last executing test programs: 1m3.455827677s ago: executing program 1 (id=2): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x40000, 0x2) r1 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 1m1.613957859s ago: executing program 1 (id=26): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x1) 1m1.325175355s ago: executing program 1 (id=29): unshare(0x20000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0xbe) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffc, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x5}) 1m0.93333129s ago: executing program 1 (id=31): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000d30000007f00000004"], 0x58) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000001100)='.\x00', 0x48f) close(r0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 1m0.240969412s ago: executing program 32 (id=31): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000d30000007f00000004"], 0x58) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000001100)='.\x00', 0x48f) close(r0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 9.847412677s ago: executing program 5 (id=352): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 9.632215977s ago: executing program 5 (id=353): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_emit_ethernet(0x30c, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 6.567645986s ago: executing program 4 (id=367): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r0 = landlock_create_ruleset(&(0x7f0000000440)={0x6621}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2) 6.300229426s ago: executing program 5 (id=369): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x8000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10001, 0x0) 6.293513058s ago: executing program 4 (id=370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000000000ff"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008f04"]) 6.022069931s ago: executing program 3 (id=372): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) 5.853895543s ago: executing program 5 (id=373): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, &(0x7f0000000100)={0x40, 0xe, 0x5, {0x5, 0x38, "cf4022"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @string={0x0, 0x3, "064b765bc5404c731a96cbd8e0ae7ef1716fb019a8243f97526290b788e24695b4b343e7526ac555a1694789a0dcff10bdce1c07375fcd903b0c9efea3ff90339007bdceaa0277470c5c677b089f901a67b0ddf347cd1fdd902243f4ef3bea42e031000000000000"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 5.361913811s ago: executing program 4 (id=376): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_fuse_handle_req(r1, &(0x7f0000002180)="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", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.288609702s ago: executing program 2 (id=378): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0x94e, 0x10100, 0x10}, &(0x7f00000005c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 5.18832672s ago: executing program 3 (id=379): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) read(r0, &(0x7f0000000680)=""/4096, 0x1000) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) 4.884672324s ago: executing program 2 (id=381): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904ac00018fe7e20009058f"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.2892291s ago: executing program 4 (id=384): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r1 = timerfd_create(0x0, 0x800) timerfd_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000080)) 4.123996963s ago: executing program 0 (id=385): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={r2}, 0x8) 4.038500494s ago: executing program 3 (id=386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x8, 0x0, 0x8, 0x8, 0x8, 0x4c, 0xde, 0x0, 0x4, 0x2, 0x3, 0x1, 0xa6}, {0x7ff, 0x6, 0x6, 0x1, 0x2, 0x4, 0x8, 0x8, 0x9, 0xee, 0xfd, 0x4, 0x8}, {0x9, 0xa, 0x9, 0x1, 0xff, 0x63, 0x6, 0x9, 0x2, 0x9, 0x7f, 0x3, 0x870}], 0x8}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000012c0)={[{0x40007, 0x4, 0x8d, 0x5, 0x9, 0x5, 0x1, 0x5, 0x4c, 0xc, 0xf8, 0xfa, 0x5768}, {0x28, 0x2, 0xa, 0xa9, 0x1, 0x0, 0x5, 0xa, 0x81, 0x2, 0x81, 0x9, 0x100000001}, {0x7a, 0x6ff, 0xd0, 0x2, 0x6, 0x1, 0x5, 0xb6, 0x8, 0x6, 0xe, 0x7, 0x9}], 0x7}) 3.826111715s ago: executing program 0 (id=387): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@gettfilter={0x34, 0x2e, 0x814, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0xfff3, 0xc}, {0xffff, 0xf}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x7fb}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c051) recvmsg$can_raw(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/6, 0x6}, {&(0x7f0000000040)=""/97, 0x61}], 0x2}, 0x20) 3.516189606s ago: executing program 0 (id=388): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x9, 0x8, 0x0, 0x100, 0x8}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 3.505287062s ago: executing program 3 (id=389): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x2, r1, 0x0, 0x300}]) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.22464323s ago: executing program 5 (id=390): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000240)={0x40, 0x12, 0x2, "2ce8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.937845818s ago: executing program 0 (id=391): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x1600bd7e, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0xff000000], [], 'veth0_macvtap\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/199}, {&(0x7f0000000340)=""/161}, {&(0x7f0000000400)=""/94}, {&(0x7f0000000480)=""/160}, {&(0x7f0000000640)=""/155}, {&(0x7f0000000700)=""/80}], 0x0, &(0x7f0000000580)=""/80, 0x11}}], 0x4000000000002ff, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x5c, 0x0, 0x0, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4bd5ffa8e842cdd19baeb25d342579f7e63d2d1e5317517e", "b1fe94141226cc71e718e86db665dd4fbd49b20523893e8724968b868600ac13"}}}}}}, 0x0) 2.726097281s ago: executing program 3 (id=392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 2.390921211s ago: executing program 2 (id=393): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000000000ff"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008b04"]) 2.39066802s ago: executing program 3 (id=394): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x10, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000200)={0x40, 0xb}, 0x0, 0x0}) 2.386538161s ago: executing program 0 (id=403): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = syz_io_uring_setup(0x890, &(0x7f00000001c0)={0x0, 0xaee2, 0x800, 0x6, 0xbfdffbfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2040}}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) 1.813316332s ago: executing program 0 (id=395): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000003c0)={0x0, 0x12, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x24, &(0x7f0000000100)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', 0x0}) 1.811538981s ago: executing program 2 (id=396): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x286d, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000020c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x40010041, 0x0) 1.23357083s ago: executing program 2 (id=397): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000011d000/0x2000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x7, &(0x7f00000021c0)=[{0x4, 0xffffffff, 0x5}], 0x1, 0x8d1, 0x0, 0x0, 0x0, 0x6}) 1.007181389s ago: executing program 4 (id=398): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaae", 0x19}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2", 0x2f}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) 552.688731ms ago: executing program 4 (id=399): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f000073d000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3000, 0x2}) 495.613963ms ago: executing program 5 (id=400): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=401): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba12", 0x11}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x2000847}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)=""/6, 0x6}, {&(0x7f0000001080)=""/27, 0x1b}], 0x2}}], 0x1, 0x40000000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. [ 80.199077][ T5815] cgroup: Unknown subsys name 'net' [ 80.370548][ T5815] cgroup: Unknown subsys name 'cpuset' [ 80.379951][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.100652][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.064210][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.072855][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.082628][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.090766][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.103366][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.124890][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.132970][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.141292][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.150403][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.158464][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.165638][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.174508][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.184644][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.192179][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.201705][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.209820][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.220941][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.221572][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.229595][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.238231][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.250569][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.276420][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.285116][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.298742][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.308675][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.027561][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 87.092619][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 87.201069][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 87.353463][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 87.554364][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 87.601025][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.608921][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.616286][ T5842] bridge_slave_0: entered allmulticast mode [ 87.624364][ T5842] bridge_slave_0: entered promiscuous mode [ 87.670232][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.677684][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.685528][ T5842] bridge_slave_1: entered allmulticast mode [ 87.693003][ T5842] bridge_slave_1: entered promiscuous mode [ 87.728949][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.736201][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.743812][ T5846] bridge_slave_0: entered allmulticast mode [ 87.750951][ T5846] bridge_slave_0: entered promiscuous mode [ 87.800725][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.808341][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.815525][ T5846] bridge_slave_1: entered allmulticast mode [ 87.823294][ T5846] bridge_slave_1: entered promiscuous mode [ 87.845119][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.901066][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.916228][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.923531][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.931220][ T5844] bridge_slave_0: entered allmulticast mode [ 87.938591][ T5844] bridge_slave_0: entered promiscuous mode [ 87.947900][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.955089][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.962874][ T5844] bridge_slave_1: entered allmulticast mode [ 87.970437][ T5844] bridge_slave_1: entered promiscuous mode [ 87.989808][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.997297][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.004563][ T5841] bridge_slave_0: entered allmulticast mode [ 88.012151][ T5841] bridge_slave_0: entered promiscuous mode [ 88.052491][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.062461][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.070231][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.078033][ T5841] bridge_slave_1: entered allmulticast mode [ 88.085123][ T5841] bridge_slave_1: entered promiscuous mode [ 88.134790][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.172412][ T5842] team0: Port device team_slave_0 added [ 88.194957][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.234541][ T5842] team0: Port device team_slave_1 added [ 88.240820][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.248314][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.255605][ T5845] bridge_slave_0: entered allmulticast mode [ 88.263097][ T5845] bridge_slave_0: entered promiscuous mode [ 88.273488][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.283409][ T5833] Bluetooth: hci0: command tx timeout [ 88.286905][ T5833] Bluetooth: hci2: command tx timeout [ 88.312446][ T5846] team0: Port device team_slave_0 added [ 88.322031][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.345673][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.353003][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.360276][ T5833] Bluetooth: hci4: command tx timeout [ 88.365860][ T5831] Bluetooth: hci3: command tx timeout [ 88.365929][ T5833] Bluetooth: hci1: command tx timeout [ 88.371896][ T5845] bridge_slave_1: entered allmulticast mode [ 88.384522][ T5845] bridge_slave_1: entered promiscuous mode [ 88.406160][ T5846] team0: Port device team_slave_1 added [ 88.414177][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.466000][ T5844] team0: Port device team_slave_0 added [ 88.498099][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.505101][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.532697][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.561558][ T5844] team0: Port device team_slave_1 added [ 88.582190][ T5841] team0: Port device team_slave_0 added [ 88.589193][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.596263][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.623121][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.638787][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.661100][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.668505][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.694783][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.708188][ T5841] team0: Port device team_slave_1 added [ 88.714837][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.722416][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.749464][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.771941][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.854957][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.862152][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.889144][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.914847][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.922231][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.948665][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.974931][ T5845] team0: Port device team_slave_0 added [ 88.981715][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.988946][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.015108][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.038105][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.045081][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.072577][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.090032][ T5842] hsr_slave_0: entered promiscuous mode [ 89.097046][ T5842] hsr_slave_1: entered promiscuous mode [ 89.105354][ T5845] team0: Port device team_slave_1 added [ 89.149389][ T5846] hsr_slave_0: entered promiscuous mode [ 89.156040][ T5846] hsr_slave_1: entered promiscuous mode [ 89.162785][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 89.168656][ T5846] Cannot create hsr debugfs directory [ 89.203806][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.210960][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.237369][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.250898][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.258180][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.284817][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.420683][ T5844] hsr_slave_0: entered promiscuous mode [ 89.427739][ T5844] hsr_slave_1: entered promiscuous mode [ 89.434341][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 89.440599][ T5844] Cannot create hsr debugfs directory [ 89.514205][ T5841] hsr_slave_0: entered promiscuous mode [ 89.520915][ T5841] hsr_slave_1: entered promiscuous mode [ 89.527773][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 89.533795][ T5841] Cannot create hsr debugfs directory [ 89.682544][ T5845] hsr_slave_0: entered promiscuous mode [ 89.689305][ T5845] hsr_slave_1: entered promiscuous mode [ 89.695384][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 89.702072][ T5845] Cannot create hsr debugfs directory [ 90.148195][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.161548][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.179136][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.204653][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.278781][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.293458][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.310297][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.332550][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.356743][ T5833] Bluetooth: hci2: command tx timeout [ 90.356754][ T52] Bluetooth: hci0: command tx timeout [ 90.428418][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.436727][ T5833] Bluetooth: hci1: command tx timeout [ 90.437086][ T52] Bluetooth: hci3: command tx timeout [ 90.442256][ T5833] Bluetooth: hci4: command tx timeout [ 90.474548][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.486174][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.514516][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.608513][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.617356][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.631421][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.643456][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.656087][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.762411][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.774598][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.787435][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.800745][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.818558][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.853659][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.860962][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.907689][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.915015][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.962432][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.042490][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.099991][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.110915][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.167975][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.181981][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.189457][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.220911][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.228264][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.271363][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.278775][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.290695][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.297882][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.384029][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.410302][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.417783][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.430107][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.437701][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.453859][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.500445][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.554723][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.590478][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.597736][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.618972][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.626572][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.704114][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.752960][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.773709][ T5842] veth0_vlan: entered promiscuous mode [ 91.824929][ T5842] veth1_vlan: entered promiscuous mode [ 91.885760][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.897590][ T5846] veth0_vlan: entered promiscuous mode [ 91.939252][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.951825][ T5846] veth1_vlan: entered promiscuous mode [ 91.973460][ T5844] veth0_vlan: entered promiscuous mode [ 91.999634][ T5842] veth0_macvtap: entered promiscuous mode [ 92.035527][ T5844] veth1_vlan: entered promiscuous mode [ 92.044499][ T5842] veth1_macvtap: entered promiscuous mode [ 92.125849][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.144770][ T5845] veth0_vlan: entered promiscuous mode [ 92.154077][ T5846] veth0_macvtap: entered promiscuous mode [ 92.168031][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.178044][ T5841] veth0_vlan: entered promiscuous mode [ 92.190785][ T5846] veth1_macvtap: entered promiscuous mode [ 92.210545][ T1162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.237182][ T1162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.252293][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.261596][ T5845] veth1_vlan: entered promiscuous mode [ 92.278990][ T1162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.288100][ T917] cfg80211: failed to load regulatory.db [ 92.295878][ T1162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.333678][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.352699][ T5844] veth0_macvtap: entered promiscuous mode [ 92.360924][ T5841] veth1_vlan: entered promiscuous mode [ 92.380582][ T5844] veth1_macvtap: entered promiscuous mode [ 92.401467][ T1162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.410375][ T1162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.419666][ T1162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.437699][ T5833] Bluetooth: hci0: command tx timeout [ 92.437709][ T52] Bluetooth: hci2: command tx timeout [ 92.463199][ T1077] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.503891][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.517529][ T5833] Bluetooth: hci4: command tx timeout [ 92.518121][ T5831] Bluetooth: hci1: command tx timeout [ 92.529046][ T52] Bluetooth: hci3: command tx timeout [ 92.542227][ T5845] veth0_macvtap: entered promiscuous mode [ 92.566834][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.591677][ T5845] veth1_macvtap: entered promiscuous mode [ 92.606893][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.622053][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.629545][ T1162] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.629632][ T1162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.629688][ T1162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.629724][ T1162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.632105][ T5841] veth0_macvtap: entered promiscuous mode [ 92.721906][ T5841] veth1_macvtap: entered promiscuous mode [ 92.769042][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.780297][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.806995][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.808501][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.815059][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.853573][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.881228][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.923612][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.948826][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.971392][ T1094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.982108][ T1094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.010238][ T1094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.022006][ T1094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.032874][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.054252][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.074370][ T1094] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.137216][ T1094] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.152395][ T1094] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.174386][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.187153][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.222985][ T1094] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.420274][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.462830][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.497292][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.515736][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.669116][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.707356][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.720253][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.746156][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.755908][ T5935] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.859975][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.870992][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.957111][ T5870] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.167142][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 94.221614][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 94.245338][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 94.308504][ T5870] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 94.332496][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.367139][ T5870] usb 4-1: Product: syz [ 94.377667][ T5870] usb 4-1: Manufacturer: syz [ 94.382466][ T5870] usb 4-1: SerialNumber: syz [ 94.422043][ T5870] usb 4-1: config 0 descriptor?? [ 94.517531][ T52] Bluetooth: hci0: command tx timeout [ 94.527517][ T52] Bluetooth: hci2: command tx timeout [ 94.536604][ T5889] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 94.597368][ T52] Bluetooth: hci4: command tx timeout [ 94.604636][ T5831] Bluetooth: hci3: command tx timeout [ 94.604685][ T5833] Bluetooth: hci1: command tx timeout [ 94.653703][ T5870] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 94.721071][ T5889] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 94.750703][ T5889] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 94.770815][ T5889] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.780935][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.803430][ T5942] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 94.816607][ T5942] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 94.846984][ T5889] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.951560][ T24] usb 4-1: USB disconnect, device number 2 [ 95.095849][ T5889] usb 2-1: USB disconnect, device number 2 [ 95.750294][ T5977] binder: 5975:5977 ioctl c0306201 800003c0 returned -14 [ 96.049395][ T5982] netlink: 76 bytes leftover after parsing attributes in process `syz.3.24'. [ 96.063279][ T5982] netlink: 76 bytes leftover after parsing attributes in process `syz.3.24'. [ 96.107931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.126978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 96.173123][ T5990] vivid-001: disconnect [ 96.318033][ T5982] netlink: 76 bytes leftover after parsing attributes in process `syz.3.24'. [ 96.327922][ T5982] netlink: 76 bytes leftover after parsing attributes in process `syz.3.24'. [ 96.488688][ T5985] vivid-001: reconnect [ 96.677626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.696844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.778190][ T1147] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.791079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.027645][ T1147] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.141153][ T1147] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.233374][ T1147] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.646838][ T1147] bridge_slave_1: left allmulticast mode [ 97.652785][ T1147] bridge_slave_1: left promiscuous mode [ 97.701961][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.804442][ T1147] bridge_slave_0: left allmulticast mode [ 97.859571][ T1147] bridge_slave_0: left promiscuous mode [ 97.865435][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.215465][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.227903][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.235871][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.250309][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.258306][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.621186][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.661645][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.686944][ T1147] bond0 (unregistering): Released all slaves [ 100.291135][ T5833] Bluetooth: hci4: command tx timeout [ 100.381370][ T5870] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.486509][ T917] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.576399][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 100.591200][ T5870] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 100.602804][ T1147] hsr_slave_0: left promiscuous mode [ 100.621593][ T5870] usb 4-1: config 179 has no interface number 0 [ 100.647008][ T1147] hsr_slave_1: left promiscuous mode [ 100.656173][ T5870] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 100.667312][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.667361][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.686468][ T917] usb 5-1: Using ep0 maxpacket: 32 [ 100.697659][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.717903][ T917] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 100.736520][ T917] usb 5-1: config 0 interface 0 has no altsetting 0 [ 100.750263][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.757074][ T5870] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 100.778789][ T917] usb 5-1: New USB device found, idVendor=5cf2, idProduct=0c10, bcdDevice= 0.00 [ 100.793939][ T917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.807731][ T5870] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 100.821712][ T1147] veth1_macvtap: left promiscuous mode [ 100.831938][ T1147] veth0_macvtap: left promiscuous mode [ 100.833050][ T5870] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 100.847551][ T1147] veth1_vlan: left promiscuous mode [ 100.853191][ T917] usb 5-1: config 0 descriptor?? [ 100.871168][ T1147] veth0_vlan: left promiscuous mode [ 100.873607][ T5870] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 100.894775][ T5870] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 100.931410][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.974893][ T6071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.423630][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input5 [ 101.795361][ T5918] usb 4-1: USB disconnect, device number 3 [ 101.795382][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 102.256208][ T6107] binder: 6106:6107 ioctl c0306201 80000b40 returned -14 [ 102.357886][ T5833] Bluetooth: hci4: command tx timeout [ 102.732604][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 102.829977][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 103.233933][ T917] usbhid 5-1:0.0: can't add hid device: -71 [ 103.241079][ T917] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 103.264507][ T917] usb 5-1: USB disconnect, device number 2 [ 104.209070][ T6031] chnl_net:caif_netlink_parms(): no params data found [ 104.251732][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.74'. [ 104.387272][ T6136] vxlan0: entered promiscuous mode [ 104.438632][ T5833] Bluetooth: hci4: command tx timeout [ 104.469464][ T1162] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.488869][ T1162] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.568886][ T1162] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.589989][ T1162] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.616442][ T5904] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.789127][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 104.976562][ T5904] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 104.984847][ T5904] usb 1-1: config 0 has no interface number 0 [ 104.996554][ T5904] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.032640][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.046424][ T5904] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 105.071439][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.098581][ T5904] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.112671][ T6031] bridge_slave_0: entered allmulticast mode [ 105.143140][ T6031] bridge_slave_0: entered promiscuous mode [ 105.147811][ T5904] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 105.179548][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.200891][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.206734][ T5904] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 105.218640][ T6031] bridge_slave_1: entered allmulticast mode [ 105.240589][ T6031] bridge_slave_1: entered promiscuous mode [ 105.255853][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.310037][ T5904] usb 1-1: config 0 descriptor?? [ 105.330945][ T5904] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 105.426465][ T5889] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.568305][ T6031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.604555][ T6031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.696719][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 105.699692][ T6031] team0: Port device team_slave_0 added [ 105.711632][ T6031] team0: Port device team_slave_1 added [ 105.742569][ T5889] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.766149][ T5889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 105.800147][ T5889] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 105.827042][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.886203][ T5889] usb 4-1: config 0 descriptor?? [ 105.905473][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.930571][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.956605][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.996842][ T6031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.028190][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.046159][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.072754][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.127926][ T6031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.253207][ T6031] hsr_slave_0: entered promiscuous mode [ 106.261922][ T6031] hsr_slave_1: entered promiscuous mode [ 106.269967][ T6031] debugfs: 'hsr0' already exists in 'hsr' [ 106.289849][ T6031] Cannot create hsr debugfs directory [ 106.385315][ T5889] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 106.406833][ T917] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.519703][ T5833] Bluetooth: hci4: command tx timeout [ 106.816544][ T917] usb 3-1: Using ep0 maxpacket: 32 [ 106.824612][ T917] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 106.860617][ T917] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 106.886390][ T917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 106.916735][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 106.946509][ T917] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 106.987187][ T917] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 107.030960][ T917] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 107.042604][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.077675][ T917] usb 3-1: config 0 descriptor?? [ 107.119610][ T6031] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 107.158475][ T6031] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 107.186969][ T6031] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 107.217165][ T6031] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 107.330883][ T917] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 107.361433][ T5918] usb 1-1: USB disconnect, device number 2 [ 107.425944][ T5918] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 107.575632][ T5960] usb 3-1: USB disconnect, device number 2 [ 107.614777][ T5960] usblp1: removed [ 107.662758][ T6031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.738124][ T6031] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.789058][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.796366][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.855601][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.863013][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.904902][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 108.091554][ T6031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.259574][ T5889] usb 4-1: USB disconnect, device number 4 [ 108.329598][ T6031] veth0_vlan: entered promiscuous mode [ 108.463693][ T6031] veth1_vlan: entered promiscuous mode [ 108.649849][ T6031] veth0_macvtap: entered promiscuous mode [ 108.698561][ T6031] veth1_macvtap: entered promiscuous mode [ 108.790468][ T5904] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.831524][ T6031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.890621][ T6031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.979015][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 108.990603][ T1147] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.018843][ T1147] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.032139][ T5904] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 109.055110][ T5904] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 109.106403][ T1147] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.127710][ T1147] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.137117][ T5904] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.196396][ T5904] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 109.234690][ T5904] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 109.266047][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.296573][ T5904] usb 3-1: Product: syz [ 109.348551][ T5904] usb 3-1: Manufacturer: syz [ 109.360882][ T5904] usb 3-1: SerialNumber: syz [ 109.416835][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 109.489365][ T5904] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input6 [ 109.672148][ T5904] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 109.717981][ T5904] (id 0x00) [ 109.785964][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.849919][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.924867][ T5904] rc_core: IR keymap rc-imon-pad not found [ 109.931495][ T5904] Registered IR keymap rc-empty [ 109.943119][ T5904] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 109.958602][ T5904] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 109.994769][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.004188][ T5904] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 110.018108][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.041197][ T5904] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input7 [ 110.090858][ T5904] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:3> initialized [ 110.362314][ T6212] imon:vfd_write: invalid payload size [ 110.408565][ T917] usb 3-1: USB disconnect, device number 3 [ 110.916899][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 110.992639][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 113.038731][ T5889] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.196506][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 113.207422][ T5889] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 113.232074][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 113.257183][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.119'. [ 113.257993][ T5889] usb 5-1: Product: syz [ 113.276556][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.119'. [ 113.286431][ T5889] usb 5-1: Manufacturer: syz [ 113.301593][ T5889] usb 5-1: SerialNumber: syz [ 113.334641][ T5889] usb 5-1: config 0 descriptor?? [ 113.472124][ T6292] input: syz1 as /devices/virtual/input/input8 [ 113.723109][ T917] usb 5-1: USB disconnect, device number 3 [ 114.133749][ T6311] loop6: detected capacity change from 0 to 7 [ 114.151781][ T6311] Dev loop6: unable to read RDB block 7 [ 114.159728][ T6311] loop6: AHDI p3 p4 [ 114.163839][ T6311] loop6: partition table partially beyond EOD, truncated [ 114.174052][ T6311] loop6: p3 start 1869967406 is beyond EOD, truncated [ 115.550964][ T5904] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 115.766689][ T5904] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.786423][ T5904] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 115.815166][ T5904] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.848228][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.904750][ T6335] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 115.982113][ T5904] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 116.495254][ T5870] usb 6-1: USB disconnect, device number 2 [ 116.855415][ T30] audit: type=1326 audit(1762461897.335:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 116.904881][ T30] audit: type=1326 audit(1762461897.365:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 116.978928][ T30] audit: type=1326 audit(1762461897.365:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 117.033082][ T30] audit: type=1326 audit(1762461897.365:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 117.058552][ T30] audit: type=1326 audit(1762461897.365:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 117.134450][ T30] audit: type=1326 audit(1762461897.365:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 117.162287][ T30] audit: type=1326 audit(1762461897.365:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 117.255815][ T30] audit: type=1326 audit(1762461897.365:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 117.337526][ T30] audit: type=1326 audit(1762461897.365:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 117.379185][ T30] audit: type=1326 audit(1762461897.365:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 117.816855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.826463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.859889][ T5904] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.026896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.029449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.044739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.105566][ T5904] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 118.124736][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.156568][ T5918] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.165094][ T5904] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 118.183528][ T5904] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 118.202990][ T5904] usb 4-1: Manufacturer: syz [ 118.212354][ T5904] usb 4-1: config 0 descriptor?? [ 118.347492][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.384847][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.396530][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.412388][ T5904] rc_core: IR keymap rc-hauppauge not found [ 118.436446][ T5904] Registered IR keymap rc-empty [ 118.443091][ T5904] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 118.457684][ T5918] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.487517][ T5904] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 118.499157][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.512768][ T5918] usb 1-1: config 0 descriptor?? [ 118.540687][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 118.554236][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.5.160'. [ 118.574973][ T5904] usb 4-1: USB disconnect, device number 5 [ 118.582611][ T6399] netlink: 'syz.5.160': attribute type 7 has an invalid length. [ 118.600609][ T6399] netlink: 'syz.5.160': attribute type 8 has an invalid length. [ 118.623416][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.160'. [ 118.865712][ T6407] syz.4.163 uses obsolete (PF_INET,SOCK_PACKET) [ 119.028181][ T5918] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 120.025252][ T6436] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.076518][ T1213] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.292791][ T1213] usb 4-1: Using ep0 maxpacket: 32 [ 120.329826][ T1213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.361580][ T1213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.388436][ C1] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 120.406463][ T1213] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 120.458300][ T1213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.523543][ T1213] usb 4-1: config 0 descriptor?? [ 120.569402][ T1213] hub 4-1:0.0: USB hub found [ 120.782204][ T1213] hub 4-1:0.0: 1 port detected [ 121.372387][ T917] usb 1-1: USB disconnect, device number 3 [ 121.461399][ T5918] hub 4-1:0.0: activate --> -90 [ 121.669454][ T5904] usb 4-1: USB disconnect, device number 6 [ 122.419570][ T6497] netlink: 'syz.3.191': attribute type 4 has an invalid length. [ 122.453015][ T6497] netlink: 'syz.3.191': attribute type 4 has an invalid length. [ 122.516518][ T5904] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 122.706942][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.750738][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.787755][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.844620][ T5904] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.886520][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.920947][ T5904] usb 5-1: config 0 descriptor?? [ 123.186594][ T5960] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 123.376849][ T5960] usb 4-1: Using ep0 maxpacket: 8 [ 123.390337][ T5904] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 123.425780][ T5960] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 123.445032][ T5960] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.475555][ T5960] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.506366][ T5960] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.598166][ T5904] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 123.613818][ T5960] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.671355][ T5960] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.698967][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.779048][ T5904] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 123.809309][ T5904] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 123.830094][ T5904] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 123.856428][ T5904] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 123.877705][ T5904] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 123.909905][ T5904] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 123.966913][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 123.986441][ T5960] usb 4-1: GET_CAPABILITIES returned 0 [ 123.994386][ T5960] usbtmc 4-1:16.0: can't read capabilities [ 124.016450][ T5904] usb 6-1: Product: syz [ 124.020689][ T5904] usb 6-1: Manufacturer: syz [ 124.082979][ T5904] cdc_wdm 6-1:1.0: skipping garbage [ 124.092409][ T5904] cdc_wdm 6-1:1.0: skipping garbage [ 124.110533][ T5904] cdc_wdm 6-1:1.0: cdc-wdm2: USB WDM device [ 124.146808][ T5904] cdc_wdm 6-1:1.0: Unknown control protocol [ 124.288926][ T5870] usb 4-1: USB disconnect, device number 7 [ 124.717504][ C1] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 124.801221][ T43] usb 6-1: USB disconnect, device number 3 [ 125.503397][ T24] usb 5-1: USB disconnect, device number 4 [ 125.724646][ T6564] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 68 [ 128.227308][ T5904] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 128.401191][ T5904] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.421056][ T5904] usb 6-1: config 0 has no interfaces? [ 128.438920][ T5904] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.457782][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.502305][ T5904] usb 6-1: config 0 descriptor?? [ 128.997896][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 129.054449][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 129.082574][ T6638] input: syz1 as /devices/virtual/input/input10 [ 129.522827][ T5904] usb 6-1: USB disconnect, device number 4 [ 130.906512][ T917] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 131.079544][ T917] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 131.101195][ T917] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 131.130882][ T917] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 131.158282][ T917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.174073][ T917] usb 6-1: Product: syz [ 131.186619][ T917] usb 6-1: Manufacturer: syz [ 131.206694][ T917] usb 6-1: SerialNumber: syz [ 131.248515][ T917] usb 6-1: config 0 descriptor?? [ 131.254676][ T6659] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 131.298388][ T6659] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 131.564025][ T6659] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 131.595000][ T6659] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 131.919203][ T6689] mmap: syz.2.257 (6689) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 132.056241][ T917] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 132.662916][ T917] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 132.774709][ T917] usb 6-1: USB disconnect, device number 5 [ 133.246696][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.253293][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.467941][ T6710] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.266'. [ 133.543057][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.0.265'. [ 133.756829][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 133.756848][ T30] audit: type=1326 audit(1762461914.245:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.2.270" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d539 code=0x0 [ 133.927652][ T1213] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 134.086539][ T1213] usb 6-1: Using ep0 maxpacket: 8 [ 134.093268][ T1213] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.105170][ T1213] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.115129][ T1213] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.126842][ T1213] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.145934][ T1213] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.155839][ T1213] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.381998][ T1213] usb 6-1: GET_CAPABILITIES returned 0 [ 134.387792][ T1213] usbtmc 6-1:16.0: can't read capabilities [ 134.650125][ T6719] usb 6-1: usbtmc_ioctl_clear_in_halt returned -32 [ 134.670602][ T5960] usb 6-1: USB disconnect, device number 6 [ 134.993127][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.282'. [ 135.097055][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.282'. [ 135.660490][ T6770] netlink: 750 bytes leftover after parsing attributes in process `syz.4.290'. [ 136.106519][ T5960] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.226847][ T917] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 136.277430][ T5960] usb 3-1: Using ep0 maxpacket: 16 [ 136.287927][ T5960] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 136.309505][ T5960] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.321585][ T5960] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.333377][ T5960] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.342917][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.351265][ T5960] usb 3-1: Product: syz [ 136.355623][ T5960] usb 3-1: Manufacturer: syz [ 136.362206][ T5960] usb 3-1: SerialNumber: syz [ 136.393100][ T917] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.414784][ T917] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.448173][ T917] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 136.487429][ T917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 136.496057][ T917] usb 4-1: SerialNumber: syz [ 136.613846][ T6797] trusted_key: syz.0.302 sent an empty control message without MSG_MORE. [ 136.797968][ T5960] usb 3-1: 0:2 : does not exist [ 137.414418][ T917] usb 4-1: 0:2 : does not exist [ 137.447870][ T917] usb 4-1: USB disconnect, device number 8 [ 137.487881][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 137.623894][ T24] usb 3-1: USB disconnect, device number 4 [ 138.116555][ T6783] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 138.116663][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.946960][ T6783] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 138.959177][ T6783] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 138.969060][ T6783] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 138.975243][ T6783] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 138.984093][ T6783] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 138.996265][ T6783] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 139.008159][ T6783] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 139.016691][ T6783] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 139.027347][ T6783] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.034786][ T6783] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 139.049220][ T6783] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 139.057909][ T6783] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 139.064937][ T6783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 139.079111][ T6783] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 139.526416][ T5960] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 139.698721][ T5960] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.724388][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 139.749939][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 139.782885][ T5960] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.830626][ T5960] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.861385][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.889437][ T5960] usb 1-1: config 0 descriptor?? [ 140.086401][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 140.201022][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.246408][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 140.257344][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.277767][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.296414][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 140.305512][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.332674][ T24] usb 3-1: config 0 descriptor?? [ 140.350639][ T5960] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 140.356822][ T24] hub 3-1:0.0: USB hub found [ 140.412781][ T5960] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 140.591210][ T24] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 140.850211][ T24] hid-generic 0003:046D:C31C.0005: item fetching failed at offset 0/1 [ 140.861809][ T24] hid-generic 0003:046D:C31C.0005: probe with driver hid-generic failed with error -22 [ 141.004174][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.010371][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.076699][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 141.083301][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.226769][ T24] usb 3-1: USB disconnect, device number 5 [ 141.476973][ T1213] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 141.640723][ T1213] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 141.649065][ T1213] usb 5-1: config 0 has no interface number 0 [ 141.661518][ T1213] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 141.696532][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.723371][ T1213] usb 5-1: Product: syz [ 141.743458][ T1213] usb 5-1: Manufacturer: syz [ 141.754464][ T1213] usb 5-1: SerialNumber: syz [ 141.778793][ T1213] usb 5-1: config 0 descriptor?? [ 141.836471][ T5960] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 141.986492][ T5960] usb 4-1: Using ep0 maxpacket: 32 [ 141.993729][ T5960] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.005132][ T5960] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 142.018622][ T5960] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 142.032327][ T5960] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.042135][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.050487][ T5960] usb 4-1: Product: syz [ 142.054707][ T5960] usb 4-1: Manufacturer: syz [ 142.059866][ T5960] usb 4-1: SerialNumber: syz [ 142.088012][ T43] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 142.194256][ T1213] usb 5-1: Firmware: major: 84, minor: 103, hardware type: UNKNOWN (73) [ 142.251548][ T43] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 142.260941][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.272756][ T43] usb 3-1: config 0 descriptor?? [ 142.278319][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.397232][ T1213] usb 5-1: Read permanent extended address 52:39:35:8d:79:3e:bf:c5 from device [ 142.408768][ T1213] usb 5-1: atusb_probe: initialization failed, error = -524 [ 142.417338][ T1213] atusb 5-1:0.128: probe with driver atusb failed with error -524 [ 142.507996][ T917] usb 1-1: USB disconnect, device number 4 [ 142.652696][ T24] usb 5-1: USB disconnect, device number 5 [ 143.012277][ T917] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 143.076446][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.083009][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.156541][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.162820][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 143.198973][ T917] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.227352][ T917] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.248056][ T917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.256432][ T917] usb 1-1: Product: syz [ 143.260953][ T917] usb 1-1: Manufacturer: syz [ 143.265633][ T917] usb 1-1: SerialNumber: syz [ 143.299605][ T5960] cdc_ncm 4-1:1.0: bind() failure [ 143.311975][ T5960] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 143.322513][ T5960] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 143.332802][ T5960] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 143.361450][ T5960] usb 4-1: USB disconnect, device number 9 [ 143.555190][ T43] pegasus 3-1:0.0: can't reset MAC [ 143.561188][ T5920] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 143.570404][ T43] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 143.583940][ T43] usb 3-1: USB disconnect, device number 6 [ 143.729413][ T5920] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 143.740537][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.753591][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.763786][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 143.780468][ T5920] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 143.789604][ T5920] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 143.798554][ T5920] usb 5-1: Manufacturer: syz [ 143.806412][ T5920] usb 5-1: config 0 descriptor?? [ 144.226067][ T5920] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 144.238918][ T5920] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 144.292815][ T917] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 144.321124][ T917] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 144.535861][ T917] usb 1-1: USB disconnect, device number 5 [ 144.550291][ T917] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 145.156554][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.162843][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.239787][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.246126][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.666765][ T917] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 145.907984][ T917] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 145.923400][ T917] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 145.964087][ T917] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 145.980393][ T917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.069317][ T6917] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.108715][ T917] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.383057][ T5904] usb 5-1: USB disconnect, device number 6 [ 146.420388][ T1213] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 146.496410][ T5960] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 146.616558][ T5918] usb 1-1: USB disconnect, device number 6 [ 146.629245][ T1213] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.629297][ T1213] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 146.629326][ T1213] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 146.640429][ T1213] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.640462][ T1213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.640482][ T1213] usb 4-1: Product: syz [ 146.640498][ T1213] usb 4-1: Manufacturer: syz [ 146.640512][ T1213] usb 4-1: SerialNumber: syz [ 146.647914][ T5960] usb 6-1: Using ep0 maxpacket: 32 [ 146.664712][ T5960] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 146.664741][ T5960] usb 6-1: config 0 has no interface number 0 [ 146.664771][ T5960] usb 6-1: config 0 interface 196 has no altsetting 0 [ 146.678260][ T5960] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 146.678325][ T5960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.678346][ T5960] usb 6-1: Product: syz [ 146.678361][ T5960] usb 6-1: Manufacturer: syz [ 146.678377][ T5960] usb 6-1: SerialNumber: syz [ 146.684793][ T5960] usb 6-1: config 0 descriptor?? [ 146.909700][ T5960] ipheth 6-1:0.196: Unable to find endpoints [ 146.929534][ T5960] usb 6-1: USB disconnect, device number 7 [ 147.516515][ T43] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 147.556853][ T5920] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 147.598875][ T6950] netlink: 20 bytes leftover after parsing attributes in process `syz.5.351'. [ 147.682992][ T1213] cdc_ncm 4-1:1.0: bind() failure [ 147.686357][ T43] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.696906][ T1213] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 147.708476][ T43] usb 3-1: config 0 has no interface number 0 [ 147.716615][ T1213] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 147.720515][ T43] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 147.735622][ T1213] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 147.749308][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 147.755625][ T1213] usb 4-1: USB disconnect, device number 10 [ 147.768800][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.786082][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.794823][ T5920] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 147.805147][ T43] usb 3-1: Product: syz [ 147.815465][ T43] usb 3-1: Manufacturer: syz [ 147.825660][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.833913][ T43] usb 3-1: SerialNumber: syz [ 147.856245][ T5920] usb 1-1: config 0 descriptor?? [ 147.863087][ T43] usb 3-1: config 0 descriptor?? [ 147.880166][ T5920] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 148.075422][ T43] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 148.089786][ T43] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 148.100638][ T43] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 148.110390][ T43] usb 3-1: media controller created [ 148.135149][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.216569][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 148.256429][ T917] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 148.330620][ T43] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 148.379224][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.410980][ T24] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 148.426105][ T917] usb 5-1: Using ep0 maxpacket: 8 [ 148.443099][ T917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 148.455317][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.471959][ T917] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 148.482913][ T24] usb 6-1: config 0 descriptor?? [ 148.489823][ T917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.516973][ T917] usb 5-1: config 0 descriptor?? [ 148.747887][ T917] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 148.942715][ T24] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 148.993146][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0007/input/input13 [ 149.016496][ T917] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 149.093027][ T5920] gspca_vc032x: reg_w err -71 [ 149.102261][ T5920] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 149.126545][ T5920] usb 1-1: USB disconnect, device number 7 [ 149.190056][ T24] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 149.206511][ T917] usb 4-1: Using ep0 maxpacket: 32 [ 149.218101][ T917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.231189][ T917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.268686][ T917] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 149.270273][ T1213] usb 5-1: USB disconnect, device number 7 [ 149.306385][ T917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.346480][ T917] usb 4-1: config 0 descriptor?? [ 149.412359][ T43] usb 3-1: USB disconnect, device number 7 [ 149.737953][ T6971] syzkaller1: entered promiscuous mode [ 149.743926][ T6971] syzkaller1: entered allmulticast mode [ 149.792117][ T917] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 150.028048][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 150.139598][ T1213] usb 4-1: USB disconnect, device number 11 [ 151.201699][ T5960] usb 6-1: USB disconnect, device number 8 [ 152.086927][ T5960] usb 6-1: new high-speed USB device number 9 using dummy_hcd Stopping sshd: [ 152.282732][ T5960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.304785][ T5960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 stopped /usr/sbin/sshd (pid 5586) [ 152.370218][ T5960] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 OK [ 152.428573][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.512632][ T5960] usb 6-1: config 0 descriptor?? Stopping crond: stopped /usr/sbin/crond (pid 5571) OK Stopping dhcpcd... [ 153.026514][ T1213] usb 3-1: new high-speed USB device number 8 using dummy_hcd stopped /sbin/dhcpcd (pid 5493) [ 153.167640][ T5960] usb 6-1: string descriptor 0 read error: -22 [ 153.184785][ T1213] usb 3-1: Using ep0 maxpacket: 32 [ 153.195190][ T1213] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 153.204684][ T1213] usb 3-1: config 0 has no interface number 0 [ 153.212026][ T1213] usb 3-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 153.239530][ T1213] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 153.255826][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.299994][ T1213] usb 3-1: Product: syz [ 153.311473][ T1213] usb 3-1: Manufacturer: syz [ 153.334277][ T1213] usb 3-1: SerialNumber: syz [ 153.368942][ T5960] uclogic 0003:256C:006D.0009: interface is invalid, ignoring [ 153.379916][ T1213] usb 3-1: config 0 descriptor?? [ 153.415260][ T1213] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b Stopping network: [ 153.645943][ T5960] usb 6-1: USB disconnect, device number 9 [ 153.780620][ T7049] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 154.241071][ T1213] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 154.487807][ T5904] usb 3-1: USB disconnect, device number 8 [ 154.804348][ T1213] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 154.998631][ T1213] usb 6-1: Using ep0 maxpacket: 32 [ 155.007732][ T1213] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 155.026755][ T1213] usb 6-1: config 0 has no interface number 0 [ 155.046475][ T1213] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 155.081372][ T1213] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 155.101018][ T1213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.169261][ T1213] usb 6-1: Product: syz [ 155.173488][ T1213] usb 6-1: Manufacturer: syz [ 155.219537][ T1213] usb 6-1: SerialNumber: syz [ 155.239214][ T1213] usb 6-1: config 0 descriptor?? [ 155.269939][ T1213] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 155.306440][ T1213] em28xx 6-1:0.132: Video interface 132 found: OK [ 155.546459][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 155.682576][ T1213] em28xx 6-1:0.132: unknown em28xx chip ID (0) Stopping iptables: [ 155.750610][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.790644][ T43] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 155.833215][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.898389][ T43] usb 4-1: config 0 descriptor?? [ 155.944064][ T43] pwc: Askey VC010 type 2 USB webcam detected. OK [ 156.216567][ T917] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 156.336105][ T1213] em28xx 6-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 156.375491][ T1213] em28xx 6-1:0.132: failed to read eeprom (err=-5) [ 156.398946][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 156.413590][ T917] usb 1-1: Using ep0 maxpacket: 32 [ 156.428294][ T1213] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 156.431639][ T43] pwc: recv_control_msg error -32 req 02 val 2700 Stopping system message bus: [ 156.455200][ T917] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 156.468748][ T917] usb 1-1: config 0 has no interface number 0 [ 156.502144][ T917] usb 1-1: config 0 interface 230 has no altsetting 0 [ 156.536510][ T1213] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 156.556356][ T1213] em28xx 6-1:0.132: analog set to bulk mode. [ 156.569684][ T917] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 156.589737][ T917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.605491][ T917] usb 1-1: Product: syz [ 156.608023][ T5904] em28xx 6-1:0.132: Registering V4L2 extension [ 156.610153][ T917] usb 1-1: Manufacturer: syz [ 156.626726][ T1213] usb 6-1: USB disconnect, device number 10 [ 156.639277][ T917] usb 1-1: SerialNumber: syz [ 156.708192][ T1213] em28xx 6-1:0.132: Disconnecting em28xx [ 156.731247][ T917] usb 1-1: config 0 descriptor?? [ 156.771164][ T917] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 156.813591][ T917] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 156.880651][ T43] pwc: recv_control_msg error -71 req 04 val 1300 [ 156.899538][ T43] pwc: recv_control_msg error -71 req 04 val 1400 [ 156.919319][ T43] pwc: recv_control_msg error -71 req 02 val 2000 [ 156.936902][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 156.948094][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 156.965441][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 156.992473][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 157.006480][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 157.013540][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 157.029317][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 157.076448][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 157.113893][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 157.150880][ T43] pwc: Registered as video103. [ 157.197779][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 157.262067][ T43] usb 4-1: USB disconnect, device number 12 [ 157.316928][ T5904] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 157.324744][ T5904] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 157.386376][ T5904] em28xx 6-1:0.132: No AC97 audio processor [ 157.457675][ T5904] usb 6-1: Decoder not found [ 157.474996][ T5904] em28xx 6-1:0.132: failed to create media graph [ 157.498136][ T5904] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 157.551696][ T7119] ================================================================== [ 157.557264][ T5904] em28xx 6-1:0.132: Remote control support is not available for this card. [ 157.559992][ T7119] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 157.560021][ T7119] Read of size 8 at addr ffff88807a87c740 by task v4l_id/7119 [ 157.583453][ T7119] [ 157.585816][ T7119] CPU: 1 UID: 0 PID: 7119 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 157.585840][ T7119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 157.585851][ T7119] Call Trace: [ 157.585859][ T7119] [ 157.585867][ T7119] dump_stack_lvl+0x189/0x250 [ 157.585898][ T7119] ? __virt_addr_valid+0x1c8/0x5c0 [ 157.585924][ T7119] ? rcu_is_watching+0x15/0xb0 [ 157.585946][ T7119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.585970][ T7119] ? rcu_is_watching+0x15/0xb0 [ 157.585990][ T7119] ? lock_release+0x4b/0x3e0 [ 157.586009][ T7119] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 157.586034][ T7119] ? __virt_addr_valid+0x1c8/0x5c0 [ 157.586058][ T7119] ? __virt_addr_valid+0x4a5/0x5c0 [ 157.586084][ T7119] print_report+0xca/0x240 [ 157.586106][ T7119] ? v4l2_fh_open+0xac/0x420 [ 157.586123][ T7119] kasan_report+0x118/0x150 [ 157.586143][ T7119] ? v4l2_fh_open+0xac/0x420 [ 157.586164][ T7119] v4l2_fh_open+0xac/0x420 [ 157.586182][ T7119] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.586212][ T7119] em28xx_v4l2_open+0x157/0x9a0 [ 157.586244][ T7119] v4l2_open+0x1bf/0x3a0 [ 157.586266][ T7119] chrdev_open+0x4cc/0x5e0 [ 157.586284][ T7119] ? __pfx_chrdev_open+0x10/0x10 [ 157.586300][ T7119] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 157.586320][ T7119] ? __pfx_chrdev_open+0x10/0x10 [ 157.586334][ T7119] do_dentry_open+0x953/0x13f0 [ 157.586358][ T7119] vfs_open+0x3b/0x340 [ 157.586375][ T7119] ? path_openat+0x2ecd/0x3830 [ 157.586397][ T7119] path_openat+0x2ee5/0x3830 [ 157.586441][ T7119] ? __pfx_path_openat+0x10/0x10 [ 157.586470][ T7119] do_filp_open+0x1fa/0x410 [ 157.586491][ T7119] ? __lock_acquire+0xab9/0xd20 [ 157.586507][ T7119] ? __pfx_do_filp_open+0x10/0x10 [ 157.586537][ T7119] ? _raw_spin_unlock+0x28/0x50 [ 157.586558][ T7119] ? alloc_fd+0x64c/0x6c0 [ 157.586589][ T7119] do_sys_openat2+0x121/0x1c0 [ 157.586611][ T7119] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.586632][ T7119] ? exc_page_fault+0x82/0x100 [ 157.586658][ T7119] ? do_user_addr_fault+0xc85/0x1380 [ 157.586677][ T7119] __x64_sys_openat+0x138/0x170 [ 157.586698][ T7119] do_syscall_64+0xfa/0xfa0 [ 157.586723][ T7119] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.586747][ T7119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.586766][ T7119] ? clear_bhb_loop+0x60/0xb0 [ 157.586787][ T7119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.586805][ T7119] RIP: 0033:0x7f8bb80a7407 [ 157.586820][ T7119] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 157.586834][ T7119] RSP: 002b:00007ffdb5c90cc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 157.586854][ T7119] RAX: ffffffffffffffda RBX: 00007f8bb873f880 RCX: 00007f8bb80a7407 [ 157.586867][ T7119] RDX: 0000000000000000 RSI: 00007ffdb5c91f1d RDI: ffffffffffffff9c [ 157.586880][ T7119] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 157.586891][ T7119] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 157.586902][ T7119] R13: 00007ffdb5c90f10 R14: 00007f8bb8844000 R15: 00005629291ce4d8 [ 157.586923][ T7119] [ 157.586930][ T7119] [ 157.596533][ T1213] em28xx 6-1:0.132: Closing input extension [ 157.605953][ T7119] Allocated by task 5904: [ 157.605972][ T7119] kasan_save_track+0x3e/0x80 [ 157.605998][ T7119] __kasan_kmalloc+0x93/0xb0 [ 157.606019][ T7119] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 157.606041][ T7119] em28xx_v4l2_init+0x10b/0x2e70 [ 157.606064][ T7119] em28xx_init_extension+0x120/0x1c0 [ 157.606083][ T7119] process_scheduled_works+0xae1/0x17b0 [ 157.606101][ T7119] worker_thread+0x8a0/0xda0 [ 157.606118][ T7119] kthread+0x711/0x8a0 [ 157.606137][ T7119] ret_from_fork+0x4bc/0x870 [ 157.606152][ T7119] ret_from_fork_asm+0x1a/0x30 [ 157.606166][ T7119] [ 157.606171][ T7119] Freed by task 5904: [ 157.606179][ T7119] kasan_save_track+0x3e/0x80 [ 157.606199][ T7119] __kasan_save_free_info+0x46/0x50 [ 157.606218][ T7119] __kasan_slab_free+0x5c/0x80 [ 157.606240][ T7119] kfree+0x19a/0x6d0 [ 157.606259][ T7119] em28xx_v4l2_init+0x1683/0x2e70 [ 157.985025][ T7119] em28xx_init_extension+0x120/0x1c0 [ 157.990353][ T7119] process_scheduled_works+0xae1/0x17b0 [ 157.995910][ T7119] worker_thread+0x8a0/0xda0 [ 158.000502][ T7119] kthread+0x711/0x8a0 [ 158.004575][ T7119] ret_from_fork+0x4bc/0x870 [ 158.009165][ T7119] ret_from_fork_asm+0x1a/0x30 [ 158.013940][ T7119] [ 158.016473][ T7119] The buggy address belongs to the object at ffff88807a87c000 [ 158.016473][ T7119] which belongs to the cache kmalloc-8k of size 8192 [ 158.030708][ T7119] The buggy address is located 1856 bytes inside of [ 158.030708][ T7119] freed 8192-byte region [ffff88807a87c000, ffff88807a87e000) [ 158.044851][ T7119] [ 158.047179][ T7119] The buggy address belongs to the physical page: [ 158.053589][ T7119] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a878 [ 158.062438][ T7119] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 158.071174][ T7119] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 158.078723][ T7119] page_type: f5(slab) [ 158.082793][ T7119] raw: 00fff00000000040 ffff88801a027280 dead000000000122 0000000000000000 [ 158.091374][ T7119] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 158.100063][ T7119] head: 00fff00000000040 ffff88801a027280 dead000000000122 0000000000000000 [ 158.108946][ T7119] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 158.117714][ T7119] head: 00fff00000000003 ffffea0001ea1e01 00000000ffffffff 00000000ffffffff [ 158.126396][ T7119] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 158.135100][ T7119] page dumped because: kasan: bad access detected [ 158.141538][ T7119] page_owner tracks the page as allocated [ 158.147441][ T7119] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7104, tgid 7104 (S30dbus), ts 156498803659, free_ts 156481428970 [ 158.167957][ T7119] post_alloc_hook+0x240/0x2a0 [ 158.172762][ T7119] get_page_from_freelist+0x2365/0x2440 [ 158.178363][ T7119] __alloc_frozen_pages_noprof+0x181/0x370 [ 158.184264][ T7119] alloc_pages_mpol+0x232/0x4a0 [ 158.189128][ T7119] allocate_slab+0x96/0x350 [ 158.193640][ T7119] ___slab_alloc+0xe94/0x18a0 [ 158.198432][ T7119] __slab_alloc+0x65/0x100 [ 158.202876][ T7119] __kmalloc_cache_noprof+0x411/0x6f0 [ 158.208259][ T7119] tomoyo_init_log+0x111f/0x1f70 [ 158.213227][ T7119] tomoyo_supervisor+0x340/0x1480 [ 158.218258][ T7119] tomoyo_env_perm+0x149/0x1e0 [ 158.223024][ T7119] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 158.228659][ T7119] tomoyo_bprm_check_security+0x11c/0x180 [ 158.234420][ T7119] security_bprm_check+0x89/0x270 [ 158.239604][ T7119] bprm_execve+0x8ee/0x1450 [ 158.244147][ T7119] do_execveat_common+0x510/0x6a0 [ 158.249185][ T7119] page last free pid 7104 tgid 7104 stack trace: [ 158.255512][ T7119] __free_frozen_pages+0xbc4/0xd30 [ 158.260720][ T7119] __put_partials+0x146/0x170 [ 158.265533][ T7119] put_cpu_partial+0x1f2/0x2e0 [ 158.270429][ T7119] __slab_free+0x2b9/0x390 [ 158.274862][ T7119] qlist_free_all+0x97/0x140 [ 158.279562][ T7119] kasan_quarantine_reduce+0x148/0x160 [ 158.285031][ T7119] __kasan_slab_alloc+0x22/0x80 [ 158.290163][ T7119] kmem_cache_alloc_noprof+0x367/0x6e0 [ 158.295626][ T7119] getname_flags+0xb8/0x540 [ 158.300222][ T7119] __x64_sys_execve+0x7a/0xb0 [ 158.304942][ T7119] do_syscall_64+0xfa/0xfa0 [ 158.309467][ T7119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.315372][ T7119] [ 158.317699][ T7119] Memory state around the buggy address: [ 158.323326][ T7119] ffff88807a87c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.331387][ T7119] ffff88807a87c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.339449][ T7119] >ffff88807a87c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.347685][ T7119] ^ [ 158.353835][ T7119] ffff88807a87c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.362067][ T7119] ffff88807a87c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.370212][ T7119] ================================================================== done [ 158.500127][ T7119] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 158.507503][ T7119] CPU: 0 UID: 0 PID: 7119 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 158.516475][ T7119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.526825][ T7119] Call Trace: [ 158.530135][ T7119] [ 158.533095][ T7119] dump_stack_lvl+0x99/0x250 [ 158.537894][ T7119] ? __asan_memcpy+0x40/0x70 [ 158.542513][ T7119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.547730][ T7119] ? __pfx__printk+0x10/0x10 [ 158.552362][ T7119] vpanic+0x237/0x6d0 [ 158.556381][ T7119] ? __pfx_vpanic+0x10/0x10 [ 158.560916][ T7119] ? preempt_schedule+0xae/0xc0 [ 158.565779][ T7119] ? __pfx_preempt_schedule+0x10/0x10 [ 158.571161][ T7119] panic+0xb9/0xc0 [ 158.574983][ T7119] ? __pfx_panic+0x10/0x10 [ 158.579409][ T7119] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 158.585355][ T7119] ? is_module_address+0x17/0xf0 [ 158.590474][ T7119] ? v4l2_fh_open+0xac/0x420 [ 158.595073][ T7119] check_panic_on_warn+0x89/0xb0 [ 158.600020][ T7119] ? v4l2_fh_open+0xac/0x420 [ 158.604632][ T7119] end_report+0x78/0x160 [ 158.608890][ T7119] kasan_report+0x129/0x150 [ 158.613481][ T7119] ? v4l2_fh_open+0xac/0x420 [ 158.618192][ T7119] v4l2_fh_open+0xac/0x420 [ 158.622608][ T7119] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 158.628625][ T7119] em28xx_v4l2_open+0x157/0x9a0 [ 158.633489][ T7119] v4l2_open+0x1bf/0x3a0 [ 158.637821][ T7119] chrdev_open+0x4cc/0x5e0 [ 158.642253][ T7119] ? __pfx_chrdev_open+0x10/0x10 [ 158.647193][ T7119] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 158.653621][ T7119] ? __pfx_chrdev_open+0x10/0x10 [ 158.658730][ T7119] do_dentry_open+0x953/0x13f0 [ 158.663503][ T7119] vfs_open+0x3b/0x340 [ 158.667598][ T7119] ? path_openat+0x2ecd/0x3830 [ 158.672408][ T7119] path_openat+0x2ee5/0x3830 [ 158.677328][ T7119] ? __pfx_path_openat+0x10/0x10 [ 158.682290][ T7119] do_filp_open+0x1fa/0x410 [ 158.686796][ T7119] ? __lock_acquire+0xab9/0xd20 [ 158.691683][ T7119] ? __pfx_do_filp_open+0x10/0x10 [ 158.696719][ T7119] ? _raw_spin_unlock+0x28/0x50 [ 158.701676][ T7119] ? alloc_fd+0x64c/0x6c0 [ 158.706087][ T7119] do_sys_openat2+0x121/0x1c0 [ 158.710796][ T7119] ? __pfx_do_sys_openat2+0x10/0x10 [ 158.716010][ T7119] ? exc_page_fault+0x82/0x100 [ 158.720787][ T7119] ? do_user_addr_fault+0xc85/0x1380 [ 158.726289][ T7119] __x64_sys_openat+0x138/0x170 [ 158.731196][ T7119] do_syscall_64+0xfa/0xfa0 [ 158.735716][ T7119] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.740922][ T7119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.747164][ T7119] ? clear_bhb_loop+0x60/0xb0 [ 158.751846][ T7119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.757741][ T7119] RIP: 0033:0x7f8bb80a7407 [ 158.762245][ T7119] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 158.782288][ T7119] RSP: 002b:00007ffdb5c90cc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 158.790822][ T7119] RAX: ffffffffffffffda RBX: 00007f8bb873f880 RCX: 00007f8bb80a7407 [ 158.798799][ T7119] RDX: 0000000000000000 RSI: 00007ffdb5c91f1d RDI: ffffffffffffff9c [ 158.806880][ T7119] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 158.814861][ T7119] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 158.823009][ T7119] R13: 00007ffdb5c90f10 R14: 00007f8bb8844000 R15: 00005629291ce4d8 [ 158.831192][ T7119] [ 158.834720][ T7119] Kernel Offset: disabled [ 158.839124][ T7119] Rebooting in 86400 seconds..