last executing test programs: 3.018568619s ago: executing program 0 (id=957): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x1000) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x66001) 2.878243264s ago: executing program 0 (id=959): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048804}, 0x840) 2.731537795s ago: executing program 0 (id=963): setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x2000000000000000, 0xfffffffffffffffb}, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.379645321s ago: executing program 0 (id=971): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.132186132s ago: executing program 2 (id=976): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x4, 0x0, &(0x7f0000000240)) 2.016965914s ago: executing program 2 (id=978): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000050000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 2.00875103s ago: executing program 4 (id=979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800800044000000010080002400000001105000300b20000000900020073797a32"], 0x80}}, 0x24000002) 1.894206058s ago: executing program 2 (id=981): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) 1.661004753s ago: executing program 4 (id=985): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) 1.542036826s ago: executing program 2 (id=987): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000002c0)=[{0xee, 0x9010, 0x1, &(0x7f00000000c0)="d5"}, {0x640c, 0x10, 0x0, 0x0}], 0x2}) 1.38501947s ago: executing program 4 (id=990): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000040)={0xdb, 0x0, 0x1800000000000}) 1.094118419s ago: executing program 4 (id=994): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xf2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @NDA_VLAN={0x6, 0x5, 0x6}]}, 0x30}, 0x1, 0x1000000}, 0x0) 1.093329542s ago: executing program 1 (id=995): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000b40)=""/4097, 0x1001}, {&(0x7f0000004580)=""/4081, 0xff1}, {&(0x7f0000003540)=""/4115, 0x1013}, {&(0x7f0000000280)=""/115, 0x73}, {&(0x7f0000000a80)=""/179, 0xb3}, {&(0x7f0000000840)=""/197, 0xc5}, {&(0x7f0000000500)=""/176, 0xb0}], 0x7}, 0x10100) 1.054803748s ago: executing program 3 (id=996): creat(&(0x7f00000002c0)='./file0\x00', 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) 1.030610096s ago: executing program 1 (id=997): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000200)=0x3, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000000)) 906.277157ms ago: executing program 4 (id=998): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0xa1, &(0x7f0000000200)}, 0x14) 832.831064ms ago: executing program 3 (id=999): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 832.273962ms ago: executing program 1 (id=1000): memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x18\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000001000000000000000000000000000000fdffffffffffffffdd02040040000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b00000000000000fc010000000000000000000000000001000000000000ff000000000000000000000000000000000000000000000000000000000100000000320000000000000000000000000000000000fffffffffffffeffffff0000000000000000000000000700000000000000000000000000000000000001000000003c00000002000000000000000000000000000000000000000100000001030000000000000000000009000000ff020000000000000000000000000001000000003200000002"], 0x23c}}, 0x8000000) 830.1861ms ago: executing program 4 (id=1001): syz_usb_connect(0x3, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000db168920402000d92ca9010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x5, 0x1, 0x0}) 777.269282ms ago: executing program 3 (id=1002): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 593.010785ms ago: executing program 0 (id=1003): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80d00, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe}}, './file0\x00'}) 592.903731ms ago: executing program 1 (id=1004): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b00000007000000040000000200000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp6, 0x1}, 0x20) 561.125588ms ago: executing program 3 (id=1005): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0xfffffeda) read$watch_queue(r0, &(0x7f0000000000)=""/189, 0xbd) 437.702129ms ago: executing program 1 (id=1006): unshare(0x24020400) r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, 0x0) 320.964278ms ago: executing program 3 (id=1007): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x40, 0x67, 0xa}, [@NDA_LLADDR={0xa, 0x2, @random="b1da983b821b"}]}, 0x28}, 0x1, 0x0, 0x0, 0x8d1}, 0x8000) 320.803874ms ago: executing program 0 (id=1008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a300000000008000340000000010900020073"], 0x98}}, 0x0) 270.07192ms ago: executing program 3 (id=1009): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) 181.965182ms ago: executing program 2 (id=1010): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x40000) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x22, 0x0, 0xa, 0x8, 0x0, 0x81}) 97.427071ms ago: executing program 1 (id=1011): r0 = syz_usbip_server_init(0x1) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902"], 0x0) write$usbip_server(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000300000001"], 0xff2f) 0s ago: executing program 2 (id=1012): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000540001002bbd70000200000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="000202007f"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. [ 65.970049][ T5777] cgroup: Unknown subsys name 'net' [ 66.211011][ T5777] cgroup: Unknown subsys name 'cpuset' [ 66.267727][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.816220][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.973545][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.975689][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.977468][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.980570][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.981757][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.982551][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.988294][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.014625][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.021346][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.022099][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.055637][ T5110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.058278][ T5110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.058935][ T5110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.061079][ T5110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.063134][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.084182][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.091568][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.092518][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.093491][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.097536][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.193108][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.194413][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.195110][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.200286][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.201138][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.846807][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 70.896933][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 70.939795][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 70.985270][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 71.022491][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 71.199347][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.200421][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.200533][ T5790] bridge_slave_0: entered allmulticast mode [ 71.201956][ T5790] bridge_slave_0: entered promiscuous mode [ 71.246077][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.246166][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.264848][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.264956][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.265081][ T5791] bridge_slave_0: entered allmulticast mode [ 71.266462][ T5791] bridge_slave_0: entered promiscuous mode [ 71.271199][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.271309][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.271464][ T5790] bridge_slave_1: entered allmulticast mode [ 71.273804][ T5790] bridge_slave_1: entered promiscuous mode [ 71.324279][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.324382][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.324483][ T5791] bridge_slave_1: entered allmulticast mode [ 71.325772][ T5791] bridge_slave_1: entered promiscuous mode [ 71.347271][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.347383][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.347889][ T5801] bridge_slave_0: entered allmulticast mode [ 71.350239][ T5801] bridge_slave_0: entered promiscuous mode [ 71.410490][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.410620][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.410765][ T5801] bridge_slave_1: entered allmulticast mode [ 71.412350][ T5801] bridge_slave_1: entered promiscuous mode [ 71.449910][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.450045][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.450245][ T5800] bridge_slave_0: entered allmulticast mode [ 71.452092][ T5800] bridge_slave_0: entered promiscuous mode [ 71.473748][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.494068][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.494146][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.494236][ T5806] bridge_slave_0: entered allmulticast mode [ 71.495535][ T5806] bridge_slave_0: entered promiscuous mode [ 71.496956][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.498332][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.498490][ T5800] bridge_slave_1: entered allmulticast mode [ 71.501342][ T5800] bridge_slave_1: entered promiscuous mode [ 71.506679][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.511830][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.570158][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.572512][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.572711][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.572970][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.573434][ T5806] bridge_slave_1: entered allmulticast mode [ 71.574773][ T5806] bridge_slave_1: entered promiscuous mode [ 71.628376][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.650743][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.652610][ T5790] team0: Port device team_slave_0 added [ 71.694579][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.696087][ T5790] team0: Port device team_slave_1 added [ 71.698387][ T5791] team0: Port device team_slave_0 added [ 71.720152][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.751495][ T5791] team0: Port device team_slave_1 added [ 72.038742][ T5110] Bluetooth: hci1: command tx timeout [ 72.053277][ T5110] Bluetooth: hci0: command tx timeout [ 72.061494][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.063619][ T5801] team0: Port device team_slave_0 added [ 72.117205][ T5110] Bluetooth: hci3: command tx timeout [ 72.117215][ T5799] Bluetooth: hci2: command tx timeout [ 72.119507][ T5801] team0: Port device team_slave_1 added [ 72.120975][ T5800] team0: Port device team_slave_0 added [ 72.122111][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.122122][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.122143][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.180814][ T5800] team0: Port device team_slave_1 added [ 72.181728][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.181740][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.181763][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.183358][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.183377][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.183400][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.188578][ T5806] team0: Port device team_slave_0 added [ 72.225946][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.225959][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.225982][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.230420][ T5806] team0: Port device team_slave_1 added [ 72.243220][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.243232][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.243255][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.277156][ T5110] Bluetooth: hci4: command tx timeout [ 72.296764][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.296777][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.296800][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.300474][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.300487][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.300509][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.317693][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.317705][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.317728][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.390502][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.390517][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.390540][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.451428][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.451443][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.451467][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.463231][ T5790] hsr_slave_0: entered promiscuous mode [ 72.464559][ T5790] hsr_slave_1: entered promiscuous mode [ 72.477553][ T5791] hsr_slave_0: entered promiscuous mode [ 72.478760][ T5791] hsr_slave_1: entered promiscuous mode [ 72.479674][ T5791] debugfs: 'hsr0' already exists in 'hsr' [ 72.479775][ T5791] Cannot create hsr debugfs directory [ 72.539982][ T5801] hsr_slave_0: entered promiscuous mode [ 72.541149][ T5801] hsr_slave_1: entered promiscuous mode [ 72.541967][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 72.541987][ T5801] Cannot create hsr debugfs directory [ 72.633123][ T5800] hsr_slave_0: entered promiscuous mode [ 72.634352][ T5800] hsr_slave_1: entered promiscuous mode [ 72.635244][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 72.635264][ T5800] Cannot create hsr debugfs directory [ 72.718210][ T5806] hsr_slave_0: entered promiscuous mode [ 72.718914][ T5806] hsr_slave_1: entered promiscuous mode [ 72.719407][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 72.719426][ T5806] Cannot create hsr debugfs directory [ 73.544819][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.564938][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.602113][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.651083][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.735851][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.768377][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.802154][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.854281][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.946829][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.983977][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.003675][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.054243][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.117149][ T5110] Bluetooth: hci0: command tx timeout [ 74.117178][ T5110] Bluetooth: hci1: command tx timeout [ 74.167334][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.197265][ T5799] Bluetooth: hci3: command tx timeout [ 74.197293][ T5799] Bluetooth: hci2: command tx timeout [ 74.237798][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.295022][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.326916][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.367879][ T5799] Bluetooth: hci4: command tx timeout [ 74.428681][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.428981][ T5806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.483721][ T5806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.512030][ T5806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.546530][ T5806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.618083][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.642524][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.658221][ T1494] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.660230][ T1494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.695813][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.695938][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.744773][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.777485][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.777579][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.796078][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.820251][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.820434][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.880141][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.886647][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.915356][ T1494] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.915917][ T1494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.968175][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.977681][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.014313][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.058711][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.059001][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.090673][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.120837][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.121028][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.192401][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.225146][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.225288][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.276964][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.289060][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.317726][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.514932][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.610201][ T5790] veth0_vlan: entered promiscuous mode [ 75.673855][ T5790] veth1_vlan: entered promiscuous mode [ 75.710122][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.819143][ T5791] veth0_vlan: entered promiscuous mode [ 75.850217][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.858314][ T5790] veth0_macvtap: entered promiscuous mode [ 75.860832][ T5791] veth1_vlan: entered promiscuous mode [ 75.889902][ T5790] veth1_macvtap: entered promiscuous mode [ 75.921615][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.958459][ T5801] veth0_vlan: entered promiscuous mode [ 75.988997][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.011844][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.031449][ T5801] veth1_vlan: entered promiscuous mode [ 76.074070][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.080449][ T5791] veth0_macvtap: entered promiscuous mode [ 76.088833][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.105859][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.115924][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.133696][ T5791] veth1_macvtap: entered promiscuous mode [ 76.197275][ T5799] Bluetooth: hci1: command tx timeout [ 76.197304][ T5799] Bluetooth: hci0: command tx timeout [ 76.266047][ T5806] veth0_vlan: entered promiscuous mode [ 76.277490][ T5110] Bluetooth: hci2: command tx timeout [ 76.279030][ T5110] Bluetooth: hci3: command tx timeout [ 76.369085][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.388881][ T5801] veth0_macvtap: entered promiscuous mode [ 76.417352][ T5806] veth1_vlan: entered promiscuous mode [ 76.429735][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.437417][ T5110] Bluetooth: hci4: command tx timeout [ 76.470325][ T5801] veth1_macvtap: entered promiscuous mode [ 76.511477][ T203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.511500][ T203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.515520][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.539435][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.551620][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.565736][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.666753][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.692970][ T5800] veth0_vlan: entered promiscuous mode [ 76.740331][ T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.740347][ T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.755045][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.820658][ T5806] veth0_macvtap: entered promiscuous mode [ 76.836157][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.858112][ T5800] veth1_vlan: entered promiscuous mode [ 76.861606][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.865840][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.875373][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.884316][ T5806] veth1_macvtap: entered promiscuous mode [ 77.037835][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.037852][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.136880][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.186049][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.194825][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.194842][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.231571][ T5800] veth0_macvtap: entered promiscuous mode [ 77.233383][ T1018] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.233604][ T1018] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.233813][ T1018] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.234067][ T1018] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.335257][ T5800] veth1_macvtap: entered promiscuous mode [ 77.433383][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.433396][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.567893][ T5917] tmpfs: Bad value for 'mpol' [ 77.686140][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.744900][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.787164][ T1471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.787183][ T1471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.881598][ T1018] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.883315][ T1018] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.888210][ T1018] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.898686][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.898705][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.927185][ T1018] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.067987][ T1471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.068005][ T1471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.279593][ T5799] Bluetooth: hci1: command tx timeout [ 78.279639][ T5110] Bluetooth: hci0: command tx timeout [ 78.373541][ T5110] Bluetooth: hci3: command tx timeout [ 78.373571][ T5110] Bluetooth: hci2: command tx timeout [ 78.384232][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.384249][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.530067][ T5799] Bluetooth: hci4: command tx timeout [ 78.655626][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.655645][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.861056][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 78.920631][ T5955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23'. [ 78.995701][ T5882] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.143657][ T37] audit: type=1326 audit(1774037306.883:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5958 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac317c799 code=0x7ffc0000 [ 79.177097][ T37] audit: type=1326 audit(1774037306.923:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5958 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac317c799 code=0x7ffc0000 [ 79.177379][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 79.203540][ T5882] usb 4-1: unable to get BOS descriptor or descriptor too short [ 79.221234][ T5882] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.221258][ T5882] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.240963][ T5882] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 79.240991][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.241009][ T5882] usb 4-1: Product: syz [ 79.241023][ T5882] usb 4-1: Manufacturer: syz [ 79.241037][ T5882] usb 4-1: SerialNumber: syz [ 79.262494][ T37] audit: type=1326 audit(1774037307.013:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5958 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7feac317c799 code=0x7ffc0000 [ 79.262538][ T37] audit: type=1326 audit(1774037307.013:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5958 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac317c799 code=0x7ffc0000 [ 79.262575][ T37] audit: type=1326 audit(1774037307.013:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5958 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac317c799 code=0x7ffc0000 [ 79.743583][ T5882] usb 4-1: cannot find UAC_HEADER [ 79.894492][ T5976] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 80.085165][ T5882] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 80.131359][ T5882] usb 4-1: USB disconnect, device number 2 [ 80.305099][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.671711][ T6001] bridge1: entered allmulticast mode [ 80.806179][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'. [ 80.875327][ T6014] cgroup: No subsys list or none specified [ 81.257165][ T6028] netlink: 168 bytes leftover after parsing attributes in process `syz.3.55'. [ 81.522060][ T10] cfg80211: failed to load regulatory.db [ 81.940259][ T6062] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 81.940283][ T6062] bond0: (slave lo): Error: Device can not be enslaved while up [ 83.088715][ T6109] netlink: 168 bytes leftover after parsing attributes in process `syz.1.94'. [ 83.712232][ T6137] netlink: 'syz.4.107': attribute type 3 has an invalid length. [ 83.856589][ T6144] netlink: 'syz.1.111': attribute type 5 has an invalid length. [ 84.087233][ T5875] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 84.249027][ T5875] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.252729][ T5875] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 84.252756][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 84.252777][ T5875] usb 5-1: Product: syz [ 84.252791][ T5875] usb 5-1: Manufacturer: syz [ 84.252804][ T5875] usb 5-1: SerialNumber: syz [ 84.269217][ T6162] netlink: 'syz.2.119': attribute type 21 has an invalid length. [ 84.287136][ T826] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.328360][ T5875] usb 5-1: config 0 descriptor?? [ 84.343976][ T5875] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 84.344026][ T5875] pctv452e: pctv452e_power_ctrl: 1 [ 84.344026][ T5875] [ 84.344073][ T5875] usb 5-1: selecting invalid altsetting 3 [ 84.344087][ T5875] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 84.344087][ T5875] [ 84.346234][ T5875] dvb-usb: bulk message failed: -22 (5/0) [ 84.409437][ T5875] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 84.433307][ T5875] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 84.444487][ T826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.444518][ T826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.444539][ T826] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.444579][ T826] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.444600][ T826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.458974][ T826] usb 1-1: config 0 descriptor?? [ 84.478954][ T826] hub 1-1:0.0: USB hub found [ 84.615016][ T37] audit: type=1326 audit(1774037312.363:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac317c799 code=0x7ffc0000 [ 84.624124][ T37] audit: type=1326 audit(1774037312.373:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac317c799 code=0x7ffc0000 [ 84.633169][ T37] audit: type=1326 audit(1774037312.383:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7feac317d589 code=0x7ffc0000 [ 84.637780][ T37] audit: type=1326 audit(1774037312.383:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7feac31394fb code=0x7ffc0000 [ 84.640851][ T37] audit: type=1326 audit(1774037312.393:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7feac3138bec code=0x7ffc0000 [ 84.644534][ T37] audit: type=1326 audit(1774037312.393:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac317c799 code=0x7ffc0000 [ 84.644579][ T37] audit: type=1326 audit(1774037312.393:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7feac3138c4e code=0x7ffc0000 [ 84.649535][ T37] audit: type=1326 audit(1774037312.403:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feac317c42b code=0x7ffc0000 [ 84.651210][ T37] audit: type=1326 audit(1774037312.393:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac317c799 code=0x7ffc0000 [ 84.661394][ T37] audit: type=1326 audit(1774037312.413:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7feac317c799 code=0x7ffc0000 [ 84.674213][ T10] usb 5-1: USB disconnect, device number 2 [ 84.719173][ T826] hub 1-1:0.0: 9 ports detected [ 84.719924][ T826] hub 1-1:0.0: insufficient power available to use all downstream ports [ 84.924840][ T826] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 84.924864][ T826] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 84.994814][ T826] usb 1-1: USB disconnect, device number 2 [ 85.117797][ T6181] netlink: 'syz.3.129': attribute type 1 has an invalid length. [ 85.566507][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'. [ 85.566543][ T6191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.134'. [ 85.566558][ T6191] netlink: 540 bytes leftover after parsing attributes in process `syz.4.134'. [ 85.748651][ T6200] netlink: 256 bytes leftover after parsing attributes in process `syz.1.137'. [ 87.554420][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.188'. [ 87.737214][ T5795] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 87.923529][ T5795] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.923583][ T5795] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 87.923608][ T5795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 87.923634][ T5795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 87.923656][ T5795] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 87.926078][ T5795] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 87.926104][ T5795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 87.926124][ T5795] usb 2-1: Product: syz [ 87.926137][ T5795] usb 2-1: Manufacturer: syz [ 87.926151][ T5795] usb 2-1: SerialNumber: syz [ 87.995376][ T6317] netlink: 40 bytes leftover after parsing attributes in process `syz.0.197'. [ 88.074793][ T5795] usb 2-1: config 0 descriptor?? [ 88.337132][ T5795] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 88.337157][ T5795] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 88.346533][ T6331] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 88.537209][ T5795] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 88.537233][ T5795] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 88.537501][ T5795] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 88.583199][ T5795] usb 2-1: USB disconnect, device number 2 [ 88.987270][ T6356] netlink: 'syz.2.214': attribute type 10 has an invalid length. [ 89.025310][ T6356] team0: Device xfrm0 is of different type [ 89.041075][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.216'. [ 89.041113][ T6360] netlink: 60 bytes leftover after parsing attributes in process `syz.3.216'. [ 89.480062][ T6378] netlink: 60 bytes leftover after parsing attributes in process `syz.1.226'. [ 89.680500][ T6386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.850980][ T36] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.019952][ T36] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 90.019982][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.020002][ T36] usb 2-1: Product: syz [ 90.020015][ T36] usb 2-1: Manufacturer: syz [ 90.020038][ T36] usb 2-1: SerialNumber: syz [ 90.097500][ T36] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 90.215239][ T5875] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 90.647119][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.669885][ T5795] usb 2-1: USB disconnect, device number 3 [ 90.802701][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 90.803967][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 24 [ 90.806276][ T10] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 90.806303][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.806322][ T10] usb 4-1: Product: syz [ 90.806336][ T10] usb 4-1: Manufacturer: syz [ 90.806350][ T10] usb 4-1: SerialNumber: syz [ 90.821292][ T6414] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 90.886914][ T6430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.252'. [ 90.886939][ T6430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.252'. [ 91.068533][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 91.068602][ T10] usb 4-1: MIDIStreaming interface descriptor not found [ 91.126291][ T6438] netlink: 'syz.0.256': attribute type 1 has an invalid length. [ 91.321046][ T5875] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 91.321557][ T5875] ath9k_htc: Failed to initialize the device [ 91.326421][ T10] usb 4-1: USB disconnect, device number 3 [ 91.331758][ T5795] usb 2-1: ath9k_htc: USB layer deinitialized [ 91.468927][ T6450] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 91.997203][ T36] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.027833][ T6474] overlayfs: missing 'workdir' [ 92.147135][ T36] usb 2-1: Using ep0 maxpacket: 8 [ 92.150335][ T36] usb 2-1: unable to get BOS descriptor or descriptor too short [ 92.151636][ T36] usb 2-1: config 128 has an invalid interface number: 4 but max is 0 [ 92.151659][ T36] usb 2-1: config 128 has an invalid interface association descriptor of length 2, skipping [ 92.151676][ T36] usb 2-1: config 128 has no interface number 0 [ 92.151719][ T36] usb 2-1: config 128 interface 4 altsetting 8 endpoint 0xA has an invalid bInterval 128, changing to 11 [ 92.151746][ T36] usb 2-1: config 128 interface 4 has no altsetting 0 [ 92.155131][ T36] usb 2-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=d7.04 [ 92.155156][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.155173][ T36] usb 2-1: Product: syz [ 92.155185][ T36] usb 2-1: Manufacturer: syz [ 92.155198][ T36] usb 2-1: SerialNumber: syz [ 92.583101][ T36] usb 2-1: USB disconnect, device number 4 [ 92.636592][ T6499] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.451090][ T6538] netlink: 164 bytes leftover after parsing attributes in process `syz.1.304'. [ 93.711440][ T6550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.309'. [ 94.000155][ T6562] netlink: 'syz.3.313': attribute type 11 has an invalid length. [ 94.000267][ T6562] netlink: 448 bytes leftover after parsing attributes in process `syz.3.313'. [ 94.227096][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.397051][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 94.399148][ T10] usb 3-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 94.399174][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.418415][ T10] usb 3-1: config 0 descriptor?? [ 94.449197][ T10] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 94.455547][ T6578] ALSA: mixer_oss: invalid OSS volume '' [ 94.455571][ T6578] ALSA: mixer_oss: invalid OSS volume '@%F¼0ùoºŸ³~¬Š¯%òìòåù‹@ô9yÿI'‰ÈS' [ 94.455581][ T6578] ALSA: mixer_oss: invalid OSS volume ')' [ 94.455592][ T6578] ALSA: mixer_oss: invalid OSS volume ']t¾Ô¢»üÅT=ÒJ@Û|õU' [ 94.455604][ T6578] ALSA: mixer_oss: invalid OSS volume 'NXmß<ݱ‘k!+Äsù(xžëäéÜÉëÀŒo¶' [ 94.455626][ T6578] ALSA: mixer_oss: invalid OSS volume 'Á'Õ¤Um†åDÕ‡‘tá(–5ˆ¸Ó«8åëP þh' [ 94.455677][ T6578] ALSA: mixer_oss: invalid OSS volume 'CÐ-–/:áNjfK(Ñ»QIr"«ƒ…ÿЮLÕæÔ' [ 94.455695][ T6578] ALSA: mixer_oss: invalid OSS volume 'c„|AçÉðìÚíM Ç0'Å™h]žÿœ‹9h-Ýà' [ 94.455710][ T6578] ALSA: mixer_oss: invalid OSS volume '›ï±s¾©RË¥_”5ªb¬2×´txV'%)Þr' [ 94.455732][ T6578] ALSA: mixer_oss: invalid OSS volume 'sÿ¢¸jØqX”aòMêÐ' [ 94.455752][ T6578] ALSA: mixer_oss: invalid OSS volume '«9@PqEÑf¨ÒAº¤msí¶5\äèÖÙ±g' [ 94.455764][ T6578] ALSA: mixer_oss: invalid OSS volume 'Ï«;\²(ž–¸a@ªõ½·Z¼¯ùnn¿5!c«ýëÓ' [ 94.455772][ T6578] ALSA: mixer_oss: invalid OSS volume '‚ü¼ú„ÇÂçQi-½' [ 94.644529][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 94.655691][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 94.668242][ T10] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 94.668742][ T10] usb 3-1: media controller created [ 94.722776][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.897284][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 94.897305][ T10] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 94.897870][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 94.897880][ T10] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 94.907193][ T10] usb 3-1: USB disconnect, device number 2 [ 95.024493][ T10] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 95.228856][ T6596] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 95.567511][ T6611] netlink: 'syz.3.339': attribute type 10 has an invalid length. [ 96.276674][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'. [ 96.774566][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 96.774583][ T37] audit: type=1326 audit(1774037324.523:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6652 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1897f7c799 code=0x7ffc0000 [ 96.774625][ T37] audit: type=1326 audit(1774037324.523:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6652 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1897f7c799 code=0x7ffc0000 [ 96.827194][ T37] audit: type=1326 audit(1774037324.563:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6652 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f1897f7c799 code=0x7ffc0000 [ 96.827302][ T37] audit: type=1326 audit(1774037324.563:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6652 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1897f7c799 code=0x7ffc0000 [ 96.827342][ T37] audit: type=1326 audit(1774037324.563:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6652 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1897f7c799 code=0x7ffc0000 [ 97.047321][ T6661] netlink: 36 bytes leftover after parsing attributes in process `syz.1.364'. [ 97.167864][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.366'. [ 97.455559][ T6684] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.960465][ T6708] netlink: 11 bytes leftover after parsing attributes in process `syz.1.387'. [ 97.960493][ T6708] netlink: 11 bytes leftover after parsing attributes in process `syz.1.387'. [ 98.142350][ T6722] openvswitch: netlink: IP tunnel dst address not specified [ 98.365726][ T6730] netlink: 'syz.1.399': attribute type 3 has an invalid length. [ 98.544734][ T6740] netlink: 40 bytes leftover after parsing attributes in process `syz.3.402'. [ 98.545757][ T6740] veth1_vlan: entered allmulticast mode [ 98.562987][ T6740] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 99.059125][ T37] audit: type=1326 audit(1774037326.803:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6766 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1897f7c799 code=0x7ffc0000 [ 99.059174][ T37] audit: type=1326 audit(1774037326.813:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6766 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1897f7c799 code=0x7ffc0000 [ 99.071106][ T37] audit: type=1326 audit(1774037326.823:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6766 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f1897f7c799 code=0x7ffc0000 [ 99.071150][ T37] audit: type=1326 audit(1774037326.823:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6766 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1897f7c799 code=0x7ffc0000 [ 99.071188][ T37] audit: type=1326 audit(1774037326.823:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6766 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1897f7c799 code=0x7ffc0000 [ 99.493720][ T6789] netlink: 7 bytes leftover after parsing attributes in process `syz.4.427'. [ 99.493950][ T6789] netlink: 40 bytes leftover after parsing attributes in process `syz.4.427'. [ 99.997755][ T6811] ======================================================= [ 99.997755][ T6811] WARNING: The mand mount option has been deprecated and [ 99.997755][ T6811] and is ignored by this kernel. Remove the mand [ 99.997755][ T6811] option from the mount to silence this warning. [ 99.997755][ T6811] ======================================================= [ 99.997862][ T6811] cgroup: none used incorrectly [ 101.179826][ T6865] netlink: 80 bytes leftover after parsing attributes in process `syz.4.465'. [ 101.587077][ T5875] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.762483][ T5875] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 101.762513][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.801144][ T5875] usb 4-1: config 0 descriptor?? [ 101.818756][ T5875] ums-realtek 4-1:0.0: USB Mass Storage device detected [ 101.863967][ T6901] netlink: 'syz.4.482': attribute type 2 has an invalid length. [ 101.863985][ T6901] netlink: 228 bytes leftover after parsing attributes in process `syz.4.482'. [ 101.920793][ T6905] netlink: 84 bytes leftover after parsing attributes in process `syz.2.484'. [ 101.920822][ T6905] netlink: 84 bytes leftover after parsing attributes in process `syz.2.484'. [ 102.055717][ T5897] usb 4-1: USB disconnect, device number 4 [ 102.242685][ T6919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.490'. [ 102.270127][ T6921] tmpfs: Unsupported parameter 'huge' [ 102.524539][ T6937] netlink: 180 bytes leftover after parsing attributes in process `syz.4.499'. [ 102.525920][ T6937] netlink: 48 bytes leftover after parsing attributes in process `syz.4.499'. [ 103.761420][ T6985] netlink: 'syz.4.519': attribute type 1 has an invalid length. [ 104.021459][ T7008] capability: warning: `syz.4.527' uses 32-bit capabilities (legacy support in use) [ 104.205887][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 104.790552][ T7043] netlink: 'syz.4.545': attribute type 2 has an invalid length. [ 104.946693][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.100072][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 105.105127][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.105150][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 105.117011][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=8782, bcdDevice= 0.54 [ 105.117037][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.117056][ T10] usb 3-1: Product: syz [ 105.117070][ T10] usb 3-1: Manufacturer: syz [ 105.117084][ T10] usb 3-1: SerialNumber: syz [ 105.543150][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 105.559350][ T10] usb 3-1: USB disconnect, device number 3 [ 105.647258][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.269895][ T7112] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 106.272031][ T7112] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 106.363029][ T7118] netlink: 'syz.0.568': attribute type 2 has an invalid length. [ 106.480355][ T7118] hmac(sha224: entered promiscuous mode [ 107.066610][ T7155] netlink: get zone limit has 4 unknown bytes [ 107.202312][ T7160] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 107.932401][ T7200] netlink: zone id is out of range [ 107.932415][ T7200] netlink: zone id is out of range [ 107.932423][ T7200] netlink: zone id is out of range [ 108.370150][ T7222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.609'. [ 108.370189][ T7222] netlink: 11 bytes leftover after parsing attributes in process `syz.4.609'. [ 108.877486][ T5897] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.886364][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.037999][ T5897] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.038024][ T5897] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.039925][ T5897] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 109.039951][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.039970][ T5897] usb 5-1: SerialNumber: syz [ 109.093322][ T31] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 109.093347][ T31] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 109.093365][ T31] usb 1-1: config 220 has no interface number 2 [ 109.093434][ T31] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 109.093459][ T31] usb 1-1: config 220 interface 0 has no altsetting 0 [ 109.093476][ T31] usb 1-1: config 220 interface 76 has no altsetting 0 [ 109.093493][ T31] usb 1-1: config 220 interface 1 has no altsetting 0 [ 109.138508][ T31] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 109.138535][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.138555][ T31] usb 1-1: Product: syz [ 109.138568][ T31] usb 1-1: Manufacturer: syz [ 109.138582][ T31] usb 1-1: SerialNumber: syz [ 109.319328][ T5897] usb 5-1: 0:2 : does not exist [ 109.415749][ T7265] netlink: 'syz.2.626': attribute type 12 has an invalid length. [ 109.439481][ T31] usb 1-1: selecting invalid altsetting 0 [ 109.466646][ T31] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 109.466688][ T31] uvcvideo 1-1:220.0: No valid video chain found. [ 109.503423][ T31] usb 1-1: selecting invalid altsetting 0 [ 109.503459][ T31] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 109.531675][ T31] usb 1-1: USB disconnect, device number 3 [ 109.686829][ T5897] usb 5-1: USB disconnect, device number 3 [ 109.821572][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.050785][ T7283] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 110.050811][ T7283] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.076091][ T7283] vhci_hcd vhci_hcd.0: Device attached [ 110.094099][ T7284] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 110.097642][ T13] vhci_hcd vhci_hcd.4: stop threads [ 110.098203][ T13] vhci_hcd vhci_hcd.4: release socket [ 110.098284][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 110.931322][ T5795] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.097960][ T5795] usb 1-1: config 0 has no interfaces? [ 111.097997][ T5795] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 111.098021][ T5795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.165674][ T5795] usb 1-1: config 0 descriptor?? [ 111.214096][ T37] audit: type=1326 audit(1774037593.961:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7335 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af273c799 code=0x7ffc0000 [ 111.214141][ T37] audit: type=1326 audit(1774037593.961:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7335 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af273c799 code=0x7ffc0000 [ 111.214179][ T37] audit: type=1326 audit(1774037593.961:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7335 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af273c799 code=0x7ffc0000 [ 111.214438][ T37] audit: type=1326 audit(1774037593.961:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7335 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f9af273c799 code=0x7ffc0000 [ 111.214847][ T37] audit: type=1326 audit(1774037593.961:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7335 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af273c799 code=0x7ffc0000 [ 111.215116][ T37] audit: type=1326 audit(1774037593.961:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7335 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af273c799 code=0x7ffc0000 [ 111.215523][ T37] audit: type=1326 audit(1774037593.961:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7335 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9af273c799 code=0x7ffc0000 [ 111.217320][ T37] audit: type=1326 audit(1774037593.961:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7335 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9af273c799 code=0x7ffc0000 [ 111.395499][ T5795] usb 1-1: USB disconnect, device number 4 [ 111.469173][ T7342] netlink: 'syz.3.650': attribute type 10 has an invalid length. [ 111.554497][ T7346] support for cryptoloop has been removed. Use dm-crypt instead. [ 111.642832][ T7342] team0: Device wg1 is of different type [ 111.753162][ T7356] mmap: syz.2.660 (7356) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.011443][ T7366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.663'. [ 112.136288][ T7372] Zero length message leads to an empty skb [ 112.445722][ T5795] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 112.601641][ T5795] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 112.601670][ T5795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.634386][ T7399] Invalid logical block size (8192) [ 112.645888][ T5795] usb 5-1: config 0 descriptor?? [ 112.656366][ T5897] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 112.667044][ T5795] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 112.821176][ T5897] usb 3-1: not running at top speed; connect to a high speed hub [ 112.822684][ T5897] usb 3-1: config 1 has an invalid interface number: 119 but max is 0 [ 112.822708][ T5897] usb 3-1: config 1 has no interface number 0 [ 112.822816][ T5897] usb 3-1: config 1 interface 119 altsetting 13 endpoint 0x1 has invalid maxpacket 1032, setting to 64 [ 112.822844][ T5897] usb 3-1: config 1 interface 119 altsetting 13 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 112.822869][ T5897] usb 3-1: config 1 interface 119 has no altsetting 0 [ 112.831217][ T5897] usb 3-1: New USB device found, idVendor=0b57, idProduct=5983, bcdDevice=7f.00 [ 112.831244][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.831261][ T5897] usb 3-1: Product: syz [ 112.831275][ T5897] usb 3-1: Manufacturer: syz [ 112.831289][ T5897] usb 3-1: SerialNumber: syz [ 113.097766][ T5795] gp8psk: usb out operation failed. [ 113.097783][ T5795] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 113.097820][ T5795] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 113.176637][ T5795] usb 5-1: USB disconnect, device number 4 [ 113.203687][ T5897] usbhid 3-1:1.119: couldn't find an input interrupt endpoint [ 113.238736][ T5897] usb 3-1: USB disconnect, device number 4 [ 113.443041][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 113.544314][ T7428] netlink: 277 bytes leftover after parsing attributes in process `syz.0.694'. [ 113.796491][ T5795] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.939896][ T7448] Bluetooth: MGMT ver 1.23 [ 113.950010][ T5795] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 113.950032][ T5795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.950051][ T5795] usb 2-1: Product: syz [ 113.950064][ T5795] usb 2-1: Manufacturer: syz [ 113.950077][ T5795] usb 2-1: SerialNumber: syz [ 113.975826][ T5795] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 113.997806][ T826] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 114.135923][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 114.370446][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 114.370468][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.707'. [ 114.488845][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.712'. [ 114.592118][ T36] usb 2-1: USB disconnect, device number 5 [ 114.650896][ T37] audit: type=1326 audit(1774037597.391:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7465 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af273c799 code=0x7ffc0000 [ 114.650946][ T37] audit: type=1326 audit(1774037597.391:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7465 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af273c799 code=0x7ffc0000 [ 115.204196][ T7485] 9p: p9: multiple sources not supported [ 115.326031][ T826] usb 2-1: Service connection timeout for: 256 [ 115.326054][ T826] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 115.326922][ T826] ath9k_htc: Failed to initialize the device [ 115.338471][ T36] usb 2-1: ath9k_htc: USB layer deinitialized [ 115.646571][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 115.674656][ T7503] warning: `syz.4.730' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 116.249884][ T7533] process 'syz.4.743' launched '/dev/fd/3' with NULL argv: empty string added [ 116.679575][ T7555] hpfs: Bad magic ... probably not HPFS [ 116.686456][ T7555] hpfs: Bad magic ... probably not HPFS [ 116.805210][ T826] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.924436][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.759'. [ 116.955477][ T826] usb 3-1: Using ep0 maxpacket: 16 [ 116.961499][ T826] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 116.961524][ T826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.961542][ T826] usb 3-1: Product: syz [ 116.961563][ T826] usb 3-1: Manufacturer: syz [ 116.961576][ T826] usb 3-1: SerialNumber: syz [ 116.983055][ T826] usb 3-1: config 0 descriptor?? [ 117.003676][ T826] gspca_main: spca508-2.14.0 probing 041e:4018 [ 117.215414][ T826] gspca_spca508: reg_read err -32 [ 117.417365][ T826] gspca_spca508: reg_read err -71 [ 117.417749][ T826] gspca_spca508: reg_read err -71 [ 117.418243][ T826] gspca_spca508: reg_read err -71 [ 117.418672][ T826] gspca_spca508: reg write: error -71 [ 117.418771][ T826] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 117.442076][ T826] usb 3-1: USB disconnect, device number 5 [ 117.945124][ T36] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 118.071973][ T7611] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.097103][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 118.097209][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.102495][ T36] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 118.102520][ T36] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 118.102538][ T36] usb 1-1: Manufacturer: syz [ 118.159286][ T36] usb 1-1: config 0 descriptor?? [ 118.629229][ T36] cougar 0003:060B:700A.0001: item fetching failed at offset 0/5 [ 118.634749][ T36] cougar 0003:060B:700A.0001: parse failed [ 118.649511][ T36] cougar 0003:060B:700A.0001: probe with driver cougar failed with error -22 [ 118.662352][ T7630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.786'. [ 118.824049][ T826] usb 1-1: USB disconnect, device number 5 [ 118.981100][ T7641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.791'. [ 119.003818][ T7643] netlink: 104 bytes leftover after parsing attributes in process `syz.4.793'. [ 119.106879][ T7647] loop1: detected capacity change from 0 to 4194304 [ 119.690188][ T7673] ALSA: seq fatal error: cannot create timer (-22) [ 120.097216][ T7693] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 120.297046][ T7700] sch_fq: defrate 4294967295 ignored. [ 120.569935][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 120.569953][ T37] audit: type=1326 audit(1774037603.322:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7711 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1296c799 code=0x7ffc0000 [ 120.570218][ T37] audit: type=1326 audit(1774037603.322:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7711 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1296c799 code=0x7ffc0000 [ 120.571709][ T37] audit: type=1326 audit(1774037603.322:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7711 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fde1296c799 code=0x7ffc0000 [ 120.572104][ T37] audit: type=1326 audit(1774037603.322:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7711 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1296c799 code=0x7ffc0000 [ 121.597607][ T37] audit: type=1326 audit(1774037604.352:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7747 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed2bcc799 code=0x7ffc0000 [ 121.597654][ T37] audit: type=1326 audit(1774037604.352:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7747 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed2bcc799 code=0x7ffc0000 [ 121.616667][ T37] audit: type=1326 audit(1774037604.352:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7747 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed2bcc799 code=0x7ffc0000 [ 121.616714][ T37] audit: type=1326 audit(1774037604.362:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7747 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed2bcc799 code=0x7ffc0000 [ 121.616753][ T37] audit: type=1326 audit(1774037604.362:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7747 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7efed2bcc799 code=0x7ffc0000 [ 121.618738][ T37] audit: type=1326 audit(1774037604.372:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7747 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed2bcc799 code=0x7ffc0000 [ 122.104503][ T7769] capability: warning: `syz.1.853' uses deprecated v2 capabilities in a way that may be insecure [ 122.613130][ T7791] netlink: 20 bytes leftover after parsing attributes in process `syz.4.864'. [ 122.664514][ T36] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.826735][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 122.826764][ T36] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 122.826788][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 122.826808][ T36] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 122.829382][ T36] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 122.829409][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.829429][ T36] usb 2-1: Product: syz [ 122.829443][ T36] usb 2-1: Manufacturer: syz [ 122.829457][ T36] usb 2-1: SerialNumber: syz [ 122.921208][ T36] usb 2-1: config 0 descriptor?? [ 122.945078][ T36] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 123.163958][ T7812] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 123.211518][ T36] ums-isd200 2-1:0.0: probe with driver ums-isd200 failed with error -22 [ 123.375982][ T36] usb 2-1: USB disconnect, device number 6 [ 124.176293][ T808] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 124.206136][ T7854] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 124.284300][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 124.324259][ T808] usb 5-1: Using ep0 maxpacket: 16 [ 124.341295][ T808] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 124.341323][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.367384][ T808] usb 5-1: config 0 descriptor?? [ 124.383575][ T808] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 124.454561][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 124.469619][ T31] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 124.469650][ T31] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 124.469673][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.469758][ T31] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 124.469781][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.541401][ T31] usb 2-1: config 0 descriptor?? [ 124.995247][ T31] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 124.995286][ T31] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 124.995315][ T31] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 124.995341][ T31] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 124.995614][ T31] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 124.997878][ T808] gspca_sonixj: reg_w1 err -71 [ 124.997970][ T808] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 125.056661][ T808] usb 5-1: USB disconnect, device number 5 [ 125.118817][ T31] corsair-psu 0003:1B1C:1C09.0002: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 125.205084][ T31] corsair-psu 0003:1B1C:1C09.0002: unable to initialize device (-90) [ 125.226119][ T31] corsair-psu 0003:1B1C:1C09.0002: probe with driver corsair-psu failed with error -90 [ 125.250023][ T31] usb 2-1: USB disconnect, device number 7 [ 125.362802][ T7880] fido_id[7880]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 125.548733][ T7890] syz_tun: entered promiscuous mode [ 125.650782][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 125.650800][ T37] audit: type=1326 audit(1774037608.403:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7892 comm="syz.4.911" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9af273c799 code=0x0 [ 125.698375][ T7895] netlink: 'syz.2.912': attribute type 4 has an invalid length. [ 126.481102][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 126.638263][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.638288][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.666177][ T31] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 126.666205][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.666225][ T31] usb 2-1: Product: syz [ 126.666239][ T31] usb 2-1: Manufacturer: syz [ 126.666253][ T31] usb 2-1: SerialNumber: syz [ 126.938369][ T31] usb 2-1: 0:1 : does not exist [ 126.954275][ T31] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 126.956873][ T31] usb 2-1: unit 0 not found! [ 127.038040][ T31] usb 2-1: USB disconnect, device number 8 [ 127.169131][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.435276][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 127.750907][ T7984] netlink: 368 bytes leftover after parsing attributes in process `syz.1.955'. [ 128.098371][ T8003] netlink: 'syz.3.964': attribute type 24 has an invalid length. [ 128.713808][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.863774][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 128.868087][ T31] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 128.868112][ T31] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 128.868131][ T31] usb 1-1: config 0 has no interface number 0 [ 128.868179][ T31] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.868204][ T31] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 128.868228][ T31] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 128.869514][ T31] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 128.869542][ T31] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 128.869562][ T31] usb 1-1: Product: syz [ 128.888397][ T31] usb 1-1: config 0 descriptor?? [ 128.889301][ T8022] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.517429][ T31] usb 1-1: USB disconnect, device number 6 [ 129.543688][ T36] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.699462][ T8069] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 129.711572][ T36] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 129.711598][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.711617][ T36] usb 3-1: Product: syz [ 129.711630][ T36] usb 3-1: Manufacturer: syz [ 129.711643][ T36] usb 3-1: SerialNumber: syz [ 129.728429][ T36] usb 3-1: config 0 descriptor?? [ 129.754528][ T36] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 129.773319][ T36] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 129.774282][ T36] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 129.774334][ T36] usb 3-1: media controller created [ 129.832846][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.938825][ T8054] dvb-usb: bulk message failed: -22 (7/0) [ 130.050504][ T36] DVB: Unable to find symbol mt352_attach() [ 130.106706][ T36] DVB: Unable to find symbol nxt6000_attach() [ 130.106721][ T36] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 130.128474][ T36] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 130.158223][ T36] dvb-usb: schedule remote query interval to 1000 msecs. [ 130.158241][ T36] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 130.158257][ T36] dvb-usb: bulk message failed: -22 (7/0) [ 130.158272][ T36] dvb-usb: bulk message failed: -22 (7/0) [ 130.203716][ T36] usb 3-1: USB disconnect, device number 6 [ 130.253544][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 130.387218][ T8095] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 130.403526][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 130.417509][ T31] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 130.417536][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.417554][ T31] usb 5-1: Product: syz [ 130.417567][ T31] usb 5-1: Manufacturer: syz [ 130.417581][ T31] usb 5-1: SerialNumber: syz [ 130.498914][ T31] usb 5-1: config 0 descriptor?? [ 130.524765][ T31] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 130.524794][ T31] dw2102: su3000_power_ctrl: 1, initialized 0 [ 130.524805][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 130.550543][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 130.555321][ T31] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 130.555374][ T31] usb 5-1: media controller created [ 130.555619][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 130.555633][ T31] dw2102: i2c transfer failed. [ 130.555650][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 130.555663][ T31] dw2102: i2c transfer failed. [ 130.555677][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 130.555690][ T31] dw2102: i2c transfer failed. [ 130.555705][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 130.555718][ T31] dw2102: i2c transfer failed. [ 130.555733][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 130.555745][ T31] dw2102: i2c transfer failed. [ 130.555760][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 130.555772][ T31] dw2102: i2c transfer failed. [ 130.555781][ T31] dvb-usb: MAC address: 02:02:02:02:02:02 [ 130.656502][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1008'. [ 130.660174][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.740230][ T8104] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 130.740256][ T8104] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-spee[ 130.740256][ T8104] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.740375][ T8104] vhci_hcd vhci_hcd.0: Device attached [ 130.753298][ T8081] ------------[ cut here ]------------ [ 130.753309][ T8081] refcount_t: addition on 0; use-after-free. [ 130.753323][ T8081] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x9f/0x110, CPU#1: syz.4.1001/8081 [ 130.753413][ T8081] Modules linked in: [ 130.753457][ T8081] CPU: 1 UID: 0 PID: 8081 Comm: syz.4.1001 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 130.753479][ T8081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 130.753491][ T8081] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 130.753522][ T8081] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 8b 64 26 fd 48 8d 3d 94 65 d6 0a 67 48 0f b9 3a eb 4a e8 78 64 26 fd 48 8d 3d 91 65 d6 0a <67> 48 0f b9 3a eb 37 e8 65 64 26 fd 48 8d 3d 8e 65 d6 0a 67 48 0f [ 130.753539][ T8081] RSP: 0018:ffffc9000e02f6d8 EFLAGS: 00010283 [ 130.753557][ T8081] RAX: ffffffff849e12a8 RBX: 0000000000000002 RCX: 0000000000080000 [ 130.753570][ T8081] RDX: ffffc9000f233000 RSI: 000000000000071b RDI: ffffffff8f747840 [ 130.753583][ T8081] RBP: 0000000000000000 R08: ffff88803bccbd00 R09: 0000000000000005 [ 130.753594][ T8081] R10: 0000000000000100 R11: 0000000000000004 R12: ffffffff8c049348 [ 130.753606][ T8081] R13: dffffc0000000000 R14: ffff8880607f1188 R15: dffffc0000000000 [ 130.753620][ T8081] FS: 00007f9af098e6c0(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000 [ 130.753637][ T8081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.753650][ T8081] CR2: 0000001b2ef20ff8 CR3: 000000004ecd4000 CR4: 00000000003526f0 [ 130.753672][ T8081] Call Trace: [ 130.753679][ T8081] [ 130.753689][ T8081] kobject_get+0xfa/0x120 [ 130.753714][ T8081] i2c_get_adapter+0x6d/0xa0 [ 130.753742][ T8081] i2cdev_open+0x48/0x190 [ 130.753774][ T8081] chrdev_open+0x4d0/0x5f0 [ 130.753799][ T8081] ? __pfx_chrdev_open+0x10/0x10 [ 130.753820][ T8081] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 130.753851][ T8081] ? __pfx_chrdev_open+0x10/0x10 [ 130.753872][ T8081] do_dentry_open+0x83d/0x13e0 [ 130.753906][ T8081] vfs_open+0x3b/0x350 [ 130.753927][ T8081] ? path_openat+0x2e2b/0x38a0 [ 130.753958][ T8081] path_openat+0x2e43/0x38a0 [ 130.754025][ T8081] ? __pfx_path_openat+0x10/0x10 [ 130.754054][ T8081] ? __lock_acquire+0x6b5/0x2cf0 [ 130.754076][ T8081] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 130.754110][ T8081] ? do_raw_spin_lock+0x12b/0x2f0 [ 130.754147][ T8081] do_file_open+0x23e/0x4a0 [ 130.754177][ T8081] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 130.754212][ T8081] ? __pfx_do_file_open+0x10/0x10 [ 130.754239][ T8081] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 130.754285][ T8081] ? alloc_fd+0x64e/0x6c0 [ 130.754320][ T8081] do_sys_openat2+0x113/0x200 [ 130.754344][ T8081] ? __se_sys_futex+0x3a8/0x450 [ 130.754365][ T8081] ? __pfx_do_sys_openat2+0x10/0x10 [ 130.754395][ T8081] ? rcu_is_watching+0x15/0xb0 [ 130.754421][ T8081] __x64_sys_openat+0x138/0x170 [ 130.754452][ T8081] do_syscall_64+0x14d/0xf80 [ 130.754482][ T8081] ? trace_irq_disable+0x3b/0x150 [ 130.754505][ T8081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.754525][ T8081] ? clear_bhb_loop+0x40/0x90 [ 130.754550][ T8081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.754571][ T8081] RIP: 0033:0x7f9af26fcfce [ 130.754597][ T8081] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.754614][ T8081] RSP: 002b:00007f9af098db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.754634][ T8081] RAX: ffffffffffffffda RBX: 00007f9af098e6c0 RCX: 00007f9af26fcfce [ 130.754648][ T8081] RDX: 0000000000002003 RSI: 00007f9af098dc00 RDI: ffffffffffffff9c [ 130.754662][ T8081] RBP: 00007f9af098dc00 R08: 0000000000000000 R09: 0000000000000000 [ 130.754675][ T8081] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 130.754688][ T8081] R13: 00007f9af29b6038 R14: 00007f9af29b5fa0 R15: 00007fffd0b11c68 [ 130.754720][ T8081] [ 130.754734][ T8081] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 130.754749][ T8081] CPU: 1 UID: 0 PID: 8081 Comm: syz.4.1001 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 130.754772][ T8081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 130.754784][ T8081] Call Trace: [ 130.754791][ T8081] [ 130.754799][ T8081] vpanic+0x56c/0xa60 [ 130.754830][ T8081] ? __pfx__printk+0x10/0x10 [ 130.754852][ T8081] ? __pfx_vpanic+0x10/0x10 [ 130.754879][ T8081] ? is_bpf_text_address+0x292/0x2b0 [ 130.754908][ T8081] ? is_bpf_text_address+0x26/0x2b0 [ 130.754942][ T8081] panic+0xc5/0xd0 [ 130.754971][ T8081] ? __pfx_panic+0x10/0x10 [ 130.755035][ T8081] __warn+0x315/0x4f0 [ 130.755063][ T8081] ? refcount_warn_saturate+0x9f/0x110 [ 130.755094][ T8081] ? refcount_warn_saturate+0x9f/0x110 [ 130.755125][ T8081] __report_bug+0x29a/0x540 [ 130.755153][ T8081] ? rt_mutex_slowlock_block+0x56c/0x680 [ 130.755182][ T8081] ? refcount_warn_saturate+0x9f/0x110 [ 130.755211][ T8081] ? __pfx___report_bug+0x10/0x10 [ 130.755246][ T8081] ? rt_mutex_slowlock+0x420/0x7b0 [ 130.755272][ T8081] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 130.755300][ T8081] report_bug_entry+0x19a/0x290 [ 130.755330][ T8081] ? refcount_warn_saturate+0x9f/0x110 [ 130.755357][ T8081] ? refcount_warn_saturate+0xa4/0x110 [ 130.755384][ T8081] handle_bug+0xce/0x200 [ 130.755406][ T8081] exc_invalid_op+0x1a/0x50 [ 130.755427][ T8081] asm_exc_invalid_op+0x1a/0x20 [ 130.755447][ T8081] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 130.755475][ T8081] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 8b 64 26 fd 48 8d 3d 94 65 d6 0a 67 48 0f b9 3a eb 4a e8 78 64 26 fd 48 8d 3d 91 65 d6 0a <67> 48 0f b9 3a eb 37 e8 65 64 26 fd 48 8d 3d 8e 65 d6 0a 67 48 0f [ 130.755492][ T8081] RSP: 0018:ffffc9000e02f6d8 EFLAGS: 00010283 [ 130.755508][ T8081] RAX: ffffffff849e12a8 RBX: 0000000000000002 RCX: 0000000000080000 [ 130.755521][ T8081] RDX: ffffc9000f233000 RSI: 000000000000071b RDI: ffffffff8f747840 [ 130.755535][ T8081] RBP: 0000000000000000 R08: ffff88803bccbd00 R09: 0000000000000005 [ 130.755548][ T8081] R10: 0000000000000100 R11: 0000000000000004 R12: ffffffff8c049348 [ 130.755561][ T8081] R13: dffffc0000000000 R14: ffff8880607f1188 R15: dffffc0000000000 [ 130.755583][ T8081] ? refcount_warn_saturate+0x98/0x110 [ 130.755618][ T8081] ? refcount_warn_saturate+0x98/0x110 [ 130.755646][ T8081] kobject_get+0xfa/0x120 [ 130.755668][ T8081] i2c_get_adapter+0x6d/0xa0 [ 130.755696][ T8081] i2cdev_open+0x48/0x190 [ 130.755728][ T8081] chrdev_open+0x4d0/0x5f0 [ 130.755752][ T8081] ? __pfx_chrdev_open+0x10/0x10 [ 130.755773][ T8081] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 130.755806][ T8081] ? __pfx_chrdev_open+0x10/0x10 [ 130.755827][ T8081] do_dentry_open+0x83d/0x13e0 [ 130.755861][ T8081] vfs_open+0x3b/0x350 [ 130.755882][ T8081] ? path_openat+0x2e2b/0x38a0 [ 130.755913][ T8081] path_openat+0x2e43/0x38a0 [ 130.755973][ T8081] ? __pfx_path_openat+0x10/0x10 [ 130.756003][ T8081] ? __lock_acquire+0x6b5/0x2cf0 [ 130.756033][ T8081] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 130.756069][ T8081] ? do_raw_spin_lock+0x12b/0x2f0 [ 130.756105][ T8081] do_file_open+0x23e/0x4a0 [ 130.756134][ T8081] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 130.756169][ T8081] ? __pfx_do_file_open+0x10/0x10 [ 130.756196][ T8081] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 130.756243][ T8081] ? alloc_fd+0x64e/0x6c0 [ 130.756277][ T8081] do_sys_openat2+0x113/0x200 [ 130.756302][ T8081] ? __se_sys_futex+0x3a8/0x450 [ 130.756322][ T8081] ? __pfx_do_sys_openat2+0x10/0x10 [ 130.756352][ T8081] ? rcu_is_watching+0x15/0xb0 [ 130.756379][ T8081] __x64_sys_openat+0x138/0x170 [ 130.756407][ T8081] do_syscall_64+0x14d/0xf80 [ 130.756437][ T8081] ? trace_irq_disable+0x3b/0x150 [ 130.756460][ T8081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.756480][ T8081] ? clear_bhb_loop+0x40/0x90 [ 130.756504][ T8081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.756523][ T8081] RIP: 0033:0x7f9af26fcfce [ 130.756541][ T8081] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.756557][ T8081] RSP: 002b:00007f9af098db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.756575][ T8081] RAX: ffffffffffffffda RBX: 00007f9af098e6c0 RCX: 00007f9af26fcfce [ 130.756590][ T8081] RDX: 0000000000002003 RSI: 00007f9af098dc00 RDI: ffffffffffffff9c [ 130.756604][ T8081] RBP: 00007f9af098dc00 R08: 0000000000000000 R09: 0000000000000000 [ 130.756616][ T8081] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 130.756629][ T8081] R13: 00007f9af29b6038 R14: 00007f9af29b5fa0 R15: 00007fffd0b11c68 [ 130.756660][ T8081] [ 130.756916][ T8081] Kernel Offset: disabled