last executing test programs: 4.034720948s ago: executing program 4 (id=571): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) 3.78748067s ago: executing program 1 (id=573): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x8ba4, 0x80, 0x2, 0x11e}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r0, 0xdb4, 0xfffffffd, 0x0, 0x0, 0x0) 3.640605162s ago: executing program 2 (id=574): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000880)=0x1) io_setup(0x2dd8, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) 3.585023292s ago: executing program 4 (id=575): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000440b45501821916115d5557f9d7d5c"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000280)={0x1, 0x100, 0x7e0}) 3.424693889s ago: executing program 3 (id=576): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) write$FUSE_GETXATTR(r2, 0x0, 0x0) 3.244923994s ago: executing program 3 (id=577): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x5, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x3f, 0x0, 0x0, 0x48001}, 0xc001) 3.214520762s ago: executing program 2 (id=578): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20) close(r0) 3.032256519s ago: executing program 2 (id=579): unshare(0x22020600) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000100000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r1, 0x87, &(0x7f0000000800)}, 0x10) 2.953367676s ago: executing program 3 (id=580): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x54}, 0x50) 2.821839647s ago: executing program 2 (id=582): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x309201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r2, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x1d, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x5, '\x00', 0x33}, {0x9, 0xf, 0x57, '\x00', 0x9}, {0x2, 0x4, 0x1}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x8, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x81, '\x00', 0xf}, {0x7b, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0x4, '\x00', 0x7}, {0x6, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x4}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) chown(0x0, 0x0, 0x0) listen(r3, 0x80) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 2.547577904s ago: executing program 0 (id=583): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x3f, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000005c0)="e267", 0x2}], 0x1}}], 0x1, 0x95) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000518000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) 2.42418234s ago: executing program 0 (id=584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x6}, @val={@void, {0x8100, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @multicast1}, {0xa001, 0x880b, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x9, 0x0, @void}}}}}}}}, 0x32) 2.218539749s ago: executing program 1 (id=585): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x80, 0x4) 2.092593707s ago: executing program 3 (id=586): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 1.855269619s ago: executing program 1 (id=587): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0xcc, 0xc}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000808500000082000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r3, 0x0, 0x0}, 0x10) 1.657710077s ago: executing program 3 (id=588): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6, 0x4}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x8, 0x0, 0x4}]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x6, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x9, 0x1, 0x6, 0x5, 0x7, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x42, 0xf4, 0x4, 0x200}], 0xfffffffe}) 1.547161827s ago: executing program 4 (id=589): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) 1.400196916s ago: executing program 1 (id=590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) ioctl$TUNGETVNETLE(r0, 0x40047452, 0x0) 1.217946226s ago: executing program 4 (id=591): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000480)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.15203182s ago: executing program 0 (id=592): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) 940.321568ms ago: executing program 0 (id=593): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 940.103626ms ago: executing program 3 (id=594): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000140)={&(0x7f0000000040)=""/199, 0xc7}) creat(0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 923.531368ms ago: executing program 4 (id=595): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) 816.994782ms ago: executing program 1 (id=596): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, &(0x7f0000000340)=[{0x0, 0x4}], 0xdeadbeef, 0x8, 0x1}) 816.027154ms ago: executing program 2 (id=597): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) bind$ax25(r0, &(0x7f00000002c0)={{0x3, @default}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @null}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 595.424828ms ago: executing program 4 (id=598): syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/devices.allow\x00', 0x2, 0xd45b76a1ea672574) sendfile(r0, r0, 0x0, 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000004540)=""/4120) 534.957078ms ago: executing program 0 (id=599): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="54010000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000002f0133008020090008021100000108021100000050505050"], 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 358.051523ms ago: executing program 1 (id=600): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x707b, 0x400, 0x6, 0x35b}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) io_uring_enter(r2, 0x154e, 0x0, 0x41, 0x0, 0x0) 16.625697ms ago: executing program 2 (id=601): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xf7fe, 0x0, @private1, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) close(r0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) 0s ago: executing program 0 (id=602): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x115000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000400)={0x3000, 0x9000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000340)={0x4, 0x10000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. [ 81.066097][ T5788] cgroup: Unknown subsys name 'net' [ 81.327176][ T5788] cgroup: Unknown subsys name 'cpuset' [ 81.383148][ T5788] cgroup: Unknown subsys name 'rlimit' [ 81.601045][ T993] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 83.198988][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.240642][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.250586][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.252324][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.267113][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.268059][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.275885][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.276670][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.295719][ T5120] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.344101][ T5120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.354622][ T5120] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.440630][ T5120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.443401][ T5120] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.444264][ T5120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.447480][ T5120] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.448988][ T5120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.526290][ T5120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.528281][ T5120] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.531522][ T5120] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.534429][ T5120] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.535203][ T5120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.541025][ T5120] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.544538][ T5120] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.545248][ T5120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.546364][ T5120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.547088][ T5120] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.214026][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 88.296542][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 88.610173][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 88.617308][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 88.753109][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 89.064550][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.065869][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.066235][ T5807] bridge_slave_0: entered allmulticast mode [ 89.067847][ T5807] bridge_slave_0: entered promiscuous mode [ 89.184874][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.184972][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.185091][ T5807] bridge_slave_1: entered allmulticast mode [ 89.186665][ T5807] bridge_slave_1: entered promiscuous mode [ 89.289468][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.289589][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.289752][ T5810] bridge_slave_0: entered allmulticast mode [ 89.291532][ T5810] bridge_slave_0: entered promiscuous mode [ 89.334650][ T5120] Bluetooth: hci0: command tx timeout [ 89.412096][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.412193][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.412466][ T5810] bridge_slave_1: entered allmulticast mode [ 89.415747][ T5810] bridge_slave_1: entered promiscuous mode [ 89.422792][ T5120] Bluetooth: hci1: command tx timeout [ 89.572895][ T5808] Bluetooth: hci2: command tx timeout [ 89.573103][ T5120] Bluetooth: hci4: command tx timeout [ 89.652948][ T5120] Bluetooth: hci3: command tx timeout [ 89.766948][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.945711][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.945948][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.946055][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.946154][ T5814] bridge_slave_0: entered allmulticast mode [ 89.947636][ T5814] bridge_slave_0: entered promiscuous mode [ 90.023513][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.023613][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.023725][ T5816] bridge_slave_0: entered allmulticast mode [ 90.025235][ T5816] bridge_slave_0: entered promiscuous mode [ 90.029614][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.103840][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.103937][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.104064][ T5814] bridge_slave_1: entered allmulticast mode [ 90.105578][ T5814] bridge_slave_1: entered promiscuous mode [ 90.163727][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.163850][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.164010][ T5816] bridge_slave_1: entered allmulticast mode [ 90.165828][ T5816] bridge_slave_1: entered promiscuous mode [ 90.169106][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.303632][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.303727][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.303852][ T5817] bridge_slave_0: entered allmulticast mode [ 90.305548][ T5817] bridge_slave_0: entered promiscuous mode [ 90.565290][ T5807] team0: Port device team_slave_0 added [ 90.673933][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.674069][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.674241][ T5817] bridge_slave_1: entered allmulticast mode [ 90.676236][ T5817] bridge_slave_1: entered promiscuous mode [ 90.795717][ T5807] team0: Port device team_slave_1 added [ 90.798547][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.906419][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.908452][ T5810] team0: Port device team_slave_0 added [ 90.985400][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.076103][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.077748][ T5810] team0: Port device team_slave_1 added [ 91.226116][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.384369][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.384381][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.384395][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.412761][ T5120] Bluetooth: hci0: command tx timeout [ 91.466454][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.492963][ T5120] Bluetooth: hci1: command tx timeout [ 91.594461][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.594477][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.594500][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.596320][ T5814] team0: Port device team_slave_0 added [ 91.653010][ T5808] Bluetooth: hci2: command tx timeout [ 91.653100][ T5120] Bluetooth: hci4: command tx timeout [ 91.732968][ T5120] Bluetooth: hci3: command tx timeout [ 91.885292][ T5816] team0: Port device team_slave_0 added [ 91.886452][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.886473][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.886496][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.898764][ T5814] team0: Port device team_slave_1 added [ 92.015513][ T5816] team0: Port device team_slave_1 added [ 92.016364][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.016373][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.016388][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.134899][ T5817] team0: Port device team_slave_0 added [ 92.255619][ T5817] team0: Port device team_slave_1 added [ 92.414168][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.414179][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.414192][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.524334][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.524344][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.524358][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.624143][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.624158][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.624181][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.744118][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.744133][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.744156][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.829056][ T5807] hsr_slave_0: entered promiscuous mode [ 92.830136][ T5807] hsr_slave_1: entered promiscuous mode [ 92.841929][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.841942][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.841965][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.966690][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.966706][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.966729][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.975431][ T5810] hsr_slave_0: entered promiscuous mode [ 92.976688][ T5810] hsr_slave_1: entered promiscuous mode [ 92.977686][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 92.977794][ T5810] Cannot create hsr debugfs directory [ 93.448318][ T5814] hsr_slave_0: entered promiscuous mode [ 93.449100][ T5814] hsr_slave_1: entered promiscuous mode [ 93.449686][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 93.449705][ T5814] Cannot create hsr debugfs directory [ 93.492819][ T5120] Bluetooth: hci0: command tx timeout [ 93.549452][ T5816] hsr_slave_0: entered promiscuous mode [ 93.550254][ T5816] hsr_slave_1: entered promiscuous mode [ 93.550791][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 93.550807][ T5816] Cannot create hsr debugfs directory [ 93.572773][ T5120] Bluetooth: hci1: command tx timeout [ 93.732971][ T5120] Bluetooth: hci4: command tx timeout [ 93.733002][ T5120] Bluetooth: hci2: command tx timeout [ 93.745344][ T5817] hsr_slave_0: entered promiscuous mode [ 93.746610][ T5817] hsr_slave_1: entered promiscuous mode [ 93.747532][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 93.747553][ T5817] Cannot create hsr debugfs directory [ 93.814031][ T5808] Bluetooth: hci3: command tx timeout [ 95.192452][ T5807] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.219415][ T5807] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.258003][ T5807] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.312498][ T5807] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.417604][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.439158][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.487944][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.517297][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.573195][ T5808] Bluetooth: hci0: command tx timeout [ 95.612173][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.648278][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.653021][ T5808] Bluetooth: hci1: command tx timeout [ 95.678449][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.714447][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.813097][ T5808] Bluetooth: hci2: command tx timeout [ 95.813128][ T5808] Bluetooth: hci4: command tx timeout [ 95.836489][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.886929][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.892996][ T5120] Bluetooth: hci3: command tx timeout [ 95.927049][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.970898][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.092433][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.132554][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.172429][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.180093][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.210952][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.305634][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.344076][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.347350][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.347928][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.386124][ T1514] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.386242][ T1514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.431175][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.461404][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.479680][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.479877][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.506549][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.506667][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.560927][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.596724][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.605765][ T1447] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.605965][ T1447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.639967][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.640599][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.711609][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.722049][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.765552][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.765650][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.807423][ T1514] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.807569][ T1514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.848748][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.889603][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.889813][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.950899][ T765] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.951050][ T765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.171886][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.317636][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.509292][ T5807] veth0_vlan: entered promiscuous mode [ 97.524075][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.598697][ T5807] veth1_vlan: entered promiscuous mode [ 97.791591][ T5807] veth0_macvtap: entered promiscuous mode [ 97.821015][ T5814] veth0_vlan: entered promiscuous mode [ 97.822230][ T5807] veth1_macvtap: entered promiscuous mode [ 97.838067][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.858543][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.880881][ T5814] veth1_vlan: entered promiscuous mode [ 97.910743][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.930800][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.968578][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.979760][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.995457][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.001261][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.024934][ T5810] veth0_vlan: entered promiscuous mode [ 98.145565][ T5816] veth0_vlan: entered promiscuous mode [ 98.147081][ T5814] veth0_macvtap: entered promiscuous mode [ 98.177542][ T5810] veth1_vlan: entered promiscuous mode [ 98.218067][ T5817] veth0_vlan: entered promiscuous mode [ 98.221963][ T5814] veth1_macvtap: entered promiscuous mode [ 98.261899][ T5816] veth1_vlan: entered promiscuous mode [ 98.281046][ T5817] veth1_vlan: entered promiscuous mode [ 98.330082][ T1447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.330106][ T1447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.345680][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.399705][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.425950][ T1514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.425969][ T1514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.430326][ T5810] veth0_macvtap: entered promiscuous mode [ 98.434019][ T1447] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.442223][ T1447] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.454120][ T1447] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.484843][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.494961][ T5810] veth1_macvtap: entered promiscuous mode [ 98.502026][ T5816] veth0_macvtap: entered promiscuous mode [ 98.571212][ T5816] veth1_macvtap: entered promiscuous mode [ 98.578414][ T5817] veth0_macvtap: entered promiscuous mode [ 98.639417][ T5817] veth1_macvtap: entered promiscuous mode [ 98.685298][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.768585][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.789080][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.837497][ T5917] Bluetooth: MGMT ver 1.23 [ 98.837542][ T5917] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 98.866277][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.879128][ T1514] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.879216][ T1514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.879230][ T1514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.923599][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.924194][ T1514] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.930483][ T1514] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.971614][ T1514] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.012017][ T1514] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.023195][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.042773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.042869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.146670][ T1514] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.507723][ T4467] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.754207][ T4467] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.754287][ T4467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.754300][ T4467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.985137][ T4467] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.012400][ T4467] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.026907][ T4467] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.067034][ T4467] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.460209][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.495163][ T1222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.495182][ T1222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.648705][ T5929] lo speed is unknown, defaulting to 1000 [ 100.653868][ T5929] lo speed is unknown, defaulting to 1000 [ 100.703036][ T5929] lo speed is unknown, defaulting to 1000 [ 100.797208][ T5929] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.959788][ T5929] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 101.164752][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.192269][ T5929] lo speed is unknown, defaulting to 1000 [ 101.196306][ T5929] lo speed is unknown, defaulting to 1000 [ 101.199027][ T5929] lo speed is unknown, defaulting to 1000 [ 101.202021][ T5929] lo speed is unknown, defaulting to 1000 [ 101.204782][ T5929] lo speed is unknown, defaulting to 1000 [ 101.336776][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.410462][ T4467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.410482][ T4467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.586012][ T5936] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.632863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.805088][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.805106][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.876921][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.876942][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.542818][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.542839][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.923581][ T1231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.923600][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.195988][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.587087][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.688021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.688758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.739680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.742697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.752679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.762679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.772678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.012012][ T5959] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 105.079051][ T5959] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 105.079350][ T5959] overlayfs: failed to look up (tracing) for ino (-66) [ 105.141061][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.983387][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.475794][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.713739][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.872165][ T5971] ======================================================= [ 106.872165][ T5971] WARNING: The mand mount option has been deprecated and [ 106.872165][ T5971] and is ignored by this kernel. Remove the mand [ 106.872165][ T5971] option from the mount to silence this warning. [ 106.872165][ T5971] ======================================================= [ 106.890470][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.334244][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.917229][ T5974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'. [ 107.918800][ T5974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'. [ 108.287064][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.729360][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.266407][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.482442][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.123404][ T5995] binder: 5986:5995 ioctl 400c620e 200000000380 returned -22 [ 111.872746][ T5999] warning: `syz.3.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.029646][ T6024] process 'syz.3.24' launched './file0' with NULL argv: empty string added [ 115.567322][ T991] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.737970][ T991] usb 4-1: Using ep0 maxpacket: 16 [ 115.767532][ T991] usb 4-1: config 0 has an invalid interface number: 147 but max is 0 [ 115.767560][ T991] usb 4-1: config 0 has no interface number 0 [ 115.767610][ T991] usb 4-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 115.767635][ T991] usb 4-1: config 0 interface 147 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 115.767661][ T991] usb 4-1: config 0 interface 147 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 115.771166][ T991] usb 4-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 115.771193][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.771212][ T991] usb 4-1: Product: syz [ 115.771227][ T991] usb 4-1: Manufacturer: syz [ 115.771242][ T991] usb 4-1: SerialNumber: syz [ 115.871034][ T991] usb 4-1: config 0 descriptor?? [ 115.875423][ T6022] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 115.875503][ T6022] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 116.341036][ T991] net1080 4-1:0.147: probe with driver net1080 failed with error -71 [ 117.194968][ T991] usb 4-1: USB disconnect, device number 2 [ 119.232495][ T6050] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 119.233354][ T6050] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 119.595064][ T5954] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.669309][ T6058] QAT: Invalid ioctl 1076910120 [ 119.687988][ T6058] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 119.688043][ T6058] bond0: (slave lo): Error: Device can not be enslaved while up [ 120.540245][ T5954] usb 3-1: config 0 has no interfaces? [ 120.540276][ T5954] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 120.540289][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.545953][ T5954] usb 3-1: config 0 descriptor?? [ 120.830053][ T993] usb 3-1: USB disconnect, device number 2 [ 121.181933][ T6063] Zero length message leads to an empty skb [ 124.717885][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.855426][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.228030][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.263793][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.581515][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.938106][ T6090] ptrace attach of ""[6091] was attempted by "./syz-executor exec"[6090] [ 128.229752][ T6090] syz.0.39 (6090) used greatest stack depth: 18368 bytes left [ 129.672146][ T6102] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.238168][ T6109] Bluetooth: MGMT ver 1.23 [ 133.193611][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.193689][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.483100][ T5873] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 133.833497][ T5873] usb 4-1: config 0 has no interfaces? [ 133.838481][ T5873] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 133.838514][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.446304][ T5873] usb 4-1: config 0 descriptor?? [ 135.029368][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.458320][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.485389][ T993] usb 4-1: USB disconnect, device number 3 [ 137.456942][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.553539][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.123458][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.366166][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.002918][ T993] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 139.140728][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'. [ 139.140757][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'. [ 139.166294][ T993] usb 4-1: Using ep0 maxpacket: 32 [ 139.168926][ T993] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.168940][ T993] usb 4-1: config 0 has no interface number 0 [ 139.170737][ T993] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 139.170752][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.170763][ T993] usb 4-1: Product: syz [ 139.170770][ T993] usb 4-1: Manufacturer: syz [ 139.170778][ T993] usb 4-1: SerialNumber: syz [ 139.246828][ T993] usb 4-1: config 0 descriptor?? [ 139.276129][ T993] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 139.276161][ T993] usb 4-1: selecting invalid altsetting 1 [ 139.276177][ T993] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 139.326107][ T993] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 139.326669][ T993] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 139.326769][ T993] usb 4-1: media controller created [ 139.394683][ T993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.609880][ T6157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.610336][ T6157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.534354][ T993] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 140.534423][ T993] zl10353_read_register: readreg error (reg=127, ret==-110) [ 140.541925][ T6157] netlink: 156 bytes leftover after parsing attributes in process `syz.3.58'. [ 140.811652][ T993] usb 4-1: USB disconnect, device number 4 [ 140.863107][ T6178] netlink: 'syz.0.64': attribute type 29 has an invalid length. [ 140.863122][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 143.544100][ T37] audit: type=1326 audit(1761994261.562:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6196 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb361dfefc9 code=0x7ffc0000 [ 143.544151][ T37] audit: type=1326 audit(1761994261.572:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6196 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb361dfefc9 code=0x7ffc0000 [ 143.653145][ T37] audit: type=1326 audit(1761994261.682:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6196 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fb361dfefc9 code=0x7ffc0000 [ 143.653202][ T37] audit: type=1326 audit(1761994261.682:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6196 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb361dfefc9 code=0x7ffc0000 [ 143.653242][ T37] audit: type=1326 audit(1761994261.682:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6196 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb361dfefc9 code=0x7ffc0000 [ 144.329608][ T6209] trusted_key: encrypted_key: insufficient parameters specified [ 145.122827][ T993] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 145.293532][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.201340][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.228745][ T993] usb 5-1: Using ep0 maxpacket: 32 [ 146.324467][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.341577][ T993] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.341721][ T993] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.341759][ T993] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 146.341780][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.395664][ T993] usb 5-1: config 0 descriptor?? [ 146.562543][ T993] hub 5-1:0.0: bad descriptor, ignoring hub [ 146.562584][ T993] hub 5-1:0.0: probe with driver hub failed with error -5 [ 146.635428][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.656314][ T993] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 146.743920][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 146.747502][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 148.161584][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.215808][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.587022][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.043235][ T991] usb 5-1: USB disconnect, device number 2 [ 149.312878][ T991] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 150.539480][ T991] usb 4-1: unable to get BOS descriptor or descriptor too short [ 150.540085][ T991] usb 4-1: not running at top speed; connect to a high speed hub [ 150.541278][ T991] usb 4-1: config 6 has an invalid interface number: 179 but max is 0 [ 150.541302][ T991] usb 4-1: config 6 has no interface number 0 [ 150.541333][ T991] usb 4-1: config 6 interface 179 has no altsetting 0 [ 150.572371][ T991] usb 4-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice= 2.18 [ 150.572399][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.572418][ T991] usb 4-1: Product: syz [ 150.572431][ T991] usb 4-1: Manufacturer: syz [ 150.572445][ T991] usb 4-1: SerialNumber: syz [ 150.651574][ T6277] tipc: Enabling of bearer rejected, failed to enable media [ 150.876561][ T991] quatech2 4-1:6.179: Quatech 2nd gen USB to Serial Driver converter detected [ 150.889441][ T991] usb 4-1: qt2_attach - failed to power on unit: -71 [ 150.889588][ T991] quatech2 4-1:6.179: probe with driver quatech2 failed with error -71 [ 150.903479][ T991] usb 4-1: USB disconnect, device number 5 [ 151.007917][ T6280] Failed to get privilege flags for destination (handle=0x2:0x25) [ 151.190565][ T6287] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.337724][ T5120] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 151.403498][ T6293] pimreg: entered allmulticast mode [ 151.793080][ T6295] netlink: 52 bytes leftover after parsing attributes in process `syz.4.105'. [ 152.564352][ T6307] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 152.566605][ T6307] block device autoloading is deprecated and will be removed. [ 153.084838][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 153.847168][ T6320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.166274][ T6336] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 155.436550][ T37] audit: type=1326 audit(1761994273.472:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6346 comm="syz.0.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ddeefc9 code=0x7ffc0000 [ 155.439756][ T37] audit: type=1326 audit(1761994273.472:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6346 comm="syz.0.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ddeefc9 code=0x7ffc0000 [ 155.634584][ T5873] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 156.442692][ T37] audit: type=1326 audit(1761994274.052:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6338 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5585a2efc9 code=0x7ffc0000 [ 156.442741][ T37] audit: type=1326 audit(1761994274.062:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6338 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5585a2efc9 code=0x7ffc0000 [ 156.442782][ T37] audit: type=1326 audit(1761994274.082:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6338 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5585a2efc9 code=0x7ffc0000 [ 156.442822][ T37] audit: type=1326 audit(1761994274.082:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6338 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5585a2efc9 code=0x7ffc0000 [ 156.442861][ T37] audit: type=1326 audit(1761994274.082:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6338 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5585a2efc9 code=0x7ffc0000 [ 156.720816][ T5120] Bluetooth: hci1: adv larger than maximum supported [ 156.720845][ T5120] Bluetooth: hci1: Malformed LE Event: 0x0d [ 156.722607][ T5873] usb 5-1: unable to get BOS descriptor or descriptor too short [ 156.746501][ T5873] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 156.746539][ T5873] usb 5-1: can't read configurations, error -71 [ 157.036819][ T6366] netlink: 88 bytes leftover after parsing attributes in process `syz.1.133'. [ 157.120003][ T6362] evm: overlay not supported [ 157.353520][ T6372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.135'. [ 158.292833][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 158.442928][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 158.445451][ T31] usb 1-1: config 0 has an invalid interface number: 233 but max is 0 [ 158.445466][ T31] usb 1-1: config 0 has no interface number 0 [ 158.445492][ T31] usb 1-1: config 0 interface 233 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 158.445506][ T31] usb 1-1: config 0 interface 233 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 158.448096][ T31] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=f0.b0 [ 158.448121][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.448132][ T31] usb 1-1: Product: syz [ 158.448140][ T31] usb 1-1: Manufacturer: syz [ 158.448147][ T31] usb 1-1: SerialNumber: syz [ 158.526260][ T31] usb 1-1: config 0 descriptor?? [ 158.551091][ T31] keyspan 1-1:0.233: Keyspan 1 port adapter converter detected [ 158.551411][ T31] keyspan 1-1:0.233: found no endpoint descriptor for endpoint 84 [ 158.580480][ T31] keyspan 1-1:0.233: found no endpoint descriptor for endpoint 81 [ 158.581744][ T31] keyspan 1-1:0.233: found no endpoint descriptor for endpoint 82 [ 158.581813][ T31] keyspan 1-1:0.233: found no endpoint descriptor for endpoint 2 [ 158.581861][ T31] keyspan 1-1:0.233: found no endpoint descriptor for endpoint 83 [ 158.581908][ T31] keyspan 1-1:0.233: found no endpoint descriptor for endpoint 3 [ 158.628921][ T31] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 158.803099][ T5954] usb 1-1: USB disconnect, device number 2 [ 158.836717][ T5954] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 158.852238][ T5954] keyspan 1-1:0.233: device disconnected [ 159.072782][ T5790] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 159.237780][ T5790] usb 2-1: Using ep0 maxpacket: 8 [ 159.240133][ T5790] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.241363][ T5790] usb 2-1: config 4 interface 0 has no altsetting 0 [ 159.264711][ T5790] usb 2-1: string descriptor 0 read error: -22 [ 159.264860][ T5790] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 159.264884][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.310282][ T5790] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 159.370859][ T5790] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 159.371413][ T5790] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 159.371474][ T5790] usb 2-1: media controller created [ 159.378249][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.152'. [ 159.537548][ T5790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.602774][ T991] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 159.688389][ T5790] zl10353_read_register: readreg error (reg=127, ret==0) [ 159.756511][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.756548][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.756571][ T991] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.756617][ T991] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.756641][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.816566][ T991] usb 3-1: config 0 descriptor?? [ 159.952882][ T5790] usb 2-1: USB disconnect, device number 2 [ 160.352157][ T991] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 160.439022][ T5914] usb 3-1: USB disconnect, device number 3 [ 160.463143][ T5790] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 160.625910][ T5790] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.625936][ T5790] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 160.625990][ T5790] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 160.626014][ T5790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.657599][ T5790] usb 5-1: config 0 descriptor?? [ 160.690729][ T6435] fido_id[6435]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 160.780113][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.216456][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.786489][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.980919][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.982788][ T5120] Bluetooth: hci1: command tx timeout [ 162.291628][ T5790] Bluetooth: Can't get version to change to load ram patch err [ 162.291657][ T5790] Bluetooth: Loading sysconfig file failed [ 162.291696][ T5790] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 162.324977][ T5790] usb 5-1: USB disconnect, device number 5 [ 162.722812][ T5873] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 162.908216][ T6474] Bluetooth: MGMT ver 1.23 [ 162.952004][ T5873] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 162.952032][ T5873] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 162.952052][ T5873] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 162.952104][ T5873] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 162.952131][ T5873] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 163.006485][ T5873] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.006514][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.006533][ T5873] usb 2-1: Product: syz [ 163.006548][ T5873] usb 2-1: Manufacturer: syz [ 163.057387][ T5873] cdc_wdm 2-1:1.0: skipping garbage [ 163.057405][ T5873] cdc_wdm 2-1:1.0: skipping garbage [ 163.058201][ T6480] capability: warning: `syz.2.183' uses deprecated v2 capabilities in a way that may be insecure [ 163.106682][ T5873] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 163.106712][ T5873] cdc_wdm 2-1:1.0: Unknown control protocol [ 163.139930][ T6475] binder: 6468:6475 ioctl 400c620e 200000000380 returned -22 [ 163.367840][ T5873] usb 2-1: USB disconnect, device number 3 [ 163.968456][ T6499] usb usb8: usbfs: process 6499 (syz.0.192) did not claim interface 1 before use [ 164.094282][ T6501] netlink: 36 bytes leftover after parsing attributes in process `syz.4.193'. [ 164.458782][ T6511] nbd: must specify at least one socket [ 165.402245][ T6542] delete_channel: no stack [ 165.604437][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'. [ 167.391103][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.985889][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 167.985960][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 168.414985][ T6602] Bluetooth: MGMT ver 1.23 [ 169.320505][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 169.320533][ T6630] netlink: 36 bytes leftover after parsing attributes in process `syz.1.252'. [ 169.534624][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.302727][ T5873] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 170.463254][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 170.465542][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.465572][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.465610][ T5873] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 170.465635][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.474724][ T5873] usb 4-1: config 0 descriptor?? [ 170.921382][ T5873] mcp2200 0003:04D8:00DF.0002: unknown main item tag 0x2 [ 170.921419][ T5873] mcp2200 0003:04D8:00DF.0002: item fetching failed at offset 4/5 [ 170.922206][ T5873] mcp2200 0003:04D8:00DF.0002: can't parse reports [ 170.922306][ T5873] mcp2200 0003:04D8:00DF.0002: probe with driver mcp2200 failed with error -22 [ 171.126382][ T5873] usb 4-1: USB disconnect, device number 6 [ 171.155112][ T44] kernel write not supported for file /ppp (pid: 44 comm: kworker/1:1) [ 172.022873][ T5790] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 172.175173][ T5790] usb 4-1: Using ep0 maxpacket: 8 [ 172.177357][ T5790] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 172.177382][ T5790] usb 4-1: config 0 has no interface number 1 [ 172.177436][ T5790] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 172.177457][ T5790] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 172.177482][ T5790] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 172.177507][ T5790] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 172.177531][ T5790] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 172.177572][ T5790] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 172.177595][ T5790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.177616][ T5790] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 172.181748][ T5790] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 172.181773][ T5790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.181791][ T5790] usb 4-1: Product: syz [ 172.181804][ T5790] usb 4-1: Manufacturer: syz [ 172.181817][ T5790] usb 4-1: SerialNumber: syz [ 172.335989][ T5790] usb 4-1: config 0 descriptor?? [ 172.336919][ T6675] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 172.372788][ T5120] Bluetooth: hci4: command tx timeout [ 172.377411][ T5790] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.407762][ T5790] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.568651][ T6683] Attempt to restore checkpoint with obsolete wellknown handles [ 172.648415][ T6685] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.274'. [ 172.648539][ T6685] openvswitch: netlink: Message has 16 unknown bytes. [ 172.674276][ T5790] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 172.694532][ T5790] usb 4-1: USB disconnect, device number 7 [ 173.547513][ T6695] udevd[6695]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.933565][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.277'. [ 174.099353][ T6708] [U]  [ 174.099368][ T6708] [U] K{ [ 174.099386][ T6708] [U] t 1ŠFfˊ`GJgo/mC [ 174.099435][ T6708] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 174.099480][ T6708] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 174.099560][ T6708] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 174.099683][ T6708] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 174.099728][ T6708] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 174.099751][ T6708] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 174.099804][ T6708] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 174.100083][ T6708] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 174.100147][ T6708] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 174.100168][ T6708] [U] 22Ʃx?0;3u [ 174.100256][ T6708] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 174.100298][ T6708] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 174.100326][ T6708] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 174.100345][ T6708] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 174.100374][ T6708] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 174.100415][ T6708] [U] ec [ 174.100427][ T6708] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 174.116127][ T6703] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 175.429424][ T6736] netlink: 256 bytes leftover after parsing attributes in process `syz.4.291'. [ 176.552812][ T5790] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 176.698053][ T6747] netlink: 64 bytes leftover after parsing attributes in process `syz.0.296'. [ 176.698102][ T6747] netlink: 64 bytes leftover after parsing attributes in process `syz.0.296'. [ 176.704106][ T5790] usb 3-1: Using ep0 maxpacket: 16 [ 176.718368][ T5790] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 176.718401][ T5790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 176.770901][ T5790] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 176.770931][ T5790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.770952][ T5790] usb 3-1: Product: syz [ 176.770966][ T5790] usb 3-1: Manufacturer: syz [ 176.770981][ T5790] usb 3-1: SerialNumber: syz [ 176.819047][ T5790] usb 3-1: config 0 descriptor?? [ 176.835619][ T5790] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 176.835642][ T5790] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 177.464327][ T5790] em28xx 3-1:0.0: chip ID is em2750 [ 177.565804][ T6762] netlink: 'syz.0.304': attribute type 1 has an invalid length. [ 177.666233][ T5790] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 177.667046][ T5790] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 177.667064][ T5790] em28xx 3-1:0.0: No AC97 audio processor [ 177.726573][ T5790] usb 3-1: USB disconnect, device number 4 [ 177.729914][ T5790] em28xx 3-1:0.0: Disconnecting em28xx [ 177.765048][ T5790] em28xx 3-1:0.0: Freeing device [ 178.450040][ T6784] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 181.881323][ T6863] program syz.4.348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.120831][ T1447] tipc: Subscription rejected, illegal request [ 182.375864][ T5873] hid-generic 0007:FFFFFFF8:0FFF.0003: unknown main item tag 0x0 [ 182.375902][ T5873] hid-generic 0007:FFFFFFF8:0FFF.0003: unknown main item tag 0x0 [ 182.375927][ T5873] hid-generic 0007:FFFFFFF8:0FFF.0003: unknown main item tag 0x0 [ 182.375951][ T5873] hid-generic 0007:FFFFFFF8:0FFF.0003: unknown main item tag 0x0 [ 182.375976][ T5873] hid-generic 0007:FFFFFFF8:0FFF.0003: unknown main item tag 0x0 [ 182.375998][ T5873] hid-generic 0007:FFFFFFF8:0FFF.0003: unknown main item tag 0x0 [ 182.376022][ T5873] hid-generic 0007:FFFFFFF8:0FFF.0003: unknown main item tag 0x0 [ 182.376047][ T5873] hid-generic 0007:FFFFFFF8:0FFF.0003: unknown main item tag 0x0 [ 182.376071][ T5873] hid-generic 0007:FFFFFFF8:0FFF.0003: unknown main item tag 0x0 [ 182.376095][ T5873] hid-generic 0007:FFFFFFF8:0FFF.0003: unknown main item tag 0x0 [ 182.492736][ T5873] hid-generic 0007:FFFFFFF8:0FFF.0003: hidraw0: HID v0.07 Device [syz1] on syz0 [ 182.594732][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 182.773460][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 182.777400][ T31] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 182.777439][ T31] usb 5-1: can't read configurations, error -71 [ 182.845565][ T6894] Invalid ELF header len 1 [ 182.978614][ T6897] netlink: 'syz.1.362': attribute type 4 has an invalid length. [ 182.978635][ T6897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.362'. [ 183.167858][ T6905] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 184.222284][ T6932] Falling back ldisc for ttyS3. [ 184.763468][ T59] Bluetooth: hci5: Frame reassembly failed (-84) [ 184.800902][ T6957] Bluetooth: hci5: Frame reassembly failed (-84) [ 184.801462][ T59] Bluetooth: hci5: Frame reassembly failed (-84) [ 184.801542][ T59] Bluetooth: hci5: Frame reassembly failed (-84) [ 184.801618][ T59] Bluetooth: hci5: Frame reassembly failed (-84) [ 184.801694][ T59] Bluetooth: hci5: Frame reassembly failed (-84) [ 184.801769][ T59] Bluetooth: hci5: Frame reassembly failed (-84) [ 185.492892][ T5790] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 185.656140][ T5790] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 185.656170][ T5790] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 185.656188][ T5790] usb 5-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 185.656208][ T5790] usb 5-1: config 220 has no interface number 2 [ 185.656286][ T5790] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 185.656313][ T5790] usb 5-1: config 220 interface 0 has no altsetting 0 [ 185.656332][ T5790] usb 5-1: config 220 interface 76 has no altsetting 0 [ 185.656350][ T5790] usb 5-1: config 220 interface 1 has no altsetting 0 [ 185.659930][ T5790] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 185.659947][ T5790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.659958][ T5790] usb 5-1: Product: syz [ 185.659965][ T5790] usb 5-1: Manufacturer: syz [ 185.659973][ T5790] usb 5-1: SerialNumber: syz [ 185.773448][ T6976] smc: net device bond0 applied user defined pnetid SYZ0 [ 185.775001][ T6976] smc: net device bond0 erased user defined pnetid SYZ0 [ 186.008125][ T5790] usb 5-1: selecting invalid altsetting 0 [ 186.021045][ T5790] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 186.021080][ T5790] uvcvideo 5-1:220.0: No valid video chain found. [ 186.138309][ T5790] usb 5-1: selecting invalid altsetting 0 [ 186.138349][ T5790] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 186.193142][ T5790] usb 5-1: USB disconnect, device number 8 [ 186.420707][ T6991] netlink: 52 bytes leftover after parsing attributes in process `syz.0.405'. [ 186.438605][ T6991] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.474734][ T6991] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.772838][ T5808] Bluetooth: hci5: command 0x1003 tx timeout [ 186.772982][ T5120] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 188.113507][ T991] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 188.262821][ T991] usb 4-1: Using ep0 maxpacket: 32 [ 188.265105][ T991] usb 4-1: config 0 has an invalid interface number: 238 but max is 0 [ 188.265132][ T991] usb 4-1: config 0 has no interface number 0 [ 188.265185][ T991] usb 4-1: config 0 interface 238 has no altsetting 0 [ 188.268209][ T991] usb 4-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice=e9.ef [ 188.268252][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.268273][ T991] usb 4-1: Product: syz [ 188.268287][ T991] usb 4-1: Manufacturer: syz [ 188.268302][ T991] usb 4-1: SerialNumber: syz [ 188.334973][ T991] usb 4-1: config 0 descriptor?? [ 188.370079][ T991] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 188.482784][ T5873] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 188.584333][ T7020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.591172][ T7020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.626972][ T7020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.629585][ T7020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.653078][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 188.659491][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 188.659648][ T5873] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 188.659673][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.734711][ T5873] usb 5-1: config 0 descriptor?? [ 189.144372][ T991] usb 4-1: USB disconnect, device number 8 [ 189.149386][ T5873] hid (null): unknown global tag 0xe [ 189.149406][ T5873] hid (null): report_id 0 is invalid [ 189.352049][ T5873] usb 5-1: USB disconnect, device number 9 [ 189.699593][ T7056] input: syz1 as /devices/virtual/input/input6 [ 189.699788][ T7056] input: failed to attach handler leds to device input6, error: -6 [ 189.969912][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 190.117242][ T7066] mmap: syz.4.437 (7066) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 190.342765][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 190.475972][ T7082] netlink: 80 bytes leftover after parsing attributes in process `syz.2.445'. [ 190.500500][ T31] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 190.500530][ T31] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 190.500550][ T31] usb 2-1: Product: syz [ 190.500565][ T31] usb 2-1: Manufacturer: syz [ 190.500579][ T31] usb 2-1: SerialNumber: syz [ 190.551098][ T31] usb 2-1: config 0 descriptor?? [ 190.577649][ T31] ch341 2-1:0.0: ch341-uart converter detected [ 191.530922][ T31] usb 2-1: failed to send control message: -71 [ 191.530979][ T31] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 191.571090][ T31] usb 2-1: USB disconnect, device number 4 [ 191.580954][ T31] ch341 2-1:0.0: device disconnected [ 191.679439][ T7110] netlink: 308 bytes leftover after parsing attributes in process `syz.2.454'. [ 192.410195][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.172891][ T5914] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 193.322786][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 193.327168][ T5914] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 193.327194][ T5914] usb 5-1: config 0 has no interface number 0 [ 193.327246][ T5914] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.327274][ T5914] usb 5-1: config 0 interface 85 has no altsetting 0 [ 193.330328][ T5914] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 193.330354][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.330374][ T5914] usb 5-1: Product: syz [ 193.330388][ T5914] usb 5-1: Manufacturer: syz [ 193.330403][ T5914] usb 5-1: SerialNumber: syz [ 193.415394][ T5914] usb 5-1: config 0 descriptor?? [ 193.763598][ T7147] random: crng reseeded on system resumption [ 194.051004][ T5914] appletouch 5-1:0.85: Geyser mode initialized. [ 194.086094][ T5914] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input7 [ 194.426337][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.426408][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.451381][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.494514][ T5790] usb 5-1: USB disconnect, device number 10 [ 195.098302][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.237677][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.437382][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.577346][ T5790] appletouch 5-1:0.85: input: appletouch disconnected [ 195.625202][ T7163] dummy0: entered promiscuous mode [ 195.634218][ T7163] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 195.650781][ T7163] hsr1: entered allmulticast mode [ 195.650802][ T7163] dummy0: entered allmulticast mode [ 195.650827][ T7163] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 195.887267][ T44] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 196.046235][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.046305][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.046351][ T44] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 196.061287][ T44] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.061316][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.061336][ T44] usb 4-1: Product: syz [ 196.061350][ T44] usb 4-1: Manufacturer: syz [ 196.061365][ T44] usb 4-1: SerialNumber: syz [ 196.134667][ T44] cdc_mbim 4-1:1.0: skipping garbage [ 197.077885][ T7193] lo speed is unknown, defaulting to 1000 [ 197.179986][ T44] cdc_mbim 4-1:1.0: bind() failure [ 197.237273][ T44] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 197.259832][ T44] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 197.274071][ T44] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 197.306782][ T44] usb 4-1: USB disconnect, device number 9 [ 198.229627][ T1514] tipc: Subscription rejected, illegal request [ 198.576045][ T5790] hid_parser_main: 68 callbacks suppressed [ 198.576065][ T5790] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 198.610525][ T5790] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 198.891043][ T7251] binder: 7250:7251 ioctl c0306201 0 returned -14 [ 199.890009][ T7273] netlink: 'syz.2.529': attribute type 33 has an invalid length. [ 199.890031][ T7273] netlink: 152 bytes leftover after parsing attributes in process `syz.2.529'. [ 199.890678][ T7273] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 200.412799][ T993] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 201.281567][ T993] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.281596][ T993] usb 2-1: config 0 has no interface number 0 [ 201.281644][ T993] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 201.281670][ T993] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 201.281713][ T993] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 201.281737][ T993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.324981][ T7285] netlink: 'syz.3.535': attribute type 11 has an invalid length. [ 201.325011][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 201.393122][ T993] usb 2-1: config 0 descriptor?? [ 201.395073][ T7279] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 201.422862][ T7289] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 201.445063][ T993] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 201.675598][ T44] usb 2-1: USB disconnect, device number 5 [ 201.761754][ T7294] netlink: 104 bytes leftover after parsing attributes in process `syz.4.539'. [ 201.887478][ T7300] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 201.887506][ T7300] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 201.985674][ T7305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.542'. [ 201.992222][ T7303] input: syz0 as /devices/virtual/input/input8 [ 202.668233][ T5873] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 202.827760][ T5873] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.827788][ T5873] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 202.827809][ T5873] usb 2-1: config 1 has no interface number 0 [ 202.829642][ T5873] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.954774][ T5873] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.954805][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.954827][ T5873] usb 2-1: Product: syz [ 202.954841][ T5873] usb 2-1: Manufacturer: syz [ 202.954856][ T5873] usb 2-1: SerialNumber: syz [ 203.129360][ T5873] usb 2-1: selecting invalid altsetting 1 [ 203.809732][ T5873] usb 2-1: selecting invalid altsetting 1 [ 203.809786][ T5873] cdc_ncm 2-1:1.1: bind() failure [ 203.995884][ T5873] usb 2-1: USB disconnect, device number 6 [ 204.542805][ T5120] Bluetooth: hci0: command 0x0c1a tx timeout [ 204.566395][ T44] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 204.566420][ T44] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 205.115808][ T7382] binder: Binderfs stats mode cannot be changed during a remount [ 205.822927][ T5914] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 205.868149][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'. [ 205.978028][ T5914] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.978055][ T5914] usb 2-1: config 0 has no interface number 0 [ 205.978283][ T5914] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 205.978314][ T5914] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 205.978357][ T5914] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 205.978380][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.014025][ T5914] usb 2-1: config 0 descriptor?? [ 206.015044][ T7400] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 206.073607][ T5914] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 206.172767][ T5873] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 206.332585][ T5887] usb 2-1: USB disconnect, device number 7 [ 206.332778][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 206.359705][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.359736][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.359757][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.359800][ T5873] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.359822][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.447777][ T5873] usb 5-1: config 0 descriptor?? [ 206.635677][ T7424] Driver unsupported XDP return value 0 on prog (id 70) dev N/A, expect packet loss! [ 207.035041][ T5873] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 207.094648][ T44] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 207.094672][ T44] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 207.095242][ T5120] Bluetooth: hci1: command 0x0c1a tx timeout [ 207.180593][ T5914] usb 5-1: USB disconnect, device number 11 [ 207.354342][ T7439] fido_id[7439]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 207.392815][ T7445] syz.0.584 uses obsolete (PF_INET,SOCK_PACKET) [ 207.877950][ T7451] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 208.626101][ T7474] binder: 7466:7474 ioctl 400c620e 200000000380 returned -22 [ 208.697409][ T7472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.242929][ T5887] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 209.402774][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 209.431772][ T5887] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 209.431800][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 209.431819][ T5887] usb 5-1: Product: syz [ 209.431832][ T5887] usb 5-1: Manufacturer: syz [ 209.431846][ T5887] usb 5-1: SerialNumber: syz [ 209.506850][ T5887] usb 5-1: config 0 descriptor?? [ 209.573697][ T44] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 209.573718][ T44] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 209.575529][ C0] ------------[ cut here ]------------ [ 209.575539][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 209.575626][ C0] WARNING: CPU: 0 PID: 16 at kernel/workqueue.c:2258 __queue_work+0x2e5/0x1010 [ 209.575657][ C0] Modules linked in: [ 209.575685][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 209.575708][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 209.575723][ C0] RIP: 0010:__queue_work+0x2e5/0x1010 [ 209.575750][ C0] Code: 42 80 3c 28 00 74 08 48 89 ef e8 d6 a3 96 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 20 f4 e9 8a 4c 89 f2 e8 2c 31 f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 fd eb 34 00 eb 2e e8 f6 eb 34 00 e9 [ 209.575768][ C0] RSP: 0018:ffffc90000157808 EFLAGS: 00010046 [ 209.575786][ C0] RAX: 66ecb0be0b127600 RBX: 0000000000000000 RCX: ffff88801b2dda00 [ 209.575801][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 209.575815][ C0] RBP: ffff888036a189a0 R08: 0000000000000000 R09: 0000000000000100 [ 209.575828][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: dffffc0000000000 [ 209.575844][ C0] R13: dffffc0000000000 R14: ffff8880264db168 R15: ffff88801b2de54c [ 209.575861][ C0] FS: 0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 209.575878][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.575893][ C0] CR2: 00007fc525d257e8 CR3: 00000000246a6000 CR4: 00000000003526f0 [ 209.575910][ C0] Call Trace: [ 209.575921][ C0] [ 209.575947][ C0] call_timer_fn+0x17e/0x5f0 [ 209.575976][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 209.576003][ C0] ? call_timer_fn+0xbe/0x5f0 [ 209.576030][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 209.576070][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 209.576096][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 209.576126][ C0] __run_timer_base+0x709/0x970 [ 209.576168][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 209.576213][ C0] run_timer_softirq+0xb7/0x180 [ 209.576240][ C0] handle_softirqs+0x22f/0x710 [ 209.576278][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 209.576316][ C0] run_ktimerd+0xcf/0x190 [ 209.576343][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 209.576368][ C0] ? schedule+0x91/0x360 [ 209.576410][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 209.576436][ C0] smpboot_thread_fn+0x542/0xa60 [ 209.576463][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 209.576501][ C0] kthread+0x711/0x8a0 [ 209.576535][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 209.576561][ C0] ? __pfx_kthread+0x10/0x10 [ 209.576589][ C0] ? rt_spin_unlock+0x150/0x200 [ 209.576618][ C0] ? rt_spin_unlock+0x161/0x200 [ 209.576638][ C0] ? __pfx_kthread+0x10/0x10 [ 209.576669][ C0] ret_from_fork+0x4bc/0x870 [ 209.576697][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 209.576731][ C0] ? __switch_to_asm+0x39/0x70 [ 209.576752][ C0] ? __switch_to_asm+0x33/0x70 [ 209.576772][ C0] ? __pfx_kthread+0x10/0x10 [ 209.576803][ C0] ret_from_fork_asm+0x1a/0x30 [ 209.576846][ C0] [ 209.576856][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 209.576870][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 209.576894][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 209.576905][ C0] Call Trace: [ 209.576914][ C0] [ 209.576922][ C0] dump_stack_lvl+0x99/0x250 [ 209.576954][ C0] ? __asan_memcpy+0x40/0x70 [ 209.576978][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.577009][ C0] ? __pfx__printk+0x10/0x10 [ 209.577051][ C0] vpanic+0x237/0x6d0 [ 209.577073][ C0] ? __pfx_vpanic+0x10/0x10 [ 209.577106][ C0] panic+0xb9/0xc0 [ 209.577126][ C0] ? __pfx_panic+0x10/0x10 [ 209.577164][ C0] __warn+0x31b/0x4b0 [ 209.577183][ C0] ? __queue_work+0x2e5/0x1010 [ 209.577212][ C0] ? __queue_work+0x2e5/0x1010 [ 209.577239][ C0] report_bug+0x2be/0x4f0 [ 209.577265][ C0] ? __queue_work+0x2e5/0x1010 [ 209.577292][ C0] ? __queue_work+0x2e5/0x1010 [ 209.577319][ C0] ? __queue_work+0x2e7/0x1010 [ 209.577345][ C0] handle_bug+0x84/0x160 [ 209.577377][ C0] exc_invalid_op+0x1a/0x50 [ 209.577414][ C0] asm_exc_invalid_op+0x1a/0x20 [ 209.577434][ C0] RIP: 0010:__queue_work+0x2e5/0x1010 [ 209.577461][ C0] Code: 42 80 3c 28 00 74 08 48 89 ef e8 d6 a3 96 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 20 f4 e9 8a 4c 89 f2 e8 2c 31 f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 fd eb 34 00 eb 2e e8 f6 eb 34 00 e9 [ 209.577478][ C0] RSP: 0018:ffffc90000157808 EFLAGS: 00010046 [ 209.577496][ C0] RAX: 66ecb0be0b127600 RBX: 0000000000000000 RCX: ffff88801b2dda00 [ 209.577512][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 209.577525][ C0] RBP: ffff888036a189a0 R08: 0000000000000000 R09: 0000000000000100 [ 209.577539][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: dffffc0000000000 [ 209.577556][ C0] R13: dffffc0000000000 R14: ffff8880264db168 R15: ffff88801b2de54c [ 209.577592][ C0] ? __queue_work+0x2e4/0x1010 [ 209.577634][ C0] call_timer_fn+0x17e/0x5f0 [ 209.577661][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 209.577689][ C0] ? call_timer_fn+0xbe/0x5f0 [ 209.577716][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 209.577761][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 209.577786][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 209.577816][ C0] __run_timer_base+0x709/0x970 [ 209.577860][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 209.577910][ C0] run_timer_softirq+0xb7/0x180 [ 209.577937][ C0] handle_softirqs+0x22f/0x710 [ 209.577974][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 209.578017][ C0] run_ktimerd+0xcf/0x190 [ 209.578048][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 209.578073][ C0] ? schedule+0x91/0x360 [ 209.578106][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 209.578132][ C0] smpboot_thread_fn+0x542/0xa60 [ 209.578159][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 209.578197][ C0] kthread+0x711/0x8a0 [ 209.578231][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 209.578257][ C0] ? __pfx_kthread+0x10/0x10 [ 209.578284][ C0] ? rt_spin_unlock+0x150/0x200 [ 209.578313][ C0] ? rt_spin_unlock+0x161/0x200 [ 209.578333][ C0] ? __pfx_kthread+0x10/0x10 [ 209.578365][ C0] ret_from_fork+0x4bc/0x870 [ 209.578394][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 209.578435][ C0] ? __switch_to_asm+0x39/0x70 [ 209.578455][ C0] ? __switch_to_asm+0x33/0x70 [ 209.578476][ C0] ? __pfx_kthread+0x10/0x10 [ 209.578507][ C0] ret_from_fork_asm+0x1a/0x30 [ 209.578550][ C0] [ 209.578787][ C0] Kernel Offset: disabled