last executing test programs: 3.617971376s ago: executing program 3 (id=1332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x624, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xf5, 0xe, {{{}, {}, @device_a, @device_a, @from_mac=@broadcast}, 0x0, @random=0x8000, 0x1, @void, @void, @val={0x3, 0x1, 0xab}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x5, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0xf6, 0x21}}, @void, [{0xdd, 0xbf, "dc87ee5f96fb9c6d1b437893e8d0fd10fc4c9a63ace18b233bcc1b0303d808bcd7cdf437bbfdbdaf4da1fac91d85a0680f9feff0f45c9485066c52ce826ad95852e7844ba4f1719120d745160453bf640733f4595550f4ab917d759f6b8bb823abb958ae197c5777cb973b76694fe4afe635f6feaf73c4901d6c613d4bdb3894d941dbdee23130a9e8b5117113ca11a642b94392f69aa9beef331281a0c7e50692a06d6627b4ab3fa4793336f0faef693c176d818f2538d3593f8ac955bafe"}]}}, @NL80211_ATTR_PROBE_RESP={0x4ff, 0x91, "04ff8239e3cc3aea9a26d1d0c7ad1383efaaeb895eb1cdc38538d062b0395dc7b61fbc4e97c47d073eb2797be2d0857cb9503f610591ef2147a4cf5cb19ffe477f59b8447c0ba9fd475bec8fb41b5fbafd4be18b0214a7711b49c63b22bd5c554e9c4b741171c4cd84952532d80b5f88145f36da31cde66c70243be4a2f71871a0b89cc20f98dba329bf089687d6003592ca25e1be39440345812d7dadd72890b23259d4d83ccce028cece919e2c3b23dc8ca555f196b46b526eac21656e3d4f417d2ba13def162f43eced3df60d2b197661998a2a2a6c63fda16355718ecf562d3741549a13cc494436224cbcd6cff959fb204e16c8da5094fb42b98e288945d05e2f349b0f103dd62a07c10d4e999e22bcfe1f4f556084443998522ad3945f31512705286ae54118391203080b223eba25498756da55c32a8a96845e191cf4292a64d02fb4c041a16363a95d346774b2cc3411013b485c50fc1617bd8f1e8f52f8f08be59ac7ff13c75bd5f739406b13202956cb6c83cd6c8b00e042b9339ca3df972ba5b76000651ecdd4507306e4650bfcc90784a86885f676c9818fdf523112907e9c336d2fe234f72c7f6137ceb9130eba4f0fa41ebcc6c4a0c5bab4e926aef6e19a63cd82a6caa2cb4ce17fe6029ea733ab9a50aec76843e4fc5066c1c09319a39a62551ce4288ecdeb58f6c48c1794908f68654634f0c6f03ecf74f80df42c54fe1010bd8395558889b52e70ce315f926aaa76a2d4b108842d1931a94f349dec08c47689726e10a8ccfa5a7fedbf068b0d4119aa02287fcdc582bc42b685e3ffce443f4317b0b19251baddc0dd6913890f03fc01fb03d0d497ace76c74350518dd3b26e38322ccdec5d1120e3a3d814f3cb25d4d37e3290b0e5500f78bd06ec11b4973c180e507e2b1c836ecece2409dbd95d9a7a4357b7f734fbb853d1d4f78d4b081efc371852ae5e149dd9e129d929343a48979a87019e9dbb7856a04871f2c13dc29b3e1f99dac2442c9485d8828ae80d03ea7e1af45c36553209e9e61b6cb873d7a6ed0ffcbbafc86f88be674d7dcde669b9d12a63ba414e9a9f6e5eb6dcd5b488d150282641d79f35085b24a1debb37b632c30b6baf6c6056feefad29c820e37b98ec2effe915833a70be8bfc8167428732ad6c482379c5088b62e14a09eda8a5ee125743ca3947c163dd7d3f9c7a995d33e5a6940badbffae1f0d9daf981f40d32b02c4dd23314b09287254546e3dc06a1d1c75f6b2593044606243a9b922f3758749e732163093bb1cd457c59b700d9d4c166965fbcdbc5f1651b270517dd67b0a08ded9b4dbc36e51722f51b31d0dd2ecda8842ba03709bd68f9d832c5a43b850d47d68522947caa6945b538cafe149b5b3c23c57e0c0e6a8e0892de00f80355c74b600b9c949b82b9a67683b73f0c270e499815b9a4fb70b1b64110a4a0e48d0943e259ddbe2a2bd04a03a7c727a0554daa3471fd1621afe7b94e480b935222ecffb039b76ac080e952d7e36d2bdff21d1a6eb4ff81af43a248c592b6c900c9cb8a3b0db2d60dc9f4bbfa4080421bf4fa715b30b178d890b6a2cd209d867186993e3f3f6e94ccedf7ea008590fc215843387f2f754da9a3ec65e5c19e5c733d82dc541f00dd81e0466ed51ebd3cdf69e0617adb5d3734a40ffd3260adbb3254dfea8bb1fd98e9ac82adac2734e7fd27edbdd76859b4737a3568b0c8dd90091f5b8b94d13cd11abd957deda3689a87a9b7adf8bbd5320d29a1555769c0071612ebc9574048dccacc8e97d46c2bab6256ad8f4"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x6}]}, 0x624}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 3.504935383s ago: executing program 3 (id=1333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) 3.359087992s ago: executing program 3 (id=1335): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e80)={'wlan0\x00'}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={0x0}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 3.254014835s ago: executing program 3 (id=1336): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) 2.540322219s ago: executing program 0 (id=1342): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0xb) syz_genetlink_get_family_id$batadv(0x0, r0) 2.341736372s ago: executing program 2 (id=1344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000ec0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 2.202135897s ago: executing program 2 (id=1345): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x51}, 0x10) 2.020944888s ago: executing program 2 (id=1346): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000009030000000000000000000700000a0900010073797a3000000000240002001400018008000100e000000208000200000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040), 0x0) 1.984048611s ago: executing program 2 (id=1347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c00028008000240000000fa080001400000000108000340000000000900010073797a"], 0xc8}}, 0x0) 1.893991845s ago: executing program 2 (id=1349): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x80045b10, 0x0) 1.502470744s ago: executing program 0 (id=1352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x624, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xf5, 0xe, {{{}, {}, @device_a, @device_a, @from_mac=@broadcast}, 0x0, @random=0x8000, 0x1, @void, @void, @val={0x3, 0x1, 0xab}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x5, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0xf6, 0x21}}, @void, [{0xdd, 0xbf, "dc87ee5f96fb9c6d1b437893e8d0fd10fc4c9a63ace18b233bcc1b0303d808bcd7cdf437bbfdbdaf4da1fac91d85a0680f9feff0f45c9485066c52ce826ad95852e7844ba4f1719120d745160453bf640733f4595550f4ab917d759f6b8bb823abb958ae197c5777cb973b76694fe4afe635f6feaf73c4901d6c613d4bdb3894d941dbdee23130a9e8b5117113ca11a642b94392f69aa9beef331281a0c7e50692a06d6627b4ab3fa4793336f0faef693c176d818f2538d3593f8ac955bafe"}]}}, @NL80211_ATTR_PROBE_RESP={0x4ff, 0x91, "04ff8239e3cc3aea9a26d1d0c7ad1383efaaeb895eb1cdc38538d062b0395dc7b61fbc4e97c47d073eb2797be2d0857cb9503f610591ef2147a4cf5cb19ffe477f59b8447c0ba9fd475bec8fb41b5fbafd4be18b0214a7711b49c63b22bd5c554e9c4b741171c4cd84952532d80b5f88145f36da31cde66c70243be4a2f71871a0b89cc20f98dba329bf089687d6003592ca25e1be39440345812d7dadd72890b23259d4d83ccce028cece919e2c3b23dc8ca555f196b46b526eac21656e3d4f417d2ba13def162f43eced3df60d2b197661998a2a2a6c63fda16355718ecf562d3741549a13cc494436224cbcd6cff959fb204e16c8da5094fb42b98e288945d05e2f349b0f103dd62a07c10d4e999e22bcfe1f4f556084443998522ad3945f31512705286ae54118391203080b223eba25498756da55c32a8a96845e191cf4292a64d02fb4c041a16363a95d346774b2cc3411013b485c50fc1617bd8f1e8f52f8f08be59ac7ff13c75bd5f739406b13202956cb6c83cd6c8b00e042b9339ca3df972ba5b76000651ecdd4507306e4650bfcc90784a86885f676c9818fdf523112907e9c336d2fe234f72c7f6137ceb9130eba4f0fa41ebcc6c4a0c5bab4e926aef6e19a63cd82a6caa2cb4ce17fe6029ea733ab9a50aec76843e4fc5066c1c09319a39a62551ce4288ecdeb58f6c48c1794908f68654634f0c6f03ecf74f80df42c54fe1010bd8395558889b52e70ce315f926aaa76a2d4b108842d1931a94f349dec08c47689726e10a8ccfa5a7fedbf068b0d4119aa02287fcdc582bc42b685e3ffce443f4317b0b19251baddc0dd6913890f03fc01fb03d0d497ace76c74350518dd3b26e38322ccdec5d1120e3a3d814f3cb25d4d37e3290b0e5500f78bd06ec11b4973c180e507e2b1c836ecece2409dbd95d9a7a4357b7f734fbb853d1d4f78d4b081efc371852ae5e149dd9e129d929343a48979a87019e9dbb7856a04871f2c13dc29b3e1f99dac2442c9485d8828ae80d03ea7e1af45c36553209e9e61b6cb873d7a6ed0ffcbbafc86f88be674d7dcde669b9d12a63ba414e9a9f6e5eb6dcd5b488d150282641d79f35085b24a1debb37b632c30b6baf6c6056feefad29c820e37b98ec2effe915833a70be8bfc8167428732ad6c482379c5088b62e14a09eda8a5ee125743ca3947c163dd7d3f9c7a995d33e5a6940badbffae1f0d9daf981f40d32b02c4dd23314b09287254546e3dc06a1d1c75f6b2593044606243a9b922f3758749e732163093bb1cd457c59b700d9d4c166965fbcdbc5f1651b270517dd67b0a08ded9b4dbc36e51722f51b31d0dd2ecda8842ba03709bd68f9d832c5a43b850d47d68522947caa6945b538cafe149b5b3c23c57e0c0e6a8e0892de00f80355c74b600b9c949b82b9a67683b73f0c270e499815b9a4fb70b1b64110a4a0e48d0943e259ddbe2a2bd04a03a7c727a0554daa3471fd1621afe7b94e480b935222ecffb039b76ac080e952d7e36d2bdff21d1a6eb4ff81af43a248c592b6c900c9cb8a3b0db2d60dc9f4bbfa4080421bf4fa715b30b178d890b6a2cd209d867186993e3f3f6e94ccedf7ea008590fc215843387f2f754da9a3ec65e5c19e5c733d82dc541f00dd81e0466ed51ebd3cdf69e0617adb5d3734a40ffd3260adbb3254dfea8bb1fd98e9ac82adac2734e7fd27edbdd76859b4737a3568b0c8dd90091f5b8b94d13cd11abd957deda3689a87a9b7adf8bbd5320d29a1555769c0071612ebc9574048dccacc8e97d46c2bab6256ad8f4"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x81}]}, 0x624}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.276445181s ago: executing program 0 (id=1353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) 1.081928055s ago: executing program 0 (id=1355): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000009030000000000000000000700000a0900010073797a3000000000240002001400018008000100e000000208000200000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x0) 1.03341106s ago: executing program 3 (id=1356): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a060000) r0 = socket(0x8, 0x3, 0x0) getsockname$packet(r0, 0x0, 0x0) 935.651902ms ago: executing program 0 (id=1357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c00028008000240000000fa080001400000000108000340000000000900010073797a"], 0xc8}}, 0x0) 738.062666ms ago: executing program 1 (id=1359): r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c, 0x800) setsockopt$inet6_int(r1, 0x29, 0x17, 0x0, 0x0) flistxattr(r0, &(0x7f0000000140)=""/10, 0xa) 737.187587ms ago: executing program 0 (id=1360): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0xb) syz_genetlink_get_family_id$batadv(0x0, r0) 569.915902ms ago: executing program 1 (id=1361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x624, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xf5, 0xe, {{{}, {}, @device_a, @device_a, @from_mac=@broadcast}, 0x0, @random=0x8000, 0x1, @void, @void, @val={0x3, 0x1, 0xab}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x5, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0xf6, 0x21}}, @void, [{0xdd, 0xbf, "dc87ee5f96fb9c6d1b437893e8d0fd10fc4c9a63ace18b233bcc1b0303d808bcd7cdf437bbfdbdaf4da1fac91d85a0680f9feff0f45c9485066c52ce826ad95852e7844ba4f1719120d745160453bf640733f4595550f4ab917d759f6b8bb823abb958ae197c5777cb973b76694fe4afe635f6feaf73c4901d6c613d4bdb3894d941dbdee23130a9e8b5117113ca11a642b94392f69aa9beef331281a0c7e50692a06d6627b4ab3fa4793336f0faef693c176d818f2538d3593f8ac955bafe"}]}}, @NL80211_ATTR_PROBE_RESP={0x4ff, 0x91, "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"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x81}]}, 0x624}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 446.41473ms ago: executing program 1 (id=1362): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="f1ff0000020605"], 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0", 0x1b}, {&(0x7f0000000200)="c67f0d7df9", 0x5}], 0x2) 357.659998ms ago: executing program 2 (id=1363): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x51}, 0x0}, 0x0) 273.974436ms ago: executing program 3 (id=1364): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) 149.924341ms ago: executing program 1 (id=1365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) 76.3291ms ago: executing program 1 (id=1366): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000009030000000000000000000700000a0900010073797a3000000000240002001400018008000100e000000208000200000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x0) 0s ago: executing program 1 (id=1367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000ec0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. [ 81.964691][ T5822] cgroup: Unknown subsys name 'net' [ 82.097434][ T5822] cgroup: Unknown subsys name 'cpuset' [ 82.107106][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.811636][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.449900][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.457622][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.466384][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.473880][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.481850][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.489893][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.498498][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.506488][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.509839][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.515253][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.528092][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.528821][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.543678][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.551777][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.560546][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.569824][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.579857][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.587323][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.602915][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.610821][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.058782][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 87.357805][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.366030][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.373343][ T5831] bridge_slave_0: entered allmulticast mode [ 87.381409][ T5831] bridge_slave_0: entered promiscuous mode [ 87.401136][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 87.420582][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.444309][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.451536][ T5831] bridge_slave_1: entered allmulticast mode [ 87.460813][ T5831] bridge_slave_1: entered promiscuous mode [ 87.503310][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 87.551428][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 87.572908][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.592172][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.714752][ T5831] team0: Port device team_slave_0 added [ 87.748655][ T5831] team0: Port device team_slave_1 added [ 87.800162][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.807856][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.815348][ T5835] bridge_slave_0: entered allmulticast mode [ 87.822521][ T5835] bridge_slave_0: entered promiscuous mode [ 87.830904][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.838527][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.845910][ T5835] bridge_slave_1: entered allmulticast mode [ 87.853151][ T5835] bridge_slave_1: entered promiscuous mode [ 87.885490][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.892625][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.899957][ T5833] bridge_slave_0: entered allmulticast mode [ 87.907486][ T5833] bridge_slave_0: entered promiscuous mode [ 87.928515][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.937967][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.964373][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.992080][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.999293][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.006713][ T5833] bridge_slave_1: entered allmulticast mode [ 88.014044][ T5833] bridge_slave_1: entered promiscuous mode [ 88.035970][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.042949][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.068961][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.085810][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.092926][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.100700][ T5832] bridge_slave_0: entered allmulticast mode [ 88.108671][ T5832] bridge_slave_0: entered promiscuous mode [ 88.132322][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.150706][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.158145][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.165751][ T5832] bridge_slave_1: entered allmulticast mode [ 88.173006][ T5832] bridge_slave_1: entered promiscuous mode [ 88.195790][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.241118][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.282556][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.309505][ T5835] team0: Port device team_slave_0 added [ 88.318379][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.331236][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.368302][ T5835] team0: Port device team_slave_1 added [ 88.407471][ T5831] hsr_slave_0: entered promiscuous mode [ 88.414138][ T5831] hsr_slave_1: entered promiscuous mode [ 88.449930][ T5833] team0: Port device team_slave_0 added [ 88.459113][ T5833] team0: Port device team_slave_1 added [ 88.479940][ T5832] team0: Port device team_slave_0 added [ 88.513149][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.520930][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.547133][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.560115][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.567612][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.593724][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.607885][ T5832] team0: Port device team_slave_1 added [ 88.624397][ T5836] Bluetooth: hci0: command tx timeout [ 88.630127][ T5836] Bluetooth: hci3: command tx timeout [ 88.639595][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.646597][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.672616][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.704211][ T51] Bluetooth: hci1: command tx timeout [ 88.710026][ T5836] Bluetooth: hci2: command tx timeout [ 88.732793][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.740059][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.766698][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.787573][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.795038][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.821421][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.854273][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.861234][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.887539][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.975471][ T5835] hsr_slave_0: entered promiscuous mode [ 88.981776][ T5835] hsr_slave_1: entered promiscuous mode [ 88.988464][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 88.994363][ T5835] Cannot create hsr debugfs directory [ 89.011650][ T5833] hsr_slave_0: entered promiscuous mode [ 89.018023][ T5833] hsr_slave_1: entered promiscuous mode [ 89.024480][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 89.030249][ T5833] Cannot create hsr debugfs directory [ 89.142536][ T5832] hsr_slave_0: entered promiscuous mode [ 89.150280][ T5832] hsr_slave_1: entered promiscuous mode [ 89.156819][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 89.162568][ T5832] Cannot create hsr debugfs directory [ 89.499054][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.513247][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.539459][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.553110][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.688436][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.724962][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.750829][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.769365][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.807516][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.823273][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.840473][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.850964][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.935296][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.969855][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.977985][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.990885][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.011766][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.070274][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.110664][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.117945][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.150206][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.157472][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.242489][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.316702][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.339253][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.352167][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.359354][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.398947][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.410339][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.417559][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.457768][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.512226][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.530795][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.538143][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.581843][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.589072][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.608621][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.615867][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.645031][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.652176][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.705828][ T51] Bluetooth: hci0: command tx timeout [ 90.711349][ T5836] Bluetooth: hci3: command tx timeout [ 90.758442][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.795107][ T5836] Bluetooth: hci2: command tx timeout [ 90.800562][ T5836] Bluetooth: hci1: command tx timeout [ 90.964666][ T5831] veth0_vlan: entered promiscuous mode [ 91.008232][ T5831] veth1_vlan: entered promiscuous mode [ 91.066318][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.135604][ T5831] veth0_macvtap: entered promiscuous mode [ 91.157240][ T5831] veth1_macvtap: entered promiscuous mode [ 91.231610][ T5833] veth0_vlan: entered promiscuous mode [ 91.277505][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.292683][ T5833] veth1_vlan: entered promiscuous mode [ 91.309762][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.336862][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.374283][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.383076][ T74] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.397478][ T74] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.423186][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.433049][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.470402][ T5833] veth0_macvtap: entered promiscuous mode [ 91.490426][ T5833] veth1_macvtap: entered promiscuous mode [ 91.564928][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.575969][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.597369][ T5832] veth0_vlan: entered promiscuous mode [ 91.609522][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.644199][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.665975][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.675973][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.676284][ T5835] veth0_vlan: entered promiscuous mode [ 91.690751][ T5832] veth1_vlan: entered promiscuous mode [ 91.704708][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.722261][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.751652][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.766054][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.783439][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.791415][ T5835] veth1_vlan: entered promiscuous mode [ 91.826171][ T10] cfg80211: failed to load regulatory.db [ 91.945273][ T5832] veth0_macvtap: entered promiscuous mode [ 91.980482][ T5832] veth1_macvtap: entered promiscuous mode [ 91.991179][ T5835] veth0_macvtap: entered promiscuous mode [ 91.998983][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.009602][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.025999][ T5835] veth1_macvtap: entered promiscuous mode [ 92.070666][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.090714][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.101371][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.119280][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.138951][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.157863][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.186612][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.198225][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.237569][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.252713][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.275241][ T2918] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.289467][ T2918] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.309321][ T2918] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.326037][ T2918] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.483788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.497896][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.538266][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.586650][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.651796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.661307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.713065][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.734049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.784085][ T51] Bluetooth: hci0: command tx timeout [ 92.789644][ T5836] Bluetooth: hci3: command tx timeout [ 92.894282][ T51] Bluetooth: hci2: command tx timeout [ 92.905891][ T5836] Bluetooth: hci1: command tx timeout [ 93.053636][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.077773][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.099097][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.163931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 93.183227][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.324086][ T3082] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.499003][ T3082] usb 3-1: Using ep0 maxpacket: 8 [ 93.529037][ T3082] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 93.555023][ T3082] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.574701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 93.602074][ T3082] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.614079][ T982] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 93.701629][ T3082] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.802722][ T3082] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.853389][ T3082] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.892749][ T3082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.986927][ T5941] fido_id[5941]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 94.002985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 94.064004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 94.072343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 94.172916][ T3082] usb 3-1: GET_CAPABILITIES returned 0 [ 94.188471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.298046][ T3082] usbtmc 3-1:16.0: can't read capabilities [ 94.422650][ T5892] usb 3-1: USB disconnect, device number 2 [ 94.874779][ T5836] Bluetooth: hci3: command tx timeout [ 94.874802][ T51] Bluetooth: hci0: command tx timeout [ 94.944581][ T5836] Bluetooth: hci1: command tx timeout [ 94.950076][ T51] Bluetooth: hci2: command tx timeout [ 95.973549][ T92] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.123580][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 96.131422][ T92] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 96.141164][ T92] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.153548][ T92] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.163342][ T92] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.184952][ T92] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.234342][ T92] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.246698][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.410435][ T3082] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 96.503646][ T92] usb 3-1: GET_CAPABILITIES returned 0 [ 96.516815][ T92] usbtmc 3-1:16.0: can't read capabilities [ 96.615786][ T5981] fido_id[5981]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 96.708929][ T5930] usb 3-1: USB disconnect, device number 3 [ 97.373137][ T6007] Zero length message leads to an empty skb [ 98.563682][ T982] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.658483][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 98.735171][ T982] usb 4-1: Using ep0 maxpacket: 8 [ 98.800423][ T982] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 98.811512][ T982] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.821504][ T9] usb 1-1: device descriptor read/64, error -71 [ 98.830713][ T982] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.842303][ T982] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.860169][ T982] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.900547][ T982] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.931823][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.077753][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 99.187644][ T982] usb 4-1: usb_control_msg returned -71 [ 99.194391][ T982] usbtmc 4-1:16.0: can't read capabilities [ 99.235638][ T9] usb 1-1: device descriptor read/64, error -71 [ 99.271759][ T982] usb 4-1: USB disconnect, device number 2 [ 99.364818][ T9] usb usb1-port1: attempt power cycle [ 99.728052][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 99.754608][ T9] usb 1-1: device descriptor read/8, error -71 [ 100.014554][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 100.044440][ T9] usb 1-1: device descriptor read/8, error -71 [ 100.184144][ T9] usb usb1-port1: unable to enumerate USB device [ 100.533668][ T5930] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.703608][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 100.714845][ T5930] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 100.723123][ T5930] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.732969][ T5930] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.744015][ T5930] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.754054][ T5930] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.767856][ T5930] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.777028][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.798983][ T1002] tipc: Subscription rejected, illegal request [ 101.002026][ T5930] usb 3-1: usb_control_msg returned -71 [ 101.014257][ T5930] usbtmc 3-1:16.0: can't read capabilities [ 101.038302][ T5930] usb 3-1: USB disconnect, device number 4 [ 101.578955][ T5892] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 101.775006][ T6086] fido_id[6086]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 102.287951][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 102.363615][ T92] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.434385][ T9] usb 4-1: device descriptor read/64, error -71 [ 102.512761][ T49] tipc: Subscription rejected, illegal request [ 102.523582][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 102.538740][ T92] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 102.551517][ T92] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.562595][ T92] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.575953][ T92] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.588303][ T92] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.604284][ T92] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 102.615673][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.673662][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 102.803732][ T9] usb 4-1: device descriptor read/64, error -71 [ 102.840667][ T92] usb 1-1: usb_control_msg returned -71 [ 102.925806][ T9] usb usb4-port1: attempt power cycle [ 102.937224][ T92] usbtmc 1-1:16.0: can't read capabilities [ 102.978493][ T92] usb 1-1: USB disconnect, device number 6 [ 103.283624][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 103.326866][ T9] usb 4-1: device descriptor read/8, error -71 [ 103.567021][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 103.615755][ T9] usb 4-1: device descriptor read/8, error -71 [ 103.735086][ T9] usb usb4-port1: unable to enumerate USB device [ 104.503258][ T74] tipc: Subscription rejected, illegal request [ 104.918258][ T6155] "syz.0.96" (6155) uses obsolete ecb(arc4) skcipher [ 105.196317][ T2918] tipc: Subscription rejected, illegal request [ 105.763618][ T5892] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 105.916564][ T5892] usb 3-1: device descriptor read/64, error -71 [ 105.982021][ T74] tipc: Subscription rejected, illegal request [ 106.174128][ T5892] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 106.272861][ T6211] syz.3.121 uses obsolete (PF_INET,SOCK_PACKET) [ 106.311036][ T6211] netlink: 'syz.3.121': attribute type 10 has an invalid length. [ 106.323578][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.343883][ T6211] bridge_slave_1: left allmulticast mode [ 106.349580][ T6211] bridge_slave_1: left promiscuous mode [ 106.353578][ T5892] usb 3-1: device descriptor read/64, error -71 [ 106.387856][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.416318][ T6211] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 106.484113][ T5892] usb usb3-port1: attempt power cycle [ 106.604479][ T2918] tipc: Subscription rejected, illegal request [ 106.823743][ T5892] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 106.866513][ T5892] usb 3-1: device descriptor read/8, error -71 [ 107.114342][ T5892] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 107.145938][ T5892] usb 3-1: device descriptor read/8, error -71 [ 107.263828][ T5892] usb usb3-port1: unable to enumerate USB device [ 109.233603][ T45] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 109.374085][ T45] usb 1-1: device descriptor read/64, error -71 [ 109.624436][ T45] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 109.753647][ T45] usb 1-1: device descriptor read/64, error -71 [ 109.874069][ T6345] block nbd0: server does not support multiple connections per device. [ 109.884330][ T45] usb usb1-port1: attempt power cycle [ 109.890585][ T6345] block nbd0: shutting down sockets [ 110.234028][ T45] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 110.290530][ T45] usb 1-1: device descriptor read/8, error -71 [ 110.533717][ T45] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 110.575710][ T45] usb 1-1: device descriptor read/8, error -71 [ 110.685110][ T45] usb usb1-port1: unable to enumerate USB device [ 110.883568][ T5897] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.013697][ T5897] usb 2-1: device descriptor read/64, error -71 [ 111.253715][ T5897] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.393715][ T5897] usb 2-1: device descriptor read/64, error -71 [ 111.510368][ T5897] usb usb2-port1: attempt power cycle [ 111.868465][ T5897] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.905866][ T5897] usb 2-1: device descriptor read/8, error -71 [ 112.132692][ T6407] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.153621][ T5897] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.184753][ T5897] usb 2-1: device descriptor read/8, error -71 [ 112.276067][ T6407] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.294973][ T5897] usb usb2-port1: unable to enumerate USB device [ 112.407748][ T6407] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.523314][ T6407] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.622693][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.657514][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.701951][ T2918] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.712562][ T6426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.744712][ T2918] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.144902][ T5892] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 113.307553][ T5892] usb 4-1: device descriptor read/64, error -71 [ 113.563566][ T5892] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 113.693638][ T5892] usb 4-1: device descriptor read/64, error -71 [ 113.813878][ T5892] usb usb4-port1: attempt power cycle [ 114.034336][ T6463] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 114.107408][ T12] tipc: Subscription rejected, illegal request [ 114.174979][ T5892] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 114.208223][ T5892] usb 4-1: device descriptor read/8, error -71 [ 114.453624][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 114.463792][ T5892] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 114.495468][ T5892] usb 4-1: device descriptor read/8, error -71 [ 114.604004][ T5892] usb usb4-port1: unable to enumerate USB device [ 114.616843][ T9] usb 1-1: device descriptor read/64, error -71 [ 114.705700][ T6488] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 114.789702][ T13] tipc: Subscription rejected, illegal request [ 114.868662][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 115.013557][ T9] usb 1-1: device descriptor read/64, error -71 [ 115.123936][ T9] usb usb1-port1: attempt power cycle [ 115.475775][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 115.506279][ T9] usb 1-1: device descriptor read/8, error -71 [ 115.641047][ T6511] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 115.674466][ T5834] udevd[5834]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 115.687144][ T5834] udevd[5834]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 115.763859][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 115.795145][ T9] usb 1-1: device descriptor read/8, error -71 [ 115.807603][ T2918] tipc: Subscription rejected, illegal request [ 115.913971][ T9] usb usb1-port1: unable to enumerate USB device [ 115.954045][ T6520] netlink: 'syz.1.258': attribute type 2 has an invalid length. [ 116.049662][ T6524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.260'. [ 116.207851][ T6531] Bluetooth: MGMT ver 1.23 [ 116.331138][ T6536] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 116.873587][ T3082] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 117.013617][ T3082] usb 2-1: device descriptor read/64, error -71 [ 117.188694][ T6560] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 117.255186][ T3082] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 117.437306][ T3082] usb 2-1: device descriptor read/64, error -71 [ 117.527830][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.280'. [ 117.566108][ T3082] usb usb2-port1: attempt power cycle [ 117.700150][ T6578] syzkaller1: entered promiscuous mode [ 117.705842][ T6578] syzkaller1: entered allmulticast mode [ 117.898801][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 117.933602][ T3082] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 117.954679][ T3082] usb 2-1: device descriptor read/8, error -71 [ 118.083587][ T5930] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 118.193599][ T3082] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 118.213703][ T5930] usb 4-1: device descriptor read/64, error -71 [ 118.220311][ T3082] usb 2-1: device descriptor read/8, error -71 [ 118.329602][ T6590] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 118.335664][ T3082] usb usb2-port1: unable to enumerate USB device [ 118.454715][ T5930] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 118.594027][ T5930] usb 4-1: device descriptor read/64, error -71 [ 118.712878][ T5930] usb usb4-port1: attempt power cycle [ 119.063661][ T5930] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 119.097244][ T5930] usb 4-1: device descriptor read/8, error -71 [ 119.118824][ T6605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.360167][ T5930] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 119.394303][ T5930] usb 4-1: device descriptor read/8, error -71 [ 119.504255][ T5930] usb usb4-port1: unable to enumerate USB device [ 119.889192][ T982] hid-generic 0005:16BF:5505.0004: item fetching failed at offset 5/7 [ 119.911242][ T982] hid-generic 0005:16BF:5505.0004: probe with driver hid-generic failed with error -22 [ 120.141022][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 120.523616][ T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 120.675379][ T9] usb 3-1: config 0 has no interfaces? [ 120.683836][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 120.693120][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.701550][ T9] usb 3-1: Product: syz [ 120.715244][ T9] usb 3-1: Manufacturer: syz [ 120.720223][ T9] usb 3-1: SerialNumber: syz [ 120.734742][ T9] usb 3-1: config 0 descriptor?? [ 120.957146][ T9] usb 3-1: USB disconnect, device number 9 [ 121.498708][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.317'. [ 121.593694][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 121.602229][ T982] hid-generic 0005:16BF:5505.0005: item fetching failed at offset 5/7 [ 121.613430][ T982] hid-generic 0005:16BF:5505.0005: probe with driver hid-generic failed with error -22 [ 121.736748][ T9] usb 2-1: device descriptor read/64, error -71 [ 121.940233][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 121.985279][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 122.133586][ T9] usb 2-1: device descriptor read/64, error -71 [ 122.190813][ T3082] hid-generic 0005:16BF:5505.0006: item fetching failed at offset 8/10 [ 122.199632][ T3082] hid-generic 0005:16BF:5505.0006: probe with driver hid-generic failed with error -22 [ 122.257924][ T9] usb usb2-port1: attempt power cycle [ 122.293576][ T5930] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 122.469573][ T5930] usb 1-1: config 0 has no interfaces? [ 122.482467][ T5930] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 122.493363][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.502922][ T5930] usb 1-1: Product: syz [ 122.508658][ T5930] usb 1-1: Manufacturer: syz [ 122.513427][ T5930] usb 1-1: SerialNumber: syz [ 122.531767][ T5930] usb 1-1: config 0 descriptor?? [ 122.613991][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 122.635822][ T9] usb 2-1: device descriptor read/8, error -71 [ 122.721494][ T6707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.332'. [ 122.759494][ T3082] usb 1-1: USB disconnect, device number 15 [ 122.873625][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 122.904541][ T9] usb 2-1: device descriptor read/8, error -71 [ 123.003382][ T6717] pim6reg: entered allmulticast mode [ 123.015047][ T9] usb usb2-port1: unable to enumerate USB device [ 123.083332][ T3082] hid-generic 0005:16BF:5505.0007: item fetching failed at offset 8/10 [ 123.097097][ T3082] hid-generic 0005:16BF:5505.0007: probe with driver hid-generic failed with error -22 [ 123.646356][ T3082] hid-generic 0005:16BF:5505.0008: item fetching failed at offset 8/10 [ 123.658574][ T3082] hid-generic 0005:16BF:5505.0008: probe with driver hid-generic failed with error -22 [ 124.172436][ T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 124.235228][ T5892] hid-generic 0005:16BF:5505.0009: item fetching failed at offset 8/12 [ 124.247507][ T5892] hid-generic 0005:16BF:5505.0009: probe with driver hid-generic failed with error -22 [ 124.335597][ T9] usb 4-1: config 0 has no interfaces? [ 124.345907][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 124.373531][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.381601][ T9] usb 4-1: Product: syz [ 124.398710][ T9] usb 4-1: Manufacturer: syz [ 124.415463][ T9] usb 4-1: SerialNumber: syz [ 124.439168][ T9] usb 4-1: config 0 descriptor?? [ 124.482972][ T6777] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.540397][ T6781] netlink: 32 bytes leftover after parsing attributes in process `syz.0.362'. [ 124.660868][ T92] usb 4-1: USB disconnect, device number 15 [ 124.767506][ T3082] hid-generic 0005:16BF:5505.000A: item fetching failed at offset 8/12 [ 124.776918][ T3082] hid-generic 0005:16BF:5505.000A: probe with driver hid-generic failed with error -22 [ 125.143653][ T3082] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 125.277204][ T3082] usb 3-1: device descriptor read/64, error -71 [ 125.523648][ T3082] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 125.567362][ T9] hid-generic 0005:16BF:5505.000B: item fetching failed at offset 8/12 [ 125.586261][ T9] hid-generic 0005:16BF:5505.000B: probe with driver hid-generic failed with error -22 [ 125.683612][ T3082] usb 3-1: device descriptor read/64, error -71 [ 125.771476][ T6822] warning: `syz.3.381' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 125.804696][ T3082] usb usb3-port1: attempt power cycle [ 125.933584][ T5892] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 126.097128][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.118041][ T5892] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.134264][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.144888][ T5892] usb 1-1: Product: syz [ 126.150075][ T5892] usb 1-1: Manufacturer: syz [ 126.154784][ T5892] usb 1-1: SerialNumber: syz [ 126.162117][ T5892] usb 1-1: config 0 descriptor?? [ 126.167295][ T3082] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 126.191405][ T9] hid-generic 0005:16BF:5505.000C: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 126.216770][ T3082] usb 3-1: device descriptor read/8, error -71 [ 126.254263][ T5892] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 126.331075][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.396201][ T5892] usb 1-1: USB disconnect, device number 16 [ 126.453601][ T3082] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 126.482096][ T3082] usb 3-1: device descriptor read/8, error -71 [ 126.603865][ T3082] usb usb3-port1: unable to enumerate USB device [ 127.781584][ T6884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.407'. [ 127.986736][ T982] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 128.165527][ T982] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.191420][ T982] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.207182][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.222277][ T982] usb 1-1: Product: syz [ 128.243573][ T982] usb 1-1: Manufacturer: syz [ 128.248245][ T982] usb 1-1: SerialNumber: syz [ 128.292016][ T982] usb 1-1: config 0 descriptor?? [ 128.351632][ T982] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 128.425276][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.504512][ T6908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.420'. [ 128.525182][ T5892] usb 1-1: USB disconnect, device number 17 [ 128.705732][ T6918] netlink: 32 bytes leftover after parsing attributes in process `syz.3.425'. [ 128.781382][ T6922] tun0: tun_chr_ioctl cmd 1074812117 [ 128.813631][ T982] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 128.946692][ T982] usb 2-1: device descriptor read/64, error -71 [ 129.183598][ T982] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 129.313567][ T982] usb 2-1: device descriptor read/64, error -71 [ 129.322026][ T6936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.434'. [ 129.386248][ T6938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.435'. [ 129.433971][ T982] usb usb2-port1: attempt power cycle [ 129.643744][ T6946] netlink: 16 bytes leftover after parsing attributes in process `syz.2.439'. [ 129.658997][ T6946] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 129.793585][ T982] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 129.838653][ T982] usb 2-1: device descriptor read/8, error -71 [ 129.863944][ T92] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 130.037455][ T92] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.063798][ T92] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.083135][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.092011][ T982] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 130.106560][ T92] usb 1-1: Product: syz [ 130.113872][ T92] usb 1-1: Manufacturer: syz [ 130.123746][ T92] usb 1-1: SerialNumber: syz [ 130.134240][ T982] usb 2-1: device descriptor read/8, error -71 [ 130.163595][ T92] usb 1-1: config 0 descriptor?? [ 130.215468][ T92] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 130.257806][ T982] usb usb2-port1: unable to enumerate USB device [ 130.260817][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.379682][ T3082] usb 1-1: USB disconnect, device number 18 [ 132.141433][ T7022] netlink: 312 bytes leftover after parsing attributes in process `syz.2.476'. [ 132.329764][ T7031] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.775140][ T7051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.489'. [ 132.800101][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.806742][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.096430][ T7063] netlink: 104 bytes leftover after parsing attributes in process `syz.0.495'. [ 133.281195][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'. [ 133.309808][ T7074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.502'. [ 133.514200][ T7086] Bluetooth: MGMT ver 1.23 [ 135.423788][ T7160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.539'. [ 135.690719][ T7171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.543'. [ 136.617388][ T7206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.560'. [ 137.676553][ T7253] tipc: Started in network mode [ 137.692510][ T7253] tipc: Node identity 000000000000003a0000000000000001, cluster identity 4711 [ 137.723700][ T7253] tipc: Enabling of bearer rejected, failed to enable media [ 138.966934][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.599'. [ 139.668823][ T7335] sctp: [Deprecated]: syz.0.612 (pid 7335) Use of int in max_burst socket option. [ 139.668823][ T7335] Use struct sctp_assoc_value instead [ 141.837804][ T7416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.963273][ T7412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.986144][ T7412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.726398][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 142.754080][ T7460] netlink: 'syz.0.663': attribute type 10 has an invalid length. [ 142.812965][ T7460] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 142.846761][ T7464] netlink: 56 bytes leftover after parsing attributes in process `syz.3.665'. [ 143.097138][ T7475] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 143.107817][ T7475] netlink: 'syz.0.670': attribute type 12 has an invalid length. [ 143.121103][ T7475] netlink: 132 bytes leftover after parsing attributes in process `syz.0.670'. [ 143.582027][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d16e400: rx timeout, send abort [ 143.591778][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d16e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 144.165497][ T7525] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 144.183155][ T7525] netlink: 'syz.2.692': attribute type 12 has an invalid length. [ 144.194642][ T7525] netlink: 132 bytes leftover after parsing attributes in process `syz.2.692'. [ 145.869811][ T7603] netlink: 'syz.1.726': attribute type 1 has an invalid length. [ 145.893670][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 146.440468][ T7633] netlink: 'syz.0.741': attribute type 4 has an invalid length. [ 146.987496][ T7662] pim6reg: entered allmulticast mode [ 147.083581][ T5930] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 147.153001][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 147.258765][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 147.270327][ T5930] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 147.307615][ T5930] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 147.336756][ T5930] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.351423][ T5930] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 147.367679][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.415678][ T5930] usbtmc 2-1:16.0: bulk endpoints not found [ 147.962145][ T7704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.773'. [ 148.207380][ T7715] netlink: 788 bytes leftover after parsing attributes in process `syz.2.778'. [ 148.489323][ T7721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.781'. [ 149.045920][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.792'. [ 149.507305][ T7765] netlink: 240 bytes leftover after parsing attributes in process `syz.0.802'. [ 149.518351][ T7765] netlink: 48 bytes leftover after parsing attributes in process `syz.0.802'. [ 149.809720][ T3082] usb 2-1: USB disconnect, device number 18 [ 150.475892][ T92] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 150.644395][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 150.652400][ T92] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 150.673913][ T92] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 150.687386][ T92] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.700949][ T92] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.715390][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.731470][ T92] usbtmc 1-1:16.0: bulk endpoints not found [ 152.561228][ T7902] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 152.570095][ T7902] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 152.979887][ T7922] netlink: 'syz.1.869': attribute type 1 has an invalid length. [ 152.988669][ T7922] netlink: 208 bytes leftover after parsing attributes in process `syz.1.869'. [ 153.000562][ T7922] netlink: 'syz.1.869': attribute type 1 has an invalid length. [ 153.004940][ T7918] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.008815][ T7922] netlink: 'syz.1.869': attribute type 2 has an invalid length. [ 153.120531][ T7918] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.239442][ T7918] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.271178][ T5930] usb 1-1: USB disconnect, device number 19 [ 153.394827][ T7918] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.566436][ T2910] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.604622][ T2910] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.629769][ T2910] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.657547][ T2910] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.830169][ T7954] openvswitch: netlink: Flow actions attr not present in new flow. [ 154.003717][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 154.163559][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 154.170524][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 154.178874][ T9] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 154.189245][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.199753][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.209786][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 154.225968][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.250254][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.278009][ T9] usbtmc 4-1:16.0: bulk endpoints not found [ 154.580835][ T7977] openvswitch: netlink: Flow actions attr not present in new flow. [ 155.125080][ T8001] openvswitch: netlink: Flow actions attr not present in new flow. [ 155.706898][ T8021] openvswitch: netlink: Flow key attr not present in new flow. [ 155.758772][ T8023] vxcan1 speed is unknown, defaulting to 1000 [ 155.768259][ T8023] vxcan1 speed is unknown, defaulting to 1000 [ 155.787529][ T8023] vxcan1 speed is unknown, defaulting to 1000 [ 155.814134][ T8025] netlink: 256 bytes leftover after parsing attributes in process `syz.0.916'. [ 155.897013][ T8028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.917'. [ 156.216829][ T8023] infiniband syz2: set active [ 156.222521][ T5930] vxcan1 speed is unknown, defaulting to 1000 [ 156.229295][ T8023] infiniband syz2: added vxcan1 [ 156.300849][ T8023] RDS/IB: syz2: added [ 156.306251][ T8023] smc: adding ib device syz2 with port count 1 [ 156.312608][ T8023] smc: ib device syz2 port 1 has pnetid [ 156.320453][ T5930] vxcan1 speed is unknown, defaulting to 1000 [ 156.338396][ T8023] vxcan1 speed is unknown, defaulting to 1000 [ 156.508544][ T8043] openvswitch: netlink: Flow key attr not present in new flow. [ 156.528876][ T8045] netlink: 256 bytes leftover after parsing attributes in process `syz.2.925'. [ 156.614509][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.926'. [ 156.793542][ T5930] usb 4-1: USB disconnect, device number 16 [ 156.901971][ T8023] vxcan1 speed is unknown, defaulting to 1000 [ 157.043630][ T8065] openvswitch: netlink: Flow key attr not present in new flow. [ 157.161784][ T8067] netlink: 256 bytes leftover after parsing attributes in process `syz.2.935'. [ 157.395079][ T8023] vxcan1 speed is unknown, defaulting to 1000 [ 157.583716][ T92] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 157.711118][ T8079] vxcan1 speed is unknown, defaulting to 1000 [ 157.764012][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 157.776709][ T92] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 157.799652][ T92] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 157.814723][ T92] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.843646][ T92] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.859431][ T92] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 157.886902][ T92] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 157.898803][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.928608][ T92] usbtmc 3-1:16.0: bulk endpoints not found [ 158.107377][ T8023] vxcan1 speed is unknown, defaulting to 1000 [ 158.514770][ T8104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.949'. [ 159.011350][ T8121] vxcan1 speed is unknown, defaulting to 1000 [ 159.557829][ T8133] netlink: 272 bytes leftover after parsing attributes in process `syz.1.959'. [ 160.295011][ T8146] vxcan1 speed is unknown, defaulting to 1000 [ 160.344046][ T982] usb 3-1: USB disconnect, device number 14 [ 160.677321][ T8152] vxcan1 speed is unknown, defaulting to 1000 [ 161.243779][ T5892] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 161.403602][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 161.438248][ T5892] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 161.447468][ T5892] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 161.472218][ T5892] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.482433][ T5892] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.510750][ T5892] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 161.533559][ T5892] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.546534][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.575284][ T5892] usbtmc 3-1:16.0: bulk endpoints not found [ 161.987929][ T8197] pimreg: entered allmulticast mode [ 162.106264][ T8206] netlink: 256 bytes leftover after parsing attributes in process `syz.3.988'. [ 162.571059][ T8228] netlink: 36 bytes leftover after parsing attributes in process `syz.3.997'. [ 162.833652][ T92] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 162.855736][ T3082] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 163.006273][ T92] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 163.028469][ T3082] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.031614][ T92] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.053512][ T3082] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.070261][ T92] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 163.074459][ T3082] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 163.100714][ T92] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.115820][ T3082] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 163.124885][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.133048][ T92] usb 2-1: Product: syz [ 163.137985][ T92] usb 2-1: Manufacturer: syz [ 163.142673][ T92] usb 2-1: SerialNumber: syz [ 163.143668][ T3082] usb 1-1: SerialNumber: syz [ 163.413673][ T3082] usb 1-1: USB disconnect, device number 20 [ 163.496214][ T8254] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1008'. [ 163.576667][ T92] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 164.036204][ T8271] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1017'. [ 164.074159][ T982] usb 3-1: USB disconnect, device number 15 [ 164.382432][ T92] usb 2-1: current rate 9573864 is different from the runtime rate 9338507 [ 164.469475][ T8295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1027'. [ 164.643986][ T92] usb 2-1: USB disconnect, device number 19 [ 164.665534][ T5905] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 164.692731][ T8303] vxcan1 speed is unknown, defaulting to 1000 [ 164.769254][ T8306] udevd[8306]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.834518][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 164.851907][ T5905] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 164.870881][ T5905] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.896554][ T5905] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.920187][ T5905] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.946636][ T5905] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.976188][ T5905] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 164.999482][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.035101][ T5905] usbtmc 4-1:16.0: bulk endpoints not found [ 165.108672][ T8319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1037'. [ 165.762706][ T8343] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1047'. [ 165.904220][ T8346] vxcan1 speed is unknown, defaulting to 1000 [ 166.013309][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1053'. [ 166.026075][ T8354] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1052'. [ 166.533929][ T8369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1059'. [ 166.834852][ T8376] vxcan1 speed is unknown, defaulting to 1000 [ 167.175483][ T8388] vxcan1 speed is unknown, defaulting to 1000 [ 167.378385][ T8395] __nla_validate_parse: 1 callbacks suppressed [ 167.378469][ T8395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1069'. [ 167.505198][ T92] usb 4-1: USB disconnect, device number 17 [ 167.711171][ T8405] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1073'. [ 167.970441][ T8416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1078'. [ 168.405418][ T5905] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 168.687669][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 168.718706][ T5905] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 168.750789][ T5905] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.761425][ T5905] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.778027][ T5905] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 168.790634][ T5905] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.811992][ T5905] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 168.821476][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.875174][ T5905] usbtmc 2-1:16.0: bulk endpoints not found [ 168.941091][ T8430] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1084'. [ 169.045882][ T8434] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1086'. [ 169.172617][ T8437] netlink: 'syz.0.1087': attribute type 11 has an invalid length. [ 170.140294][ T8458] netlink: 'syz.2.1095': attribute type 1 has an invalid length. [ 170.155104][ T8458] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1095'. [ 170.230582][ T8460] vxcan1 speed is unknown, defaulting to 1000 [ 170.350853][ T8466] netlink: 'syz.0.1098': attribute type 11 has an invalid length. [ 170.721066][ T8480] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 170.821078][ T8482] netlink: 'syz.3.1105': attribute type 1 has an invalid length. [ 170.866002][ T8482] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1105'. [ 171.014147][ T8489] netlink: 'syz.2.1108': attribute type 11 has an invalid length. [ 171.190089][ T5930] usb 2-1: USB disconnect, device number 20 [ 171.318945][ T8495] vxcan1 speed is unknown, defaulting to 1000 [ 171.599374][ T51] Bluetooth: hci1: unexpected cc 0x2002 length: 65 > 4 [ 171.737488][ T8515] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 171.753612][ T8515] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1117'. [ 171.913933][ T8503] vxcan1 speed is unknown, defaulting to 1000 [ 172.317314][ T982] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 172.353843][ T5905] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 172.493571][ T982] usb 2-1: Using ep0 maxpacket: 8 [ 172.500002][ T982] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 172.508650][ T982] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.518591][ T982] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.530211][ T982] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 172.537795][ T5905] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 172.541098][ T982] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.564164][ T982] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 172.572202][ T5905] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 172.573225][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.620484][ T5905] usb 1-1: string descriptor 0 read error: -22 [ 172.627770][ T5905] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.637542][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.672892][ T982] usbtmc 2-1:16.0: bulk endpoints not found [ 172.733221][ T5905] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 172.753621][ T5905] cdc_ncm 1-1:1.0: bind() failure [ 172.770359][ T5905] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 172.777965][ T5905] cdc_ncm 1-1:1.1: bind() failure [ 172.935239][ T5905] usb 1-1: USB disconnect, device number 21 [ 173.212190][ T5905] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 173.221453][ T5905] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 173.231268][ T5905] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 173.239220][ T5905] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 173.248507][ T5905] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 173.258053][ T5905] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 173.268017][ T5905] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 173.276955][ T5905] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 173.286643][ T5905] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 173.294772][ T5905] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 173.307364][ T5905] hid-generic 0000:007F:FFFFFFFE.000D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 173.367392][ T8541] fido_id[8541]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 173.411920][ T8543] netlink: 'syz.3.1127': attribute type 1 has an invalid length. [ 173.419870][ T8543] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1127'. [ 173.431921][ T8543] netlink: 'syz.3.1127': attribute type 1 has an invalid length. [ 173.440353][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1127'. [ 173.622034][ T8549] vxcan1 speed is unknown, defaulting to 1000 [ 174.143067][ T8565] vxcan1 speed is unknown, defaulting to 1000 [ 174.353608][ T982] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 174.367084][ T8578] 9p: Unknown access argument n: -22 [ 174.573683][ T982] usb 1-1: Using ep0 maxpacket: 32 [ 174.585569][ T982] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 174.633285][ T982] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 174.664117][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.676307][ T982] usb 1-1: Product: syz [ 174.680502][ T982] usb 1-1: Manufacturer: syz [ 174.686395][ T982] usb 1-1: SerialNumber: syz [ 174.710881][ T982] usb 1-1: config 0 descriptor?? [ 174.720586][ T8570] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 174.741163][ T982] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.982884][ T5905] usb 1-1: USB disconnect, device number 22 [ 175.032238][ T8590] vxcan1 speed is unknown, defaulting to 1000 [ 175.065583][ T8592] 9pnet_fd: Insufficient options for proto=fd [ 175.088066][ T5892] usb 2-1: USB disconnect, device number 21 [ 175.862403][ T8619] vxcan1 speed is unknown, defaulting to 1000 [ 178.890569][ T8661] loop8: detected capacity change from 0 to 16384 [ 179.287953][ T8665] vxcan1 speed is unknown, defaulting to 1000 [ 180.030738][ T8686] vxcan1 speed is unknown, defaulting to 1000 [ 180.320878][ T8695] netlink: 'syz.2.1182': attribute type 1 has an invalid length. [ 180.329048][ T8695] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1182'. [ 180.356511][ T8695] netlink: 'syz.2.1182': attribute type 1 has an invalid length. [ 180.364950][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1182'. [ 180.869459][ T8708] vxcan1 speed is unknown, defaulting to 1000 [ 181.094731][ T92] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 181.273656][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 181.293614][ T92] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 181.307735][ T92] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.344477][ T92] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.379185][ T8730] vxcan1 speed is unknown, defaulting to 1000 [ 181.393501][ T92] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 181.415423][ T92] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 181.453483][ T92] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.523291][ T92] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 181.547832][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.652849][ T92] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 182.668207][ T8767] netlink: 'syz.2.1213': attribute type 1 has an invalid length. [ 182.676306][ T8767] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1213'. [ 182.687259][ T8767] netlink: 'syz.2.1213': attribute type 1 has an invalid length. [ 182.697434][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1213'. [ 182.766070][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1214'. [ 182.780444][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1214'. [ 183.041157][ T8781] vxcan1 speed is unknown, defaulting to 1000 [ 183.286838][ T8792] netlink: 'syz.2.1225': attribute type 1 has an invalid length. [ 183.295030][ T8792] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1225'. [ 183.310022][ T8792] netlink: 'syz.2.1225': attribute type 1 has an invalid length. [ 183.318438][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1225'. [ 183.358651][ T8793] vxcan1 speed is unknown, defaulting to 1000 [ 183.398631][ T8796] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1226'. [ 183.410462][ T8796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1226'. [ 183.979691][ T92] usb 1-1: USB disconnect, device number 23 [ 184.088765][ T8815] netlink: 'syz.2.1234': attribute type 1 has an invalid length. [ 184.121092][ T8815] netlink: 'syz.2.1234': attribute type 1 has an invalid length. [ 184.279232][ T8821] vxcan1 speed is unknown, defaulting to 1000 [ 184.708639][ T8834] vxcan1 speed is unknown, defaulting to 1000 [ 184.834082][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 185.004849][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 185.018125][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 185.031699][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.056184][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.071635][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.082332][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.104669][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 185.120766][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.430142][ T9] usb 3-1: usb_control_msg returned -32 [ 185.438915][ T9] usbtmc 3-1:16.0: can't read capabilities [ 185.454768][ T9] usb 3-1: USB disconnect, device number 16 [ 185.558160][ T8863] __nla_validate_parse: 6 callbacks suppressed [ 185.558179][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1254'. [ 185.790688][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1257'. [ 185.830959][ T8865] vxcan1 speed is unknown, defaulting to 1000 [ 186.574563][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1266'. [ 186.753095][ T8899] vxcan1 speed is unknown, defaulting to 1000 [ 186.906913][ T5892] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 187.067482][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 187.081449][ T5892] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 187.099782][ T5892] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.138427][ T5892] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 187.149177][ T5892] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 187.162568][ T8910] vxcan1 speed is unknown, defaulting to 1000 [ 187.195486][ T5892] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.212177][ T5892] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 187.237860][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.562129][ T5892] usb 1-1: usb_control_msg returned -32 [ 187.578826][ T5892] usbtmc 1-1:16.0: can't read capabilities [ 187.615018][ T5892] usb 1-1: USB disconnect, device number 24 [ 187.794919][ T8915] vxcan1 speed is unknown, defaulting to 1000 [ 187.890921][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1277'. [ 188.530541][ T8938] vxcan1 speed is unknown, defaulting to 1000 [ 188.782297][ T8947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1286'. [ 189.193998][ T92] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 189.363617][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 189.375660][ T92] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 189.384648][ T92] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 189.414384][ T92] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 189.436976][ T92] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 189.478014][ T92] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.506458][ T92] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 189.516753][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.692863][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1296'. [ 189.790743][ T92] usb 1-1: usb_control_msg returned -32 [ 189.799886][ T92] usbtmc 1-1:16.0: can't read capabilities [ 189.854758][ T92] usb 1-1: USB disconnect, device number 25 [ 190.019644][ T8983] vxcan1 speed is unknown, defaulting to 1000 [ 190.259958][ T8987] vxcan1 speed is unknown, defaulting to 1000 [ 190.563690][ T8989] vxcan1 speed is unknown, defaulting to 1000 [ 190.903623][ T5905] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 191.055364][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.082411][ T5905] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 191.117098][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.193184][ T5905] usb 1-1: config 0 descriptor?? [ 191.685155][ T5905] hid_parser_main: 33 callbacks suppressed [ 191.685179][ T5905] logitech 0003:046D:C50C.000E: unknown main item tag 0x0 [ 191.703667][ T5905] logitech 0003:046D:C50C.000E: unbalanced collection at end of report description [ 191.721532][ T5905] logitech 0003:046D:C50C.000E: parse failed [ 191.740498][ T5905] logitech 0003:046D:C50C.000E: probe with driver logitech failed with error -22 [ 191.856192][ T5905] usb 1-1: USB disconnect, device number 26 [ 192.029661][ T9029] vxcan1 speed is unknown, defaulting to 1000 [ 192.437294][ T9043] vxcan1 speed is unknown, defaulting to 1000 [ 192.853606][ T5905] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 192.957266][ T9062] vxcan1 speed is unknown, defaulting to 1000 [ 193.033598][ T5905] usb 1-1: Using ep0 maxpacket: 8 [ 193.042958][ T5905] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 193.055081][ T5905] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.066665][ T5905] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.078666][ T5905] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.089563][ T5905] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.102848][ T5905] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.160660][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.450618][ T5905] usb 1-1: usb_control_msg returned -32 [ 193.463557][ T5905] usbtmc 1-1:16.0: can't read capabilities [ 193.490162][ T5905] usb 1-1: USB disconnect, device number 27 [ 193.655489][ T9076] vxcan1 speed is unknown, defaulting to 1000 [ 194.254626][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.260959][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.466018][ T9094] vxcan1 speed is unknown, defaulting to 1000 [ 195.046470][ T30] audit: type=1326 audit(1751585013.228:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9112 comm="syz.1.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff593b8e929 code=0x7ffc0000 [ 195.083887][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 195.148579][ T30] audit: type=1326 audit(1751585013.228:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9112 comm="syz.1.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff593b8e929 code=0x7ffc0000 [ 195.216586][ T30] audit: type=1326 audit(1751585013.238:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9112 comm="syz.1.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7ff593b8e929 code=0x7ffc0000 [ 195.239673][ T30] audit: type=1326 audit(1751585013.238:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9112 comm="syz.1.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff593b8e929 code=0x7ffc0000 [ 195.269908][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 195.279746][ T30] audit: type=1326 audit(1751585013.238:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9112 comm="syz.1.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff593b8e929 code=0x7ffc0000 [ 195.307878][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 195.323927][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.341031][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 195.362558][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 195.411261][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.436177][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 195.446336][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.732574][ T9] usb 3-1: usb_control_msg returned -32 [ 195.749153][ T9] usbtmc 3-1:16.0: can't read capabilities [ 195.797378][ T9] usb 3-1: USB disconnect, device number 17 [ 195.866366][ T9129] vxcan1 speed is unknown, defaulting to 1000 [ 196.162915][ T9140] vxcan1 speed is unknown, defaulting to 1000 [ 196.633560][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 196.715318][ T9150] vxcan1 speed is unknown, defaulting to 1000 [ 196.808695][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.819601][ C0] ================================================================== [ 196.819615][ C0] BUG: KASAN: slab-use-after-free in flush_tlb_func+0x23d/0x6c0 [ 196.819642][ C0] Write of size 8 at addr ffff888071d1e000 by task kworker/0:0/9 [ 196.819653][ C0] [ 196.819666][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 196.819681][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.819690][ C0] Workqueue: usb_hub_wq hub_event [ 196.819714][ C0] Call Trace: [ 196.819720][ C0] [ 196.819724][ C0] dump_stack_lvl+0x189/0x250 [ 196.819739][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 196.819753][ C0] ? rcu_is_watching+0x15/0xb0 [ 196.819766][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.819779][ C0] ? rcu_is_watching+0x15/0xb0 [ 196.819791][ C0] ? lock_release+0x4b/0x3e0 [ 196.819811][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 196.819825][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 196.819863][ C0] print_report+0xd2/0x2b0 [ 196.819881][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 196.819897][ C0] kasan_report+0x118/0x150 [ 196.819914][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 196.819933][ C0] kasan_check_range+0x2b0/0x2c0 [ 196.819950][ C0] flush_tlb_func+0x23d/0x6c0 [ 196.819969][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 196.819985][ C0] ? sched_clock_cpu+0x74/0x430 [ 196.819998][ C0] ? rcu_is_watching+0x15/0xb0 [ 196.820011][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 196.820027][ C0] __flush_smp_call_function_queue+0x370/0xaa0 [ 196.820042][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 196.820060][ C0] __sysvec_call_function_single+0xa8/0x3d0 [ 196.820078][ C0] sysvec_call_function_single+0x9e/0xc0 [ 196.820095][ C0] [ 196.820099][ C0] [ 196.820104][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 196.820119][ C0] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 196.820136][ C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 b5 36 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 a6 36 1f 00 eb 06 e8 9f 36 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 4a 83 00 48 8b 1b 48 8b 44 24 [ 196.820146][ C0] RSP: 0018:ffffc900000e6ce0 EFLAGS: 00000283 [ 196.820158][ C0] RAX: 1ffffffff1d78ef3 RBX: ffffffff8ebc7798 RCX: 0000000000100000 [ 196.820168][ C0] RDX: ffffc90017081000 RSI: 0000000000008988 RDI: 0000000000008989 [ 196.820177][ C0] RBP: ffffc900000e6e30 R08: ffffffff8fc29e37 R09: 1ffffffff1f853c6 [ 196.820187][ C0] R10: dffffc0000000000 R11: fffffbfff1f853c7 R12: dffffc0000000000 [ 196.820197][ C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8ebc7740 [ 196.820214][ C0] ? console_flush_all+0x13a/0xc40 [ 196.820231][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 196.820251][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 196.820270][ C0] console_unlock+0xc4/0x270 [ 196.820285][ C0] ? __pfx_console_unlock+0x10/0x10 [ 196.820299][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 196.820318][ C0] vprintk_emit+0x5b7/0x7a0 [ 196.820333][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 196.820347][ C0] ? __pfx_snprintf+0x10/0x10 [ 196.820366][ C0] dev_vprintk_emit+0x337/0x3f0 [ 196.820383][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 196.820401][ C0] ? kasan_save_track+0x4f/0x80 [ 196.820416][ C0] dev_printk_emit+0xe0/0x130 [ 196.820434][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 196.820453][ C0] ? __dev_printk+0x131/0x190 [ 196.820470][ C0] _dev_notice+0x10a/0x160 [ 196.820488][ C0] ? __pfx__dev_notice+0x10/0x10 [ 196.820506][ C0] ? rcu_is_watching+0x15/0xb0 [ 196.820518][ C0] ? trace_kmalloc+0x1f/0xd0 [ 196.820532][ C0] ? usb_get_configuration+0x1c4f/0x52c0 [ 196.820554][ C0] usb_get_configuration+0x296e/0x52c0 [ 196.820593][ C0] ? __pfx_usb_get_configuration+0x10/0x10 [ 196.820617][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.820632][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.820650][ C0] usb_new_device+0x146/0x16f0 [ 196.820665][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 196.820685][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 196.820698][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.820713][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.820730][ C0] hub_event+0x2941/0x4a00 [ 196.820762][ C0] ? __pfx_hub_event+0x10/0x10 [ 196.820777][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 196.820801][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.820815][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 196.820841][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 196.820862][ C0] process_scheduled_works+0xae1/0x17b0 [ 196.820893][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 196.820919][ C0] worker_thread+0x8a0/0xda0 [ 196.820941][ C0] kthread+0x70e/0x8a0 [ 196.820957][ C0] ? __pfx_worker_thread+0x10/0x10 [ 196.820969][ C0] ? __pfx_kthread+0x10/0x10 [ 196.820985][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.821000][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.821015][ C0] ? __pfx_kthread+0x10/0x10 [ 196.821031][ C0] ret_from_fork+0x3fc/0x770 [ 196.821045][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 196.821058][ C0] ? __switch_to_asm+0x39/0x70 [ 196.821074][ C0] ? __switch_to_asm+0x33/0x70 [ 196.821090][ C0] ? __pfx_kthread+0x10/0x10 [ 196.821106][ C0] ret_from_fork_asm+0x1a/0x30 [ 196.821128][ C0] [ 196.821132][ C0] [ 196.821139][ C0] Allocated by task 5832: [ 196.821146][ C0] kasan_save_track+0x3e/0x80 [ 196.821158][ C0] __kasan_slab_alloc+0x6c/0x80 [ 196.821171][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 196.821185][ C0] copy_mm+0xdb/0x4b0 [ 196.821197][ C0] copy_process+0x1706/0x3c00 [ 196.821209][ C0] kernel_clone+0x21e/0x870 [ 196.821222][ C0] __x64_sys_clone+0x18b/0x1e0 [ 196.821236][ C0] do_syscall_64+0xfa/0x3b0 [ 196.821253][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.821265][ C0] [ 196.821268][ C0] Freed by task 9158: [ 196.821274][ C0] kasan_save_track+0x3e/0x80 [ 196.821286][ C0] kasan_save_free_info+0x46/0x50 [ 196.821304][ C0] __kasan_slab_free+0x62/0x70 [ 196.821317][ C0] kmem_cache_free+0x18f/0x400 [ 196.821330][ C0] exit_mm+0x1da/0x2c0 [ 196.821345][ C0] do_exit+0x648/0x2300 [ 196.821359][ C0] do_group_exit+0x21c/0x2d0 [ 196.821375][ C0] get_signal+0x1286/0x1340 [ 196.821393][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 196.821412][ C0] exit_to_user_mode_loop+0x75/0x110 [ 196.821430][ C0] do_syscall_64+0x2bd/0x3b0 [ 196.821446][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.821458][ C0] [ 196.821462][ C0] The buggy address belongs to the object at ffff888071d1d600 [ 196.821462][ C0] which belongs to the cache mm_struct of size 2584 [ 196.821473][ C0] The buggy address is located 2560 bytes inside of [ 196.821473][ C0] freed 2584-byte region [ffff888071d1d600, ffff888071d1e018) [ 196.821487][ C0] [ 196.821491][ C0] The buggy address belongs to the physical page: [ 196.821498][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x71d18 [ 196.821510][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 196.821521][ C0] memcg:ffff88803276d801 [ 196.821527][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 196.821546][ C0] page_type: f5(slab) [ 196.821559][ C0] raw: 00fff00000000040 ffff88801a84bb40 ffffea0001cabc00 dead000000000004 [ 196.821571][ C0] raw: 0000000000000000 00000000800b000b 00000000f5000000 ffff88803276d801 [ 196.821584][ C0] head: 00fff00000000040 ffff88801a84bb40 ffffea0001cabc00 dead000000000004 [ 196.821596][ C0] head: 0000000000000000 00000000800b000b 00000000f5000000 ffff88803276d801 [ 196.821608][ C0] head: 00fff00000000003 ffffea0001c74601 00000000ffffffff 00000000ffffffff [ 196.821637][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 196.821645][ C0] page dumped because: kasan: bad access detected [ 196.821655][ C0] page_owner tracks the page as allocated [ 196.821660][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5212, tgid 5212 (udevd), ts 44993448662, free_ts 44991339598 [ 196.821684][ C0] post_alloc_hook+0x240/0x2a0 [ 196.821699][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 196.821716][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 196.821734][ C0] alloc_pages_mpol+0x232/0x4a0 [ 196.821749][ C0] allocate_slab+0x8a/0x370 [ 196.821766][ C0] ___slab_alloc+0xbeb/0x1410 [ 196.821782][ C0] kmem_cache_alloc_noprof+0x283/0x3c0 [ 196.821795][ C0] copy_mm+0xdb/0x4b0 [ 196.821807][ C0] copy_process+0x1706/0x3c00 [ 196.821819][ C0] kernel_clone+0x21e/0x870 [ 196.821839][ C0] __x64_sys_clone+0x18b/0x1e0 [ 196.821853][ C0] do_syscall_64+0xfa/0x3b0 [ 196.821869][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.821881][ C0] page last free pid 5212 tgid 5212 stack trace: [ 196.821889][ C0] __free_frozen_pages+0xb80/0xd80 [ 196.821904][ C0] __put_partials+0x156/0x1a0 [ 196.821919][ C0] put_cpu_partial+0x17c/0x250 [ 196.821936][ C0] __slab_free+0x2d5/0x3c0 [ 196.821954][ C0] qlist_free_all+0x97/0x140 [ 196.821965][ C0] kasan_quarantine_reduce+0x148/0x160 [ 196.821977][ C0] __kasan_slab_alloc+0x22/0x80 [ 196.821990][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 196.822003][ C0] getname_flags+0xb8/0x540 [ 196.822022][ C0] vfs_fstatat+0x43/0x170 [ 196.822039][ C0] __x64_sys_newfstatat+0x116/0x190 [ 196.822050][ C0] do_syscall_64+0xfa/0x3b0 [ 196.822067][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.822079][ C0] [ 196.822082][ C0] Memory state around the buggy address: [ 196.822089][ C0] ffff888071d1df00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.822099][ C0] ffff888071d1df80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.822108][ C0] >ffff888071d1e000: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 196.822115][ C0] ^ [ 196.822122][ C0] ffff888071d1e080: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 196.822131][ C0] ffff888071d1e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 196.822138][ C0] ================================================================== [ 196.822149][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 196.822158][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 196.822174][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.822182][ C0] Workqueue: usb_hub_wq hub_event [ 196.822198][ C0] Call Trace: [ 196.822203][ C0] [ 196.822208][ C0] dump_stack_lvl+0x99/0x250 [ 196.822223][ C0] ? __asan_memcpy+0x40/0x70 [ 196.822235][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.822250][ C0] ? __pfx__printk+0x10/0x10 [ 196.822269][ C0] panic+0x2db/0x790 [ 196.822283][ C0] ? __pfx_panic+0x10/0x10 [ 196.822297][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 196.822313][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 196.822329][ C0] ? print_memory_metadata+0x314/0x400 [ 196.822349][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 196.822365][ C0] check_panic_on_warn+0x89/0xb0 [ 196.822383][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 196.822399][ C0] end_report+0x78/0x160 [ 196.822414][ C0] kasan_report+0x129/0x150 [ 196.822430][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 196.822450][ C0] kasan_check_range+0x2b0/0x2c0 [ 196.822467][ C0] flush_tlb_func+0x23d/0x6c0 [ 196.822487][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 196.822503][ C0] ? sched_clock_cpu+0x74/0x430 [ 196.822516][ C0] ? rcu_is_watching+0x15/0xb0 [ 196.822529][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 196.822547][ C0] __flush_smp_call_function_queue+0x370/0xaa0 [ 196.822561][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 196.822579][ C0] __sysvec_call_function_single+0xa8/0x3d0 [ 196.822597][ C0] sysvec_call_function_single+0x9e/0xc0 [ 196.822613][ C0] [ 196.822618][ C0] [ 196.822624][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 196.822638][ C0] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 196.822654][ C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 b5 36 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 a6 36 1f 00 eb 06 e8 9f 36 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 4a 83 00 48 8b 1b 48 8b 44 24 [ 196.822666][ C0] RSP: 0018:ffffc900000e6ce0 EFLAGS: 00000283 [ 196.822677][ C0] RAX: 1ffffffff1d78ef3 RBX: ffffffff8ebc7798 RCX: 0000000000100000 [ 196.822687][ C0] RDX: ffffc90017081000 RSI: 0000000000008988 RDI: 0000000000008989 [ 196.822697][ C0] RBP: ffffc900000e6e30 R08: ffffffff8fc29e37 R09: 1ffffffff1f853c6 [ 196.822707][ C0] R10: dffffc0000000000 R11: fffffbfff1f853c7 R12: dffffc0000000000 [ 196.822717][ C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8ebc7740 [ 196.822734][ C0] ? console_flush_all+0x13a/0xc40 [ 196.822753][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 196.822772][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 196.822792][ C0] console_unlock+0xc4/0x270 [ 196.822807][ C0] ? __pfx_console_unlock+0x10/0x10 [ 196.822822][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 196.822845][ C0] vprintk_emit+0x5b7/0x7a0 [ 196.822860][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 196.822875][ C0] ? __pfx_snprintf+0x10/0x10 [ 196.822906][ C0] dev_vprintk_emit+0x337/0x3f0 [ 196.822922][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 196.822939][ C0] ? kasan_save_track+0x4f/0x80 [ 196.822954][ C0] dev_printk_emit+0xe0/0x130 [ 196.822971][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 196.822989][ C0] ? __dev_printk+0x131/0x190 [ 196.823005][ C0] _dev_notice+0x10a/0x160 [ 196.823022][ C0] ? __pfx__dev_notice+0x10/0x10 [ 196.823039][ C0] ? rcu_is_watching+0x15/0xb0 [ 196.823051][ C0] ? trace_kmalloc+0x1f/0xd0 [ 196.823063][ C0] ? usb_get_configuration+0x1c4f/0x52c0 [ 196.823084][ C0] usb_get_configuration+0x296e/0x52c0 [ 196.823120][ C0] ? __pfx_usb_get_configuration+0x10/0x10 [ 196.823143][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.823157][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.823174][ C0] usb_new_device+0x146/0x16f0 [ 196.823188][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 196.823206][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 196.823219][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.823233][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.823250][ C0] hub_event+0x2941/0x4a00 [ 196.823280][ C0] ? __pfx_hub_event+0x10/0x10 [ 196.823295][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 196.823316][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.823330][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 196.823367][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 196.823389][ C0] process_scheduled_works+0xae1/0x17b0 [ 196.823421][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 196.823458][ C0] worker_thread+0x8a0/0xda0 [ 196.823487][ C0] kthread+0x70e/0x8a0 [ 196.823510][ C0] ? __pfx_worker_thread+0x10/0x10 [ 196.823526][ C0] ? __pfx_kthread+0x10/0x10 [ 196.823548][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.823568][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.823590][ C0] ? __pfx_kthread+0x10/0x10 [ 196.823612][ C0] ret_from_fork+0x3fc/0x770 [ 196.823630][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 196.823649][ C0] ? __switch_to_asm+0x39/0x70 [ 196.823672][ C0] ? __switch_to_asm+0x33/0x70 [ 196.823695][ C0] ? __pfx_kthread+0x10/0x10 [ 196.823718][ C0] ret_from_fork_asm+0x1a/0x30 [ 196.823750][ C0] [ 196.824077][ C0] Kernel Offset: disabled