout, send abort [ 170.635677][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055c7cc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 171.229875][ T8146] netlink: 'syz.0.853': attribute type 58 has an invalid length. [ 171.267333][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.853'. [ 171.418973][ T8142] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 171.465555][ T8142] EXT4-fs (loop2): unable to read superblock [ 171.544531][ T8142] netlink: 'syz.2.851': attribute type 4 has an invalid length. [ 172.432003][ C0] net_ratelimit: 6113 callbacks suppressed [ 172.432034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.432302][ T8167] netlink: 60 bytes leftover after parsing attributes in process `syz.2.860'. [ 172.438826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 172.472305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.484763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 172.498259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.510746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 172.524115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.536623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 172.550038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.562464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 173.002138][ T5947] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 173.220279][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'. [ 173.231170][ T5947] usb 6-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.275132][ T5947] usb 6-1: config 0 interface 0 has no altsetting 0 [ 173.291739][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.864'. [ 173.315125][ T5947] usb 6-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 173.404871][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.480297][ T5947] usb 6-1: config 0 descriptor?? [ 173.768488][ T5947] usbhid 6-1:0.0: can't add hid device: -71 [ 173.813520][ T5947] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 173.862236][ T5947] usb 6-1: USB disconnect, device number 2 [ 174.334107][ T8203] sp0: Synchronizing with TNC [ 175.882629][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 175.930840][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 175.984538][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.885'. [ 176.855076][ T5947] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 176.910160][ T8214] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.940301][ T8214] (syz.5.876,8214,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 176.951911][ T8214] (syz.5.876,8214,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 176.959681][ T8214] (syz.5.876,8214,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 176.971377][ T8214] (syz.5.876,8214,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 177.004184][ T8256] netlink: 'syz.4.894': attribute type 2 has an invalid length. [ 177.022095][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 177.038930][ T5947] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 177.088491][ T5947] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 177.119737][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.150133][ T5947] usb 3-1: Product: syz [ 177.154664][ T5947] usb 3-1: Manufacturer: syz [ 177.162308][ T5947] usb 3-1: SerialNumber: syz [ 177.207526][ T5947] usb 3-1: config 0 descriptor?? [ 177.233410][ T5947] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 177.253506][ T8261] netlink: 72 bytes leftover after parsing attributes in process `syz.0.897'. [ 177.281735][ T5947] usb 3-1: setting power ON [ 177.302038][ T5947] dvb-usb: bulk message failed: -22 (2/0) [ 177.342401][ T5947] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 177.388452][ T5947] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 177.418844][ T5947] usb 3-1: media controller created [ 177.430478][ T8250] dvb-usb: bulk message failed: -22 (3/0) [ 177.442245][ C0] net_ratelimit: 5322 callbacks suppressed [ 177.442263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.460571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 177.467071][ T8250] cxusb: i2c rd: len=4096 is too big! [ 177.467071][ T8250] [ 177.473803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.493149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 177.506365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.518843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 177.532052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.544438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 177.557708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.570141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 177.571753][ T8272] dvb-usb: bulk message failed: -22 (3/0) [ 177.604135][ T5947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.701879][ T8272] dvb-usb: bulk message failed: -22 (3/0) [ 177.709783][ T5947] usb 3-1: selecting invalid altsetting 6 [ 177.750760][ T5947] usb 3-1: digital interface selection failed (-22) [ 177.786692][ T5947] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 177.825927][ T5947] usb 3-1: setting power OFF [ 177.839179][ T5947] dvb-usb: bulk message failed: -22 (2/0) [ 177.852355][ T5947] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 177.887322][ T5947] (NULL device *): no alternate interface [ 178.017032][ T5947] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 178.046402][ T8281] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.072488][ T8281] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32 [ 178.091256][ T5947] usb 3-1: USB disconnect, device number 9 [ 178.536088][ T8293] kvm: user requested TSC rate below hardware speed [ 178.556722][ T8295] program syz.5.911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.077280][ T8312] netlink: 16 bytes leftover after parsing attributes in process `syz.5.917'. [ 179.671755][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 179.844546][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 179.872515][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.904935][ T24] usb 1-1: config 0 descriptor?? [ 179.928661][ T24] cp210x 1-1:0.0: cp210x converter detected [ 180.363126][ T24] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 180.574789][ T24] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 180.583313][ T24] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 180.595721][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 180.608125][ T24] usb 1-1: USB disconnect, device number 7 [ 180.621294][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 180.631525][ T24] cp210x 1-1:0.0: device disconnected [ 182.451981][ C0] net_ratelimit: 6908 callbacks suppressed [ 182.451997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.470211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.482792][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.495149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 182.508126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.520523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.533243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.545646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 182.558237][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.570614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.576832][ T8406] hfs: unable to change iocharset [ 185.551172][ T8436] input: syz0 as /devices/virtual/input/input16 [ 185.905586][ T8440] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.976592][ T8440] FAT-fs (loop2): unable to read boot sector [ 186.161314][ T8447] netlink: 40 bytes leftover after parsing attributes in process `syz.5.976'. [ 186.415989][ T8451] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 186.458340][ T8453] vlan2: entered allmulticast mode [ 186.488997][ T8456] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.560526][ T8456] FAT-fs (loop1): unable to read boot sector [ 187.462417][ C0] net_ratelimit: 7828 callbacks suppressed [ 187.462438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.481152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.494121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.506523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.519060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 187.531547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 187.545447][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.557908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.570801][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.583254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.944132][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.989'. [ 188.767756][ T8500] program syz.0.1000 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.075386][ T8504] gfs2: path_lookup on [ 189.075386][ T8504] returned error -2 [ 190.173841][ T8528] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1013'. [ 191.391752][ T8563] sp0: Synchronizing with TNC [ 191.592326][ T8563] [U] è [ 192.275229][ T8579] kvm: user requested TSC rate below hardware speed [ 192.472358][ C0] net_ratelimit: 7052 callbacks suppressed [ 192.472382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.490207][ C0] sched: DL replenish lagged too much [ 192.496191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.509199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.521654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.534095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 192.547237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 192.560935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.573433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.586349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.598791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.732075][ T5947] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 192.918722][ T5947] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.951733][ T5947] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.997898][ T5947] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 193.028822][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 193.068215][ T5947] usb 5-1: SerialNumber: syz [ 193.223609][ T8600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.309013][ T5947] usb 5-1: 0:2 : does not exist [ 193.411976][ T5947] usb 5-1: USB disconnect, device number 9 [ 194.295185][ T8619] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 195.644924][ T8651] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1068'. [ 196.396633][ T8664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.612202][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'. [ 196.824342][ T8668] team0: Port device team_slave_0 removed [ 197.302215][ T44] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 197.434634][ T8689] Oops: general protection fault, probably for non-canonical address 0xfbd5a5d5a0000003: 0000 [#1] SMP KASAN PTI [ 197.446574][ T8689] KASAN: maybe wild-memory-access in range [0xdead4ead00000018-0xdead4ead0000001f] [ 197.455885][ T8689] CPU: 1 UID: 0 PID: 8689 Comm: syz.5.1082 Not tainted syzkaller #0 PREEMPT(full) [ 197.465229][ T8689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 197.475306][ T8689] RIP: 0010:smc_diag_dump_proto+0x4c8/0x1ff0 [ 197.481334][ T8689] Code: 80 3c 2f 00 74 08 48 89 df e8 c4 c3 f0 f6 4c 8b 23 4d 85 e4 0f 84 26 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 99 c3 f0 f6 4d 8b 2c 24 49 83 c5 [ 197.481717][ C0] net_ratelimit: 6739 callbacks suppressed [ 197.481734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 197.500952][ T8689] RSP: 0018:ffffc9000d8d6f40 EFLAGS: 00010a06 [ 197.500975][ T8689] RAX: 1bd5a9d5a0000003 RBX: ffff888030358648 RCX: 0000000000080000 [ 197.500991][ T8689] RDX: ffffc90012639000 RSI: 0000000000000aae RDI: 0000000000000aaf [ 197.501005][ T8689] RBP: ffffc9000d8d72b0 R08: ffff88803035805f R09: 1ffff1100606b00b [ 197.501022][ T8689] R10: dffffc0000000000 R11: ffffed100606b00c R12: dead4ead00000018 [ 197.507952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.518820][ T8689] R13: dffffc0000000000 R14: ffff888030358000 R15: 1ffff1100606b0c9 [ 197.518839][ T8689] FS: 00007f8011eb86c0(0000) GS:ffff888125add000(0000) knlGS:0000000000000000 [ 197.518858][ T8689] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.518874][ T8689] CR2: 00007ffdb55cbf80 CR3: 0000000077bb0000 CR4: 00000000003526f0 [ 197.525307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.532902][ T8689] Call Trace: [ 197.532913][ T8689] [ 197.532936][ T8689] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 197.541427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.548867][ T8689] ? __lruvec_stat_mod_folio+0x6f/0x2e0 [ 197.548903][ T8689] ? __lruvec_stat_mod_folio+0x6f/0x2e0 [ 197.557180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.568765][ T8689] ? __phys_addr+0xd3/0x180 [ 197.568795][ T8689] ? __kasan_kmalloc_large+0x85/0xa0 [ 197.577117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 197.585694][ T8689] ? rcu_is_watching+0x15/0xb0 [ 197.592598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:51:40:af:76:6e, vlan:0) [ 197.600269][ T8689] ? rcu_is_watching+0x15/0xb0 [ 197.613292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.615522][ T8689] ? trace_kmalloc+0x1f/0xd0 [ 197.618778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.624106][ T8689] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 197.624144][ T8689] ? __alloc_skb+0x142/0x2d0 [ 197.636654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.641557][ T8689] ? __build_skb_around+0x262/0x3f0 [ 197.758909][ T8689] smc_diag_dump+0x59/0xa0 [ 197.763353][ T8689] netlink_dump+0x6e4/0xe90 [ 197.767888][ T8689] ? __pfx_netlink_dump+0x10/0x10 [ 197.772936][ T8689] ? __netlink_lookup+0x752/0x810 [ 197.777991][ T8689] ? netlink_lookup+0x30/0x200 [ 197.782862][ T8689] ? netlink_lookup+0x30/0x200 [ 197.787634][ T8689] ? netlink_lookup+0x30/0x200 [ 197.792405][ T8689] __netlink_dump_start+0x5cb/0x7e0 [ 197.797629][ T8689] smc_diag_handler_dump+0x178/0x210 [ 197.802955][ T8689] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 197.808802][ T8689] ? __pfx_smc_diag_dump+0x10/0x10 [ 197.814042][ T8689] ? sock_diag_lock_handler+0x19/0x290 [ 197.819523][ T8689] ? sock_diag_lock_handler+0x19/0x290 [ 197.825011][ T8689] sock_diag_rcv_msg+0x4cc/0x600 [ 197.829995][ T8689] netlink_rcv_skb+0x208/0x470 [ 197.834775][ T8689] ? rcu_is_watching+0x15/0xb0 [ 197.839564][ T8689] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 197.845047][ T8689] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.850451][ T8689] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.855681][ T8689] netlink_unicast+0x82f/0x9e0 [ 197.860476][ T8689] ? __pfx_netlink_unicast+0x10/0x10 [ 197.865800][ T8689] ? netlink_sendmsg+0x642/0xb30 [ 197.870767][ T8689] ? skb_put+0x11b/0x210 [ 197.875043][ T8689] netlink_sendmsg+0x805/0xb30 [ 197.879832][ T8689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.885136][ T8689] ? aa_sock_msg_perm+0xf1/0x1d0 [ 197.890122][ T8689] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.895427][ T8689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.900725][ T8689] __sock_sendmsg+0x21c/0x270 [ 197.905425][ T8689] ____sys_sendmsg+0x505/0x830 [ 197.910483][ T8689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.915804][ T8689] ? import_iovec+0x74/0xa0 [ 197.920323][ T8689] ___sys_sendmsg+0x21f/0x2a0 [ 197.925015][ T8689] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.930261][ T8689] ? __fget_files+0x2a/0x420 [ 197.934903][ T8689] ? __fget_files+0x3a0/0x420 [ 197.939594][ T8689] __x64_sys_sendmsg+0x19b/0x260 [ 197.944555][ T8689] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.950062][ T8689] ? do_syscall_64+0xbe/0xfa0 [ 197.954762][ T8689] do_syscall_64+0xfa/0xfa0 [ 197.959290][ T8689] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.964505][ T8689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.970588][ T8689] ? clear_bhb_loop+0x60/0xb0 [ 197.975282][ T8689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.981199][ T8689] RIP: 0033:0x7f8010f8ec29 [ 197.985635][ T8689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.005351][ T8689] RSP: 002b:00007f8011eb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.013789][ T8689] RAX: ffffffffffffffda RBX: 00007f80111d6090 RCX: 00007f8010f8ec29 [ 198.021776][ T8689] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000003 [ 198.029770][ T8689] RBP: 00007f8011011e41 R08: 0000000000000000 R09: 0000000000000000 [ 198.037756][ T8689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.045741][ T8689] R13: 00007f80111d6128 R14: 00007f80111d6090 R15: 00007fff8aedbd98 [ 198.053741][ T8689] [ 198.056767][ T8689] Modules linked in: [ 198.062378][ T8689] ---[ end trace 0000000000000000 ]--- [ 198.067883][ T8689] RIP: 0010:smc_diag_dump_proto+0x4c8/0x1ff0 [ 198.076425][ T8689] Code: 80 3c 2f 00 74 08 48 89 df e8 c4 c3 f0 f6 4c 8b 23 4d 85 e4 0f 84 26 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 99 c3 f0 f6 4d 8b 2c 24 49 83 c5 [ 198.096858][ T8689] RSP: 0018:ffffc9000d8d6f40 EFLAGS: 00010a06 [ 198.103338][ T8689] RAX: 1bd5a9d5a0000003 RBX: ffff888030358648 RCX: 0000000000080000 [ 198.111339][ T8689] RDX: ffffc90012639000 RSI: 0000000000000aae RDI: 0000000000000aaf [ 198.119536][ T8689] RBP: ffffc9000d8d72b0 R08: ffff88803035805f R09: 1ffff1100606b00b [ 198.128065][ T8689] R10: dffffc0000000000 R11: ffffed100606b00c R12: dead4ead00000018 [ 198.136094][ T8689] R13: dffffc0000000000 R14: ffff888030358000 R15: 1ffff1100606b0c9 [ 198.144121][ T8689] FS: 00007f8011eb86c0(0000) GS:ffff888125add000(0000) knlGS:0000000000000000 [ 198.153493][ T8689] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.160103][ T8689] CR2: 00007ffdb55cbf80 CR3: 0000000077bb0000 CR4: 00000000003526f0 [ 198.168396][ T8689] Kernel panic - not syncing: Fatal exception [ 198.174781][ T8689] Kernel Offset: disabled [ 198.179106][ T8689] Rebooting in 86400 seconds..