last executing test programs: 54.186567094s ago: executing program 3 (id=510): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x143042, 0xfe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000be8400007313"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x890b, &(0x7f0000000000)=@buf) 53.866929105s ago: executing program 3 (id=513): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000d0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) 53.614768793s ago: executing program 3 (id=515): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x9, 0x2a7345, 0x20d37}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000480)={0x48, 0x6, r2, 0x334, 0x1, 0x0, 0x7, 0x38615, 0x2c1c78, 0xffffffffffffff7b}) 53.062432744s ago: executing program 3 (id=517): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x28a100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 52.8672033s ago: executing program 3 (id=518): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) 51.675070047s ago: executing program 3 (id=532): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @empty}}}, 0x90) 50.678270306s ago: executing program 32 (id=532): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @empty}}}, 0x90) 12.40480525s ago: executing program 5 (id=766): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902"], 0x0) accept$netrom(r1, 0x0, 0x0) 10.138529054s ago: executing program 1 (id=781): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4006001}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/225, 0xe1}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x2000000}, 0x9}], 0x1, 0xcb, 0x0) 10.064123424s ago: executing program 1 (id=782): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) 9.996106319s ago: executing program 5 (id=783): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x841, 0x1) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 9.847703063s ago: executing program 5 (id=784): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 9.736771379s ago: executing program 5 (id=785): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0xc00, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 9.638694044s ago: executing program 5 (id=786): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000140)=0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) r2 = socket(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 9.290049487s ago: executing program 1 (id=789): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 8.379050571s ago: executing program 5 (id=791): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = syz_io_uring_setup(0xbda, &(0x7f00000005c0)={0x0, 0xec25, 0x8, 0x3, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000780)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.938841353s ago: executing program 33 (id=791): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = syz_io_uring_setup(0xbda, &(0x7f00000005c0)={0x0, 0xec25, 0x8, 0x3, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000780)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.915370394s ago: executing program 1 (id=795): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 7.663837486s ago: executing program 1 (id=797): ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 6.436033063s ago: executing program 1 (id=808): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$ENABLE_STATS(0x20, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 6.128863411s ago: executing program 34 (id=808): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$ENABLE_STATS(0x20, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 5.960589141s ago: executing program 2 (id=812): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) dup(0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0434c500000000000109022400010000000009041c00010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x77, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 4.356247464s ago: executing program 4 (id=818): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x3000001d}) 3.990249065s ago: executing program 2 (id=819): ustat(0x11, &(0x7f0000000600)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00'}, 0x90) setuid(0xee01) 3.593912014s ago: executing program 2 (id=820): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b31ce93ee9070c000000290495b9585dde83000000000b09007a15b3"], 0x0}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14e040) 2.255952898s ago: executing program 4 (id=823): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x338}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x98f1, 0x2a, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) 2.138982518s ago: executing program 4 (id=824): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) dup(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.04994521s ago: executing program 4 (id=825): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000000)={0x12, {{0x29, 0x0, 0xb000000, @empty}}}, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.983321829s ago: executing program 4 (id=826): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a96460014060000000000000000000000000000000000fe8000000000000000000000000000aa00014e22", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB='Y'], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) 1.859212991s ago: executing program 2 (id=827): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x67, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 1.812039523s ago: executing program 2 (id=828): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = getpid() r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r2, r3, 0x0, 0x0, 0x0}, 0x30) 1.259953408s ago: executing program 4 (id=829): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4) 651.051938ms ago: executing program 0 (id=830): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r1, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) close(r0) 443.543863ms ago: executing program 0 (id=831): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 377.88741ms ago: executing program 2 (id=832): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 318.918832ms ago: executing program 0 (id=833): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x80801, 0x1) mq_open(0x0, 0x42, 0x40, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0xfffff001}, 0x8) close(r0) 219.649667ms ago: executing program 0 (id=834): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/71, 0x0, 0xce9614d7982ca308}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000200)) 103.908172ms ago: executing program 0 (id=835): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x4}, 0x4}}, 0x80, 0x0}, 0xf5) 0s ago: executing program 0 (id=836): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) kernel console output (not intermixed with test programs): [ 92.943323][ T45] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.197' (ED25519) to the list of known hosts. [ 97.442740][ T5827] cgroup: Unknown subsys name 'net' [ 97.682911][ T5827] cgroup: Unknown subsys name 'cpuset' [ 97.739070][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 99.377550][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.560590][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.569298][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.574745][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.576829][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.579556][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.580395][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.606785][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.608431][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.647836][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.649772][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.650515][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.651624][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.653114][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.659004][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.661698][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.668682][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.774327][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.776389][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.805660][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.814062][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.814977][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.839001][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.847047][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.871822][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.873325][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.722556][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 103.806437][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 103.834561][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 104.001568][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 104.320145][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 104.590667][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.590903][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.592013][ T5851] bridge_slave_0: entered allmulticast mode [ 104.597101][ T5851] bridge_slave_0: entered promiscuous mode [ 104.700051][ T5846] Bluetooth: hci0: command tx timeout [ 104.779226][ T5846] Bluetooth: hci4: command tx timeout [ 104.806280][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.806412][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.806656][ T5851] bridge_slave_1: entered allmulticast mode [ 104.811641][ T5851] bridge_slave_1: entered promiscuous mode [ 104.858487][ T5846] Bluetooth: hci1: command tx timeout [ 104.939723][ T5844] Bluetooth: hci2: command tx timeout [ 104.939934][ T5846] Bluetooth: hci3: command tx timeout [ 104.981662][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.981783][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.981944][ T5837] bridge_slave_0: entered allmulticast mode [ 104.984284][ T5837] bridge_slave_0: entered promiscuous mode [ 105.160779][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.161019][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.161222][ T5841] bridge_slave_0: entered allmulticast mode [ 105.162861][ T5841] bridge_slave_0: entered promiscuous mode [ 105.165818][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.165953][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.166124][ T5837] bridge_slave_1: entered allmulticast mode [ 105.169626][ T5837] bridge_slave_1: entered promiscuous mode [ 105.368883][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.369015][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.369300][ T5841] bridge_slave_1: entered allmulticast mode [ 105.371059][ T5841] bridge_slave_1: entered promiscuous mode [ 105.455208][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.474652][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.474758][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.474894][ T5842] bridge_slave_0: entered allmulticast mode [ 105.476369][ T5842] bridge_slave_0: entered promiscuous mode [ 105.692659][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.758999][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.760099][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.760348][ T5842] bridge_slave_1: entered allmulticast mode [ 105.762743][ T5842] bridge_slave_1: entered promiscuous mode [ 105.883199][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.169705][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.173494][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.264904][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.265037][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.265214][ T5849] bridge_slave_0: entered allmulticast mode [ 106.267653][ T5849] bridge_slave_0: entered promiscuous mode [ 106.384250][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.481573][ T5851] team0: Port device team_slave_0 added [ 106.482199][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.482327][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.482498][ T5849] bridge_slave_1: entered allmulticast mode [ 106.484284][ T5849] bridge_slave_1: entered promiscuous mode [ 106.492415][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.691489][ T5851] team0: Port device team_slave_1 added [ 106.779734][ T5846] Bluetooth: hci0: command tx timeout [ 106.783931][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.858241][ T5846] Bluetooth: hci4: command tx timeout [ 106.902912][ T5837] team0: Port device team_slave_0 added [ 106.938622][ T5846] Bluetooth: hci1: command tx timeout [ 107.018178][ T5846] Bluetooth: hci3: command tx timeout [ 107.018186][ T5844] Bluetooth: hci2: command tx timeout [ 107.259139][ T5841] team0: Port device team_slave_0 added [ 107.261428][ T5837] team0: Port device team_slave_1 added [ 107.356713][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.452823][ T5841] team0: Port device team_slave_1 added [ 107.530888][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.530905][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.530928][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.545240][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.547813][ T5842] team0: Port device team_slave_0 added [ 107.733963][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.733978][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.734001][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.851694][ T5842] team0: Port device team_slave_1 added [ 107.949661][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.949677][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.949698][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.170863][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.170879][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.170902][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.172773][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.172787][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.172810][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.177255][ T5849] team0: Port device team_slave_0 added [ 108.420740][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.420756][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.420777][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.430683][ T5849] team0: Port device team_slave_1 added [ 108.446139][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.446154][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.446176][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.640571][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.640588][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.640611][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.858230][ T5844] Bluetooth: hci0: command tx timeout [ 108.882491][ T5851] hsr_slave_0: entered promiscuous mode [ 108.883507][ T5851] hsr_slave_1: entered promiscuous mode [ 108.885825][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.885837][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.885854][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.941818][ T5846] Bluetooth: hci4: command tx timeout [ 109.018200][ T5846] Bluetooth: hci1: command tx timeout [ 109.098304][ T5844] Bluetooth: hci2: command tx timeout [ 109.098450][ T5846] Bluetooth: hci3: command tx timeout [ 109.105686][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.105701][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.105725][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.244594][ T5837] hsr_slave_0: entered promiscuous mode [ 109.246227][ T5837] hsr_slave_1: entered promiscuous mode [ 109.247401][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 109.247532][ T5837] Cannot create hsr debugfs directory [ 109.442761][ T5841] hsr_slave_0: entered promiscuous mode [ 109.446401][ T5841] hsr_slave_1: entered promiscuous mode [ 109.446996][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 109.447017][ T5841] Cannot create hsr debugfs directory [ 109.641703][ T5842] hsr_slave_0: entered promiscuous mode [ 109.643104][ T5842] hsr_slave_1: entered promiscuous mode [ 109.644058][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 109.644081][ T5842] Cannot create hsr debugfs directory [ 110.196993][ T5849] hsr_slave_0: entered promiscuous mode [ 110.205475][ T5849] hsr_slave_1: entered promiscuous mode [ 110.206074][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 110.206096][ T5849] Cannot create hsr debugfs directory [ 110.938088][ T5846] Bluetooth: hci0: command tx timeout [ 111.018336][ T5846] Bluetooth: hci4: command tx timeout [ 111.108091][ T5846] Bluetooth: hci1: command tx timeout [ 111.184708][ T5844] Bluetooth: hci2: command tx timeout [ 111.184764][ T5846] Bluetooth: hci3: command tx timeout [ 111.590343][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.641654][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.683720][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.731160][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.891710][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.948249][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.997503][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.032397][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 112.189032][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.256503][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.291314][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.351250][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.554453][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.605252][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.646273][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.701298][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.880718][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.882077][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.935859][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.989041][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.040524][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.145333][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.214845][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.243876][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.244795][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.287437][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.287568][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.375327][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.451555][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.451750][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.471088][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.517395][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.517523][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.621783][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.647830][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.685204][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.685348][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.780245][ T1455] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.780963][ T1455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.855881][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.903318][ T1455] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.904169][ T1455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.921342][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.956858][ T4113] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.957038][ T4113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.111342][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.191384][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.191599][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.257251][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.258040][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.395562][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.611153][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.796081][ T5851] veth0_vlan: entered promiscuous mode [ 114.846110][ T5851] veth1_vlan: entered promiscuous mode [ 114.882596][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.978246][ T5837] veth0_vlan: entered promiscuous mode [ 115.012192][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.048741][ T5837] veth1_vlan: entered promiscuous mode [ 115.137393][ T5851] veth0_macvtap: entered promiscuous mode [ 115.193975][ T5851] veth1_macvtap: entered promiscuous mode [ 115.281571][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.295098][ T5841] veth0_vlan: entered promiscuous mode [ 115.341921][ T5837] veth0_macvtap: entered promiscuous mode [ 115.363018][ T5841] veth1_vlan: entered promiscuous mode [ 115.390809][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.393505][ T5837] veth1_macvtap: entered promiscuous mode [ 115.457733][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.506048][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.519260][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.526086][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.537720][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.557693][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.648245][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.803852][ T1113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.836762][ T5849] veth0_vlan: entered promiscuous mode [ 115.841548][ T1113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.861499][ T5841] veth0_macvtap: entered promiscuous mode [ 115.863191][ T1113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.889054][ T1113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.921346][ T5841] veth1_macvtap: entered promiscuous mode [ 115.983845][ T5849] veth1_vlan: entered promiscuous mode [ 116.007597][ T5842] veth0_vlan: entered promiscuous mode [ 116.105649][ T1455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.105676][ T1455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.216527][ T5842] veth1_vlan: entered promiscuous mode [ 116.242191][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.301799][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.318662][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.318681][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.386852][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.415814][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.419152][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.419170][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.458061][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.471678][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.507076][ T5849] veth0_macvtap: entered promiscuous mode [ 116.630389][ T5849] veth1_macvtap: entered promiscuous mode [ 116.646551][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.646569][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.861404][ T5842] veth0_macvtap: entered promiscuous mode [ 116.927717][ T5842] veth1_macvtap: entered promiscuous mode [ 117.010195][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.129365][ T4113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.129385][ T4113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.161571][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.245233][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.246839][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.288903][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.301084][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.323117][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.335961][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.362246][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.362267][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.493108][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.499377][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.501158][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.566846][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.898914][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.070419][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.070444][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.074028][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 118.074054][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 118.074071][ T10] usb 4-1: SerialNumber: syz [ 118.108503][ T1455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.108529][ T1455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.425500][ T10] usb 4-1: 0:2 : does not exist [ 118.425646][ T10] usb 4-1: unit 255 not found! [ 118.454350][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.454370][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.485373][ T10] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 118.522607][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 118.669398][ T10] usb 4-1: USB disconnect, device number 2 [ 118.687560][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.687578][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.152399][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.152420][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.508286][ T5984] block nbd1: NBD_DISCONNECT [ 119.508555][ T5984] block nbd1: Send disconnect failed -22 [ 119.508689][ T5984] block nbd1: Disconnected due to user request. [ 119.508703][ T5984] block nbd1: shutting down sockets [ 120.008138][ T37] audit: type=1326 audit(1756500163.896:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d261ebe9 code=0x7ffc0000 [ 120.008275][ T37] audit: type=1326 audit(1756500163.906:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d261ebe9 code=0x7ffc0000 [ 120.008317][ T37] audit: type=1326 audit(1756500163.906:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9d261ebe9 code=0x7ffc0000 [ 120.017355][ T37] audit: type=1326 audit(1756500163.916:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d261ebe9 code=0x7ffc0000 [ 120.017408][ T37] audit: type=1326 audit(1756500163.916:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d261ebe9 code=0x7ffc0000 [ 120.069939][ T37] audit: type=1326 audit(1756500163.956:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9d261ebe9 code=0x7ffc0000 [ 120.069987][ T37] audit: type=1326 audit(1756500163.976:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d261ebe9 code=0x7ffc0000 [ 120.160047][ T37] audit: type=1326 audit(1756500164.066:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d261ebe9 code=0x7ffc0000 [ 120.329394][ T5930] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.478034][ T5930] usb 1-1: Using ep0 maxpacket: 16 [ 120.500142][ T5930] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 120.500169][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 120.500186][ T5930] usb 1-1: Product: syz [ 120.500197][ T5930] usb 1-1: Manufacturer: syz [ 120.500209][ T5930] usb 1-1: SerialNumber: syz [ 120.520646][ T5930] usb 1-1: config 0 descriptor?? [ 120.821638][ T5929] usb 1-1: USB disconnect, device number 2 [ 121.080687][ T6014] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 121.096516][ T6011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21'. [ 121.131735][ T6011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21'. [ 121.132470][ T6011] Zero length message leads to an empty skb [ 121.589176][ T6022] trusted_key: syz.3.24 sent an empty control message without MSG_MORE. [ 122.033158][ T5207] udevd[5207]: worker [5894] terminated by signal 33 (Unknown signal 33) [ 122.033221][ T5207] udevd[5207]: worker [5894] failed while handling '/devices/virtual/block/loop2' [ 122.110055][ T6032] bridge0: entered promiscuous mode [ 122.126173][ T6032] bridge0: port 3(macvtap1) entered blocking state [ 122.126341][ T6032] bridge0: port 3(macvtap1) entered disabled state [ 122.126601][ T6032] macvtap1: entered allmulticast mode [ 122.126615][ T6032] bridge0: entered allmulticast mode [ 122.235515][ T6032] macvtap1: left allmulticast mode [ 122.235538][ T6032] bridge0: left allmulticast mode [ 122.419965][ T6032] bridge0: left promiscuous mode [ 122.757843][ T6048] openvswitch: netlink: IPv4 tun info is not correct [ 123.111005][ T6056] IPv6: addrconf: prefix option has invalid lifetime [ 124.342754][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.492145][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.511053][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.511080][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.511098][ T31] usb 1-1: Product: syz [ 124.511110][ T31] usb 1-1: Manufacturer: syz [ 124.511122][ T31] usb 1-1: SerialNumber: syz [ 124.847714][ T6090] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 124.924357][ T6096] loop6: detected capacity change from 0 to 7 [ 124.970069][ T6096] Dev loop6: unable to read RDB block 7 [ 124.970113][ T6096] loop6: AHDI p1 p2 [ 124.970144][ T6096] loop6: partition table partially beyond EOD, truncated [ 124.970427][ T6096] loop6: p1 start 926365495 is beyond EOD, truncated [ 125.190592][ T31] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 125.190828][ T31] cdc_ncm 1-1:1.0: bind() failure [ 125.213815][ T31] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 125.213861][ T31] cdc_ncm 1-1:1.1: bind() failure [ 125.242930][ T31] usb 1-1: USB disconnect, device number 3 [ 126.419920][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.567939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.586980][ T3121] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 126.587029][ T31] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 126.587048][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.587063][ T31] usb 3-1: config 0 has no interface number 0 [ 126.587091][ T31] usb 3-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 126.587219][ T31] usb 3-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 126.649862][ T31] usb 3-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 126.649888][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.649905][ T31] usb 3-1: Product: syz [ 126.649917][ T31] usb 3-1: Manufacturer: syz [ 126.649928][ T31] usb 3-1: SerialNumber: syz [ 126.699465][ T31] usb 3-1: config 0 descriptor?? [ 126.705144][ T31] HFC-S_USB 3-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 126.949636][ T3121] usb 1-1: config 0 has no interfaces? [ 126.969108][ T5908] usb 3-1: USB disconnect, device number 2 [ 126.989314][ T3121] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.989340][ T3121] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.989356][ T3121] usb 1-1: Product: syz [ 126.989367][ T3121] usb 1-1: Manufacturer: syz [ 127.003423][ T3121] usb 1-1: config 0 descriptor?? [ 127.219259][ T31] usb 1-1: USB disconnect, device number 4 [ 127.980326][ T6151] kvm: emulating exchange as write [ 129.468484][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 129.523189][ T31] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 132.064950][ T6245] netlink: 'syz.4.112': attribute type 10 has an invalid length. [ 132.260370][ T6245] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 132.372398][ T5930] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 132.525234][ T5930] usb 1-1: unable to get BOS descriptor or descriptor too short [ 132.540097][ T5930] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.545209][ T5930] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.545234][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.545251][ T5930] usb 1-1: Product: syz [ 132.545263][ T5930] usb 1-1: Manufacturer: syz [ 132.545275][ T5930] usb 1-1: SerialNumber: syz [ 132.605596][ T5929] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 132.760256][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 132.768447][ T5929] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 132.768471][ T5929] usb 4-1: config 0 has no interface number 0 [ 132.768514][ T5929] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 132.768535][ T5929] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 132.768555][ T5929] usb 4-1: config 0 interface 41 has no altsetting 0 [ 132.771893][ T5929] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 132.771918][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.771935][ T5929] usb 4-1: Product: syz [ 132.771948][ T5929] usb 4-1: Manufacturer: syz [ 132.771960][ T5929] usb 4-1: SerialNumber: syz [ 132.794001][ T5929] usb 4-1: config 0 descriptor?? [ 132.797062][ T6247] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 132.797240][ T6247] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 132.992590][ T5930] usb 1-1: USB disconnect, device number 5 [ 133.012753][ T6247] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.012933][ T6247] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.422849][ T5929] Error reading MAC address [ 133.425004][ T6247] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.425121][ T6247] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 134.204490][ T5929] sr9700 4-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet, f2:0d:0c:b7:40:1f [ 134.215215][ T5929] usb 4-1: USB disconnect, device number 3 [ 134.221618][ T5929] sr9700 4-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet [ 135.729680][ T6288] netlink: 'syz.3.131': attribute type 5 has an invalid length. [ 136.560297][ T5929] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 136.709099][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 136.712708][ T5929] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 136.712731][ T5929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.712746][ T5929] usb 3-1: config 0 has no interface number 0 [ 136.712792][ T5929] usb 3-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 136.712811][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.772294][ T5929] usb 3-1: config 0 descriptor?? [ 136.788171][ T5929] usb 3-1: Found UVC 0.00 device (0bd3:05f4) [ 136.788207][ T5929] usb 3-1: No valid video chain found. [ 137.280130][ T5929] usb 3-1: USB disconnect, device number 3 [ 138.117913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.357196][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 138.915607][ T6358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 139.009692][ T6361] netlink: 32 bytes leftover after parsing attributes in process `syz.2.156'. [ 139.043102][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.043202][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.015196][ T5929] IPVS: starting estimator thread 0... [ 140.095775][ T6393] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.139978][ T6392] IPVS: using max 13 ests per chain, 31200 per kthread [ 140.248004][ T5908] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 140.443875][ T5908] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.443891][ T5908] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.485466][ T5908] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 140.485492][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 140.485509][ T5908] usb 2-1: SerialNumber: syz [ 140.499394][ T5929] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 140.659206][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 140.666456][ T5929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.666497][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.666516][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 140.666566][ T5929] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 140.666577][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.667547][ T5929] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 140.667560][ T5929] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 140.667570][ T5929] usb 4-1: Manufacturer: syz [ 140.686318][ T5929] usb 4-1: config 0 descriptor?? [ 140.792989][ T5908] usb 2-1: 0:2 : does not exist [ 141.095640][ T5908] usb 2-1: USB disconnect, device number 2 [ 141.240290][ T5929] rc_core: IR keymap rc-hauppauge not found [ 141.240311][ T5929] Registered IR keymap rc-empty [ 141.240881][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.266175][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.268098][ T5843] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 141.299744][ T5929] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 141.361861][ T5929] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 141.433285][ T5843] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 141.433313][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.433339][ T5843] usb 5-1: Product: syz [ 141.433352][ T5843] usb 5-1: Manufacturer: syz [ 141.433365][ T5843] usb 5-1: SerialNumber: syz [ 141.446215][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.462976][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.480163][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.499773][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.528242][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.548138][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.568599][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.589556][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.608028][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.628939][ T5929] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.698812][ T5929] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 141.698835][ T5929] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 141.818802][ T5929] usb 4-1: USB disconnect, device number 4 [ 141.906349][ T6413] loop2: detected capacity change from 0 to 7 [ 141.928253][ T6413] Dev loop2: unable to read RDB block 7 [ 141.928361][ T6413] loop2: unable to read partition table [ 141.928737][ T6413] loop2: partition table beyond EOD, truncated [ 141.928808][ T6413] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 142.353325][ T5843] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 142.353393][ T5843] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 142.379954][ T5843] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 142.415717][ T5843] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 142.457407][ T5843] usb 5-1: USB disconnect, device number 2 [ 143.061288][ C1] vcan0: j1939_tp_rxtimer: 0xffff888049eb9400: rx timeout, send abort [ 143.064058][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888049eb9400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 143.065454][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e188c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 144.157885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.337112][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e18b000: rx timeout, send abort [ 144.337332][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e18b000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 144.337542][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880369fcc00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 144.697358][ T6443] netlink: 'syz.4.186': attribute type 13 has an invalid length. [ 144.697380][ T6443] netlink: 'syz.4.186': attribute type 17 has an invalid length. [ 145.161961][ T6447] overlayfs: failed to decode file handle (len=0, type=251, flags=0, err=-22) [ 145.421674][ T6443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.650452][ T5846] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 145.650504][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 145.650525][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.650537][ T5846] Workqueue: hci1 hci_rx_work [ 145.650573][ T5846] Call Trace: [ 145.650580][ T5846] [ 145.650589][ T5846] dump_stack_lvl+0x189/0x250 [ 145.650622][ T5846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.650646][ T5846] ? __pfx__printk+0x10/0x10 [ 145.650671][ T5846] ? kernfs_path_from_node+0x2c/0x280 [ 145.650688][ T5846] ? kernfs_path_from_node+0x243/0x280 [ 145.650703][ T5846] ? kernfs_path_from_node+0x2c/0x280 [ 145.650723][ T5846] sysfs_create_dir_ns+0x259/0x280 [ 145.650750][ T5846] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 145.650772][ T5846] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 145.650798][ T5846] ? rt_spin_unlock+0x65/0x80 [ 145.650823][ T5846] kobject_add_internal+0x5a5/0xb50 [ 145.650858][ T5846] kobject_add+0x155/0x220 [ 145.650888][ T5846] ? __pfx_kobject_add+0x10/0x10 [ 145.650917][ T5846] ? get_device_parent+0x370/0x3a0 [ 145.650944][ T5846] device_add+0x408/0xb50 [ 145.650976][ T5846] hci_conn_add_sysfs+0xd5/0x1e0 [ 145.651005][ T5846] le_conn_complete_evt+0xc3a/0x1220 [ 145.651038][ T5846] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 145.651061][ T5846] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 145.651083][ T5846] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.651110][ T5846] ? skb_pull_data+0xfb/0x200 [ 145.651134][ T5846] hci_le_conn_complete_evt+0x187/0x450 [ 145.651164][ T5846] hci_event_packet+0x78c/0x1200 [ 145.651186][ T5846] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 145.651210][ T5846] ? __pfx_hci_event_packet+0x10/0x10 [ 145.651228][ T5846] ? __pfx_migrate_enable+0x10/0x10 [ 145.651257][ T5846] ? hci_send_to_monitor+0xe2/0x570 [ 145.651283][ T5846] hci_rx_work+0x46a/0xe80 [ 145.651310][ T5846] ? process_scheduled_works+0x9ef/0x17b0 [ 145.651334][ T5846] process_scheduled_works+0xade/0x17b0 [ 145.651388][ T5846] ? __pfx_process_scheduled_works+0x10/0x10 [ 145.651428][ T5846] worker_thread+0x8a0/0xda0 [ 145.651479][ T5846] kthread+0x711/0x8a0 [ 145.651507][ T5846] ? __pfx_worker_thread+0x10/0x10 [ 145.651527][ T5846] ? __pfx_kthread+0x10/0x10 [ 145.651557][ T5846] ? __pfx_kthread+0x10/0x10 [ 145.651582][ T5846] ret_from_fork+0x3fc/0x770 [ 145.651608][ T5846] ? __pfx_ret_from_fork+0x10/0x10 [ 145.651637][ T5846] ? __switch_to_asm+0x39/0x70 [ 145.651652][ T5846] ? __switch_to_asm+0x33/0x70 [ 145.651667][ T5846] ? __pfx_kthread+0x10/0x10 [ 145.651693][ T5846] ret_from_fork_asm+0x1a/0x30 [ 145.651726][ T5846] [ 145.651757][ T5846] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 145.651796][ T5846] Bluetooth: hci1: failed to register connection device [ 145.672770][ T37] audit: type=1326 audit(1756500189.576:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6453 comm="syz.1.189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9d261ebe9 code=0x0 [ 146.706995][ T6473] netlink: 'syz.0.198': attribute type 10 has an invalid length. [ 146.778611][ T6473] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.792811][ T6473] bond0: (slave team0): Enslaving as an active interface with an up link [ 147.037413][ T5889] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 147.190545][ T5889] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.190568][ T5889] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.193616][ T5889] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.193639][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.193656][ T5889] usb 3-1: Product: syz [ 147.193668][ T5889] usb 3-1: Manufacturer: syz [ 147.193681][ T5889] usb 3-1: SerialNumber: syz [ 147.414729][ T5889] usb 3-1: 0:2 : does not exist [ 147.438184][ T5889] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 147.532264][ T5889] usb 3-1: USB disconnect, device number 4 [ 147.555482][ T6489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.204'. [ 147.556172][ T6493] warning: `syz.3.206' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 147.980536][ T5843] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 148.138147][ T5843] usb 4-1: Using ep0 maxpacket: 8 [ 148.141684][ T5843] usb 4-1: config 0 has no interfaces? [ 148.159783][ T5843] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 148.159808][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.159826][ T5843] usb 4-1: Product: syz [ 148.159837][ T5843] usb 4-1: Manufacturer: syz [ 148.159850][ T5843] usb 4-1: SerialNumber: syz [ 148.161734][ T6510] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 148.161765][ T6510] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 148.228389][ T5843] usb 4-1: config 0 descriptor?? [ 148.441601][ T5843] usb 4-1: USB disconnect, device number 5 [ 148.655321][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e51d400: rx timeout, send abort [ 148.655588][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e51d400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 150.059694][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 150.610398][ T6555] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.232'. [ 150.689354][ T6559] vcan0: tx drop: invalid sa for name 0xbffffffffffffffd [ 152.106663][ C0] vcan0: j1939_tp_rxtimer: 0xffff888049cd0000: rx timeout, send abort [ 152.107246][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888049cd0000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 152.107482][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806025c400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 152.380765][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 153.032430][ T6593] bond1: entered allmulticast mode [ 153.033024][ T6593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.033915][ T6593] bridge0: port 3(bond1) entered blocking state [ 153.034164][ T6593] bridge0: port 3(bond1) entered disabled state [ 153.037691][ T6593] bond1: entered promiscuous mode [ 153.040725][ T6593] bridge0: port 3(bond1) entered blocking state [ 153.040915][ T6593] bridge0: port 3(bond1) entered forwarding state [ 153.161147][ T12] bridge0: port 3(bond1) entered disabled state [ 153.371953][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806025d000: rx timeout, send abort [ 153.372177][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806025d000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 153.372385][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888033eae400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 153.965284][ T6615] mmap: syz.3.254 (6615) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 154.467891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.508349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.897912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.898610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.899757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.899926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.900887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 155.765350][ T45] kernel write not supported for file bpf-prog (pid: 45 comm: kworker/1:1) [ 156.515762][ T6641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.262'. [ 156.760828][ T3121] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 156.914968][ T3121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.914997][ T3121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.915031][ T3121] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 156.915051][ T3121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.947495][ T3121] usb 2-1: config 0 descriptor?? [ 157.384412][ T3121] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 157.533179][ T3121] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 157.616673][ T6661] loop2: detected capacity change from 0 to 7 [ 157.629735][ T6661] Dev loop2: unable to read RDB block 7 [ 157.629766][ T6661] loop2: AHDI p3 p4 [ 157.629793][ T6661] loop2: partition table partially beyond EOD, truncated [ 157.629929][ T6661] loop2: p3 start 1869967406 is beyond EOD, truncated [ 157.670623][ T5908] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 157.868641][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 157.871898][ T5908] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 157.871924][ T5908] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 75, changing to 10 [ 157.871954][ T5908] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 25344, setting to 1024 [ 157.871977][ T5908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 157.876471][ T5908] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 157.876496][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.876513][ T5908] usb 4-1: Product: syz [ 157.876524][ T5908] usb 4-1: Manufacturer: syz [ 157.876537][ T5908] usb 4-1: SerialNumber: syz [ 157.915009][ T5908] usb 4-1: config 0 descriptor?? [ 157.943207][ T3121] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x4D [ 158.206514][ T5908] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 158.576292][ T5908] usb 4-1: USB disconnect, device number 6 [ 158.819889][ T6666] bond1: entered allmulticast mode [ 158.821278][ T6666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.822161][ T6666] bridge0: port 3(bond1) entered blocking state [ 158.857714][ T6666] bridge0: port 3(bond1) entered disabled state [ 158.899896][ T5909] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 159.092950][ T6666] bond1: entered promiscuous mode [ 159.101441][ T6666] bridge0: port 3(bond1) entered blocking state [ 159.101596][ T6666] bridge0: port 3(bond1) entered forwarding state [ 159.155713][ T1181] bridge0: port 3(bond1) entered disabled state [ 159.889308][ T6680] syz.3.277 uses obsolete (PF_INET,SOCK_PACKET) [ 160.115873][ T3121] usb 2-1: USB disconnect, device number 3 [ 161.769185][ T5930] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 161.918025][ T5930] usb 1-1: Using ep0 maxpacket: 16 [ 161.921600][ T5930] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 161.921627][ T5930] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 75, changing to 10 [ 161.921650][ T5930] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 25344, setting to 1024 [ 161.921672][ T5930] usb 1-1: config 0 interface 0 has no altsetting 0 [ 161.924728][ T5930] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 161.924753][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.924770][ T5930] usb 1-1: Product: syz [ 161.924782][ T5930] usb 1-1: Manufacturer: syz [ 161.924794][ T5930] usb 1-1: SerialNumber: syz [ 162.049963][ T5930] usb 1-1: config 0 descriptor?? [ 162.279071][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.293'. [ 162.306104][ T5930] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 162.560894][ T5909] usb 1-1: USB disconnect, device number 6 [ 162.561000][ C0] synaptics_usb 1-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 163.578628][ T5843] libceph: connect (1)[c::]:6789 error -101 [ 163.579079][ T5843] libceph: mon0 (1)[c::]:6789 connect error [ 163.586741][ T5843] libceph: connect (1)[c::]:6789 error -101 [ 163.586923][ T5843] libceph: mon0 (1)[c::]:6789 connect error [ 163.609173][ T6739] ceph: No mds server is up or the cluster is laggy [ 163.822947][ T6749] netlink: 'syz.1.301': attribute type 4 has an invalid length. [ 163.939816][ T6751] binder: 6750:6751 unknown command 0 [ 163.939836][ T6751] binder: 6750:6751 ioctl c0306201 200000000640 returned -22 [ 164.140489][ T5843] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 164.300600][ T5843] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.300624][ T5843] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.303829][ T5843] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 164.303853][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 164.303870][ T5843] usb 5-1: SerialNumber: syz [ 164.617482][ T5843] usb 5-1: 0:2 : does not exist [ 164.691803][ T5843] usb 5-1: USB disconnect, device number 3 [ 164.767983][ T31] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 164.936485][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 164.936513][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.936547][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 164.976242][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.976270][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.976286][ T31] usb 2-1: Product: syz [ 164.976297][ T31] usb 2-1: Manufacturer: syz [ 164.976307][ T31] usb 2-1: SerialNumber: syz [ 165.110895][ T37] audit: type=1326 audit(1756500209.016:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6756 comm="syz.2.306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23c8a8ebe9 code=0x0 [ 165.438374][ T31] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 165.487968][ T5843] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 165.653830][ T5843] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 165.653857][ T5843] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 165.653874][ T5843] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 165.653922][ T5843] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 165.654031][ T5843] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 165.657295][ T5843] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 165.657371][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 165.657389][ T5843] usb 1-1: Product: syz [ 165.657401][ T5843] usb 1-1: Manufacturer: syz [ 165.767608][ T5843] cdc_wdm 1-1:1.0: skipping garbage [ 165.767626][ T5843] cdc_wdm 1-1:1.0: skipping garbage [ 165.811103][ T5843] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 165.811135][ T5843] cdc_wdm 1-1:1.0: Unknown control protocol [ 166.258036][ T31] usb 2-1: 2:1: cannot get freq at ep 0x82 [ 166.332856][ T31] usb 2-1: USB disconnect, device number 4 [ 166.557965][ T5889] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 166.707979][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 166.713482][ T5889] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 166.713510][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.713528][ T5889] usb 5-1: Product: syz [ 166.713540][ T5889] usb 5-1: Manufacturer: syz [ 166.713552][ T5889] usb 5-1: SerialNumber: syz [ 166.726732][ T5889] usb 5-1: config 0 descriptor?? [ 166.732853][ T5889] gspca_main: se401-2.14.0 probing 047d:5003 [ 167.159408][ T5889] gspca_se401: Too many frame sizes [ 167.377642][ T5909] usb 5-1: USB disconnect, device number 4 [ 167.546223][ T6818] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 167.546253][ T6818] overlayfs: failed to set xattr on upper [ 167.546260][ T6818] overlayfs: ...falling back to redirect_dir=nofollow. [ 167.546267][ T6818] overlayfs: ...falling back to index=off. [ 167.546273][ T6818] overlayfs: ...falling back to uuid=null. [ 167.546281][ T6818] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 167.546297][ T6818] overlayfs: maximum fs stacking depth exceeded [ 168.078081][ T31] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 168.216228][ T5843] usb 1-1: USB disconnect, device number 7 [ 168.243259][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 168.255695][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 168.266617][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 168.296167][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.296193][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.296210][ T31] usb 2-1: Product: syz [ 168.296220][ T31] usb 2-1: Manufacturer: syz [ 168.296230][ T31] usb 2-1: SerialNumber: syz [ 168.596370][ T6822] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 168.713447][ T6832] bond0: (slave team0): Releasing backup interface [ 168.842622][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'. [ 168.843548][ T6832] bridge_slave_0: left allmulticast mode [ 168.843579][ T6832] bridge_slave_0: left promiscuous mode [ 168.845460][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.890064][ T3121] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 168.942541][ T6832] bridge_slave_1: left allmulticast mode [ 168.942572][ T6832] bridge_slave_1: left promiscuous mode [ 168.942984][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.037948][ T3121] usb 5-1: Using ep0 maxpacket: 16 [ 169.040376][ T3121] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 169.041959][ T3121] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.043521][ T3121] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.044970][ T3121] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.046239][ T3121] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.047656][ T3121] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.049330][ T3121] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.052868][ T3121] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.054428][ T3121] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.056227][ T3121] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 169.056250][ T3121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 169.056266][ T3121] usb 5-1: SerialNumber: syz [ 169.083423][ T3121] usb 5-1: config 0 descriptor?? [ 169.119029][ T3121] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 169.180847][ T6832] bond0: (slave bond_slave_0): Releasing backup interface [ 169.217534][ T31] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 169.238181][ T31] cdc_ncm 2-1:1.0: bind() failure [ 169.254428][ T31] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 169.254472][ T31] cdc_ncm 2-1:1.1: bind() failure [ 169.282956][ T31] usb 2-1: USB disconnect, device number 5 [ 169.303321][ T6832] bond0: (slave bond_slave_1): Releasing backup interface [ 169.356010][ T6831] input: syz1 as /devices/virtual/input/input9 [ 169.386390][ T5192] bcm5974 5-1:0.0: could not read from device [ 169.424715][ T3121] usb 5-1: USB disconnect, device number 5 [ 169.425165][ T6832] team0: Port device team_slave_0 removed [ 169.475943][ T6832] team0: Port device team_slave_1 removed [ 169.476998][ T6832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.477025][ T6832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.544987][ T6832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.545017][ T6832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.664830][ T6838] team1: entered promiscuous mode [ 169.664859][ T6838] team1: entered allmulticast mode [ 169.796160][ T6842] syzkaller1: entered promiscuous mode [ 169.796186][ T6842] syzkaller1: entered allmulticast mode [ 170.178725][ T6857] loop6: detected capacity change from 0 to 7 [ 170.185369][ T6857] Dev loop6: unable to read RDB block 7 [ 170.185420][ T6857] loop6: unable to read partition table [ 170.185648][ T6857] loop6: partition table beyond EOD, truncated [ 170.185665][ T6857] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 170.618115][ T3121] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 170.771354][ T3121] usb 4-1: Using ep0 maxpacket: 16 [ 170.777227][ T3121] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 170.777256][ T3121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 170.792671][ T3121] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 170.792697][ T3121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.792714][ T3121] usb 4-1: Product: syz [ 170.792725][ T3121] usb 4-1: Manufacturer: syz [ 170.792737][ T3121] usb 4-1: SerialNumber: syz [ 170.839930][ T3121] usb 4-1: config 0 descriptor?? [ 170.880155][ T3121] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 170.880188][ T3121] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 171.429773][ T5843] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 171.493621][ T3121] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 171.494448][ T3121] em28xx 4-1:0.0: Config register raw data: 0xf6 [ 171.494465][ T3121] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 171.494477][ T3121] em28xx 4-1:0.0: No AC97 audio processor [ 171.597921][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 171.606162][ T5843] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 171.606188][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.606205][ T5843] usb 2-1: Product: syz [ 171.606217][ T5843] usb 2-1: Manufacturer: syz [ 171.606229][ T5843] usb 2-1: SerialNumber: syz [ 171.660225][ T5843] usb 2-1: config 0 descriptor?? [ 172.087214][ T5843] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 172.147926][ T5843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 172.150162][ T5843] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 172.150243][ T5843] usb 2-1: media controller created [ 172.154976][ T3121] usb 4-1: USB disconnect, device number 7 [ 172.216467][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.291939][ T5843] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 172.291967][ T5843] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 172.538381][ T31] usb 2-1: USB disconnect, device number 6 [ 172.680221][ T31] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 173.400024][ T6915] vlan2: entered promiscuous mode [ 173.414539][ T6915] team0: entered promiscuous mode [ 173.417596][ T6915] team_slave_0: entered promiscuous mode [ 173.417784][ T6915] team_slave_1: entered promiscuous mode [ 173.436274][ T6915] vlan2: entered allmulticast mode [ 173.436292][ T6915] team0: entered allmulticast mode [ 173.436303][ T6915] team_slave_0: entered allmulticast mode [ 173.436321][ T6915] team_slave_1: entered allmulticast mode [ 173.448312][ T6915] bond0: (slave vlan2): Error -34 calling dev_set_mtu [ 174.636772][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'. [ 176.350447][ T6952] netlink: 'syz.4.382': attribute type 10 has an invalid length. [ 176.386858][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.428334][ T6952] bridge_slave_1: left allmulticast mode [ 176.428365][ T6952] bridge_slave_1: left promiscuous mode [ 176.429380][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.527558][ T6952] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 176.991927][ T37] audit: type=1326 audit(1756500220.896:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6965 comm="syz.0.388" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54bd67ebe9 code=0x0 [ 177.018673][ T37] audit: type=1326 audit(1756500220.916:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6966 comm="syz.3.389" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ae8b2ebe9 code=0x0 [ 178.427183][ T37] audit: type=1326 audit(1756500222.326:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4424ebe9 code=0x7fc00000 [ 178.778365][ T5909] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 178.943804][ T5909] usb 1-1: Using ep0 maxpacket: 8 [ 178.957635][ T5909] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 178.957662][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.957678][ T5909] usb 1-1: Product: syz [ 178.957690][ T5909] usb 1-1: Manufacturer: syz [ 178.957702][ T5909] usb 1-1: SerialNumber: syz [ 178.996896][ T5909] usb 1-1: config 0 descriptor?? [ 179.204001][ T5909] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 179.704831][ T7031] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 180.221040][ T5909] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 180.224026][ T5909] usb 1-1: USB disconnect, device number 8 [ 180.280462][ T7039] syz.3.417 (7039) used greatest stack depth: 18840 bytes left [ 180.352575][ T7043] evm: overlay not supported [ 180.948944][ T7065] netlink: 64 bytes leftover after parsing attributes in process `syz.0.428'. [ 180.949337][ T7065] netlink: 64 bytes leftover after parsing attributes in process `syz.0.428'. [ 181.386817][ T37] audit: type=1326 audit(1756500225.286:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7074 comm="syz.0.433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54bd67ebe9 code=0x0 [ 181.458813][ T7072] syzkaller1: entered promiscuous mode [ 181.458842][ T7072] syzkaller1: entered allmulticast mode [ 181.708979][ T7084] Driver unsupported XDP return value 0 on prog (id 59) dev N/A, expect packet loss! [ 181.811409][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.435'. [ 181.878761][ T1181] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.880558][ T1181] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.880598][ T1181] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.880630][ T1181] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.882172][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.435'. [ 182.103003][ T7094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.206619][ T7152] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.463'. [ 184.408817][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 184.998017][ T3121] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 185.157943][ T3121] usb 4-1: Using ep0 maxpacket: 32 [ 185.160241][ T3121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.160267][ T3121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.160302][ T3121] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 185.160322][ T3121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.169638][ T3121] usb 4-1: config 0 descriptor?? [ 185.181889][ T3121] hub 4-1:0.0: USB hub found [ 185.402434][ T3121] hub 4-1:0.0: 1 port detected [ 186.029810][ T5889] hub 4-1:0.0: activate --> -90 [ 186.438131][ T5889] usb 4-1-port1: config error [ 186.456294][ T31] usb 4-1: USB disconnect, device number 8 [ 186.459720][ T5889] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 186.459743][ T5889] usb 4-1-port1: connect-debounce failed [ 187.618025][ T5889] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 187.790417][ T5889] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 187.790445][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.800235][ T5889] usb 3-1: config 0 descriptor?? [ 188.007987][ T5843] IPVS: starting estimator thread 0... [ 188.008338][ T7216] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 188.098057][ T7219] IPVS: using max 7 ests per chain, 16800 per kthread [ 189.181404][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 189.270364][ T5889] usb 3-1: Cannot set autoneg [ 189.270626][ T5889] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 189.306143][ T5889] usb 3-1: USB disconnect, device number 5 [ 189.663216][ T7248] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 190.539746][ T5930] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 190.690296][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 190.693104][ T5930] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 190.693127][ T5930] usb 2-1: config 0 has no interface number 0 [ 190.696287][ T5930] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 190.696310][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.696327][ T5930] usb 2-1: Product: syz [ 190.696340][ T5930] usb 2-1: Manufacturer: syz [ 190.696352][ T5930] usb 2-1: SerialNumber: syz [ 190.780120][ T5930] usb 2-1: config 0 descriptor?? [ 190.814282][ T5930] smsc95xx v2.0.0 [ 191.028144][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 191.248478][ T5930] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 191.248505][ T5930] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 192.067178][ T5930] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 192.067488][ T5930] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 192.104814][ T5930] usb 2-1: USB disconnect, device number 7 [ 195.333385][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.333418][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.389092][ T7350] process 'syz.0.541' launched './file1' with NULL argv: empty string added [ 195.804525][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.822219][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.823783][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.824870][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.825586][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.114848][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.114875][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.544200][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.544232][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.578090][ T5930] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 196.732725][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.732755][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.732774][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 196.732800][ T5930] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.732816][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.736145][ T5930] usb 5-1: config 0 descriptor?? [ 197.077350][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.077374][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.199947][ T7384] bridge0: entered allmulticast mode [ 197.201632][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'. [ 197.201715][ T7384] bridge_slave_1: left allmulticast mode [ 197.201739][ T7384] bridge_slave_1: left promiscuous mode [ 197.202083][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.247070][ T5930] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 197.313646][ T7384] bridge_slave_0: left allmulticast mode [ 197.313676][ T7384] bridge_slave_0: left promiscuous mode [ 197.313979][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.401591][ T7392] loop6: detected capacity change from 0 to 7 [ 197.402908][ T7392] Dev loop6: unable to read RDB block 7 [ 197.402936][ T7392] loop6: AHDI p1 p2 p3 [ 197.402961][ T7392] loop6: partition table partially beyond EOD, truncated [ 197.403070][ T7392] loop6: p1 start 1405162169 is beyond EOD, truncated [ 197.403086][ T7392] loop6: p2 size 46 extends beyond EOD, truncated [ 197.478786][ T5908] usb 5-1: USB disconnect, device number 6 [ 197.543613][ T7384] bridge0 (unregistering): left allmulticast mode [ 197.868027][ T45] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 197.898206][ T5846] Bluetooth: hci0: command tx timeout [ 198.022026][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 198.022057][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 198.022091][ T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 198.025331][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.025358][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.025375][ T45] usb 1-1: Product: syz [ 198.025388][ T45] usb 1-1: Manufacturer: syz [ 198.025400][ T45] usb 1-1: SerialNumber: syz [ 198.293671][ T57] bridge_slave_1: left allmulticast mode [ 198.293763][ T57] bridge_slave_1: left promiscuous mode [ 198.296066][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.451357][ T57] bridge_slave_0: left allmulticast mode [ 198.451390][ T57] bridge_slave_0: left promiscuous mode [ 198.451758][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.479896][ T45] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 199.294130][ T45] usb 1-1: 2:1: cannot get freq at ep 0x82 [ 199.326064][ T45] usb 1-1: USB disconnect, device number 9 [ 199.978132][ T5846] Bluetooth: hci0: command 0x041b tx timeout [ 200.482003][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.757998][ T31] psmouse serio2: Failed to reset mouse on : -5 [ 201.073298][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.128808][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.151022][ T57] bond0 (unregistering): Released all slaves [ 201.360312][ T7353] chnl_net:caif_netlink_parms(): no params data found [ 202.059443][ T5844] Bluetooth: hci0: command 0x041b tx timeout [ 202.538500][ T5930] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 202.710803][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.710834][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.710871][ T5930] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 202.710891][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.775516][ T5930] usb 5-1: config 0 descriptor?? [ 202.833354][ T7353] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.833674][ T7353] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.833974][ T7353] bridge_slave_0: entered allmulticast mode [ 202.870865][ T7353] bridge_slave_0: entered promiscuous mode [ 203.008147][ T57] hsr_slave_0: left promiscuous mode [ 203.028069][ T57] hsr_slave_1: left promiscuous mode [ 203.033142][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.034164][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.100890][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.100920][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.250007][ T5930] hid-led 0003:1294:1320.0004: hidraw0: USB HID vff.fe Device [HID 1294:1320] on usb-dummy_hcd.4-1/input0 [ 203.274952][ T5930] hid-led 0003:1294:1320.0004: Riso Kagaku Webmail Notifier initialized [ 203.346266][ T57] veth1_macvtap: left promiscuous mode [ 203.347660][ T57] veth0_macvtap: left promiscuous mode [ 203.357660][ T57] veth1_vlan: left promiscuous mode [ 203.365587][ T57] veth0_vlan: left promiscuous mode [ 203.401595][ T3121] usb 5-1: USB disconnect, device number 7 [ 203.425560][ T69] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 203.442175][ T1181] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 203.457434][ T69] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 204.139127][ T5844] Bluetooth: hci0: command 0x041b tx timeout [ 204.552836][ T5930] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 204.594451][ T31] misc userio: Buffer overflowed, userio client isn't keeping up [ 204.747982][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 204.752206][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 204.752234][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 204.752257][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 204.752277][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 204.752301][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 204.755449][ T5930] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 204.755474][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.755489][ T5930] usb 3-1: Product: syz [ 204.755500][ T5930] usb 3-1: Manufacturer: syz [ 204.755511][ T5930] usb 3-1: SerialNumber: syz [ 204.780156][ T5930] usb 3-1: config 0 descriptor?? [ 205.208457][ T5930] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 205.208518][ T5930] input input12: Device does not respond to id packet M [ 205.209748][ T5930] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 205.209789][ T5930] input input12: Device does not respond to id packet P [ 205.212961][ T5930] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 205.213006][ T5930] input input12: Device does not respond to id packet B [ 205.215565][ T5930] input input12: Limiting number of effects to 32 (device reports 51) [ 205.437051][ T5930] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 205.437536][ T5930] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 205.439473][ T5930] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 205.439917][ T5930] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 205.461312][ T5930] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 205.523866][ T5930] usb 3-1: USB disconnect, device number 6 [ 205.549820][ T5930] iforce 3-1:0.0: usb_submit_urb failed -19 [ 205.645696][ T31] input: PS/2 Generic Mouse as /devices/serio2/input/input11 [ 205.967973][ T31] psmouse serio2: Failed to enable mouse on [ 206.218119][ T5844] Bluetooth: hci0: command 0x041b tx timeout [ 206.798068][ T5930] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 206.947951][ T5930] usb 1-1: Using ep0 maxpacket: 8 [ 206.971204][ T5930] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 206.971236][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.971253][ T5930] usb 1-1: Product: syz [ 206.971265][ T5930] usb 1-1: Manufacturer: syz [ 206.971277][ T5930] usb 1-1: SerialNumber: syz [ 206.976977][ T5930] usb 1-1: config 0 descriptor?? [ 207.203558][ T5930] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 207.308672][ T57] team0 (unregistering): Port device team_slave_1 removed [ 207.617053][ T5930] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 207.631942][ T5930] usb 1-1: USB disconnect, device number 10 [ 207.633700][ T57] team0 (unregistering): Port device team_slave_0 removed [ 208.188060][ T7492] netlink: 'syz.4.589': attribute type 58 has an invalid length. [ 209.950159][ T7353] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.950290][ T7353] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.950440][ T7353] bridge_slave_1: entered allmulticast mode [ 209.951973][ T7353] bridge_slave_1: entered promiscuous mode [ 210.130682][ T7502] netlink: 240 bytes leftover after parsing attributes in process `syz.1.591'. [ 210.652986][ T7353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.739937][ T7353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.439055][ T7518] netlink: 'syz.2.596': attribute type 1 has an invalid length. [ 211.956364][ T7519] bond2: (slave gretap1): making interface the new active one [ 211.960362][ T7519] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 211.998698][ T7353] team0: Port device team_slave_0 added [ 212.049871][ T7353] team0: Port device team_slave_1 added [ 212.847012][ T7353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.847028][ T7353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.847051][ T7353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.905627][ T7353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.905643][ T7353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.905676][ T7353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.350190][ T5930] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 213.529216][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.529259][ T5930] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 213.529278][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.573541][ T5930] usb 1-1: config 0 descriptor?? [ 213.679242][ T7353] hsr_slave_0: entered promiscuous mode [ 213.694529][ T7353] hsr_slave_1: entered promiscuous mode [ 213.695447][ T7353] debugfs: 'hsr0' already exists in 'hsr' [ 213.695470][ T7353] Cannot create hsr debugfs directory [ 213.820599][ T5930] usbhid 1-1:0.0: can't add hid device: -71 [ 213.820718][ T5930] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 213.848314][ T5930] usb 1-1: USB disconnect, device number 11 [ 213.987992][ T3121] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 213.995974][ T57] IPVS: stop unused estimator thread 0... [ 214.143723][ T3121] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.190761][ T3121] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.190786][ T3121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.190803][ T3121] usb 3-1: Product: syz [ 214.190814][ T3121] usb 3-1: Manufacturer: syz [ 214.190826][ T3121] usb 3-1: SerialNumber: syz [ 214.301659][ T5908] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 214.348035][ T5889] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 214.447986][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 214.465218][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.466000][ T5908] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 214.466022][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.504134][ T5908] usb 1-1: config 0 descriptor?? [ 214.513298][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 214.520078][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.520106][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.520191][ T5889] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 214.520211][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.600654][ T5889] usb 5-1: config 0 descriptor?? [ 214.765635][ T7353] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 214.816058][ T7353] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 214.874903][ T7353] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 214.899812][ T7353] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 214.956162][ T5908] kye 0003:0458:5016.0005: control desc unexpectedly large [ 215.003295][ T5908] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0005/input/input13 [ 215.234975][ T7353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.245252][ T5908] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0005/input/input14 [ 215.339588][ T7353] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.341154][ T3121] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 215.341184][ T3121] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 215.341200][ T3121] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 215.390746][ T5908] kye 0003:0458:5016.0005: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 215.397959][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.398108][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.440445][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.440592][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.744991][ T3121] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 215.789465][ T5908] usb 1-1: USB disconnect, device number 12 [ 215.863488][ T5889] letsketch 0003:6161:4D15.0006: Device info: ఁ [ 215.884575][ T3121] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 216.026537][ T3121] usb 3-1: USB disconnect, device number 7 [ 216.045296][ T3121] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 216.101730][ T5889] usb 5-1: Max retries (5) exceeded reading string descriptor 201 [ 216.101808][ T5889] letsketch 0003:6161:4D15.0006: probe with driver letsketch failed with error -71 [ 216.126362][ T5889] usb 5-1: USB disconnect, device number 8 [ 216.202113][ T7353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.879784][ T7353] veth0_vlan: entered promiscuous mode [ 216.906729][ T7353] veth1_vlan: entered promiscuous mode [ 216.977253][ T7353] veth0_macvtap: entered promiscuous mode [ 216.991870][ T7353] veth1_macvtap: entered promiscuous mode [ 217.052896][ T7353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.101197][ T7353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.140686][ T4113] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.144148][ T4113] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.144652][ T4113] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.145097][ T4113] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.716709][ T7629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.795584][ T4113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.795602][ T4113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.879843][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.879861][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.958070][ T5889] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 218.109947][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 218.111886][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 218.111903][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 218.111915][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 218.111926][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 218.111939][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 218.114038][ T5889] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 218.114051][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.114061][ T5889] usb 5-1: Product: syz [ 218.114067][ T5889] usb 5-1: Manufacturer: syz [ 218.114074][ T5889] usb 5-1: SerialNumber: syz [ 218.243714][ T5889] usb 5-1: config 0 descriptor?? [ 218.651835][ T5889] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 218.651882][ T5889] input input15: Device does not respond to id packet M [ 218.652551][ T5889] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 218.652593][ T5889] input input15: Device does not respond to id packet P [ 218.684919][ T5889] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 218.685323][ T5889] input input15: Device does not respond to id packet B [ 218.686573][ T5889] input input15: Device does not respond to id packet N [ 218.887227][ T5889] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 218.897119][ T5889] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 218.897594][ T5889] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 218.899547][ T5889] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 218.902738][ T5889] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 218.963563][ T5889] usb 5-1: USB disconnect, device number 9 [ 219.604441][ T7661] bridge_slave_0: left allmulticast mode [ 219.604472][ T7661] bridge_slave_0: left promiscuous mode [ 219.607518][ T7661] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.739032][ T7661] bond0: (slave bridge_slave_1): Releasing backup interface [ 219.848730][ T7661] bond0: (slave bond_slave_0): Releasing backup interface [ 219.931150][ T7661] bond0: (slave bond_slave_1): Releasing backup interface [ 220.077397][ T7661] team0: Port device team_slave_0 removed [ 220.152772][ T7661] team0: Port device team_slave_1 removed [ 220.153879][ T7661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.153905][ T7661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.201614][ T7661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.201646][ T7661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.352252][ T7661] bond0: (slave netdevsim0): Releasing backup interface [ 220.481770][ T7661] bond1: left promiscuous mode [ 220.482093][ T7661] bridge0: port 3(bond1) entered disabled state [ 220.560270][ T5889] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 220.716102][ T5889] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 220.716129][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.716146][ T5889] usb 2-1: Product: syz [ 220.716158][ T5889] usb 2-1: Manufacturer: syz [ 220.716170][ T5889] usb 2-1: SerialNumber: syz [ 220.757729][ T5889] usb 2-1: config 0 descriptor?? [ 222.212588][ T7720] loop2: detected capacity change from 0 to 7 [ 222.239268][ T7720] Dev loop2: unable to read RDB block 7 [ 222.239320][ T7720] loop2: unable to read partition table [ 222.239549][ T7720] loop2: partition table beyond EOD, truncated [ 222.239566][ T7720] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 222.247327][ T5889] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 222.300689][ T5889] usb 2-1: USB disconnect, device number 8 [ 222.359588][ T5889] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 222.539851][ T5889] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 222.903794][ T5843] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 222.945995][ T7749] bond_slave_1: entered promiscuous mode [ 222.946423][ T7749] veth0_to_bridge: entered promiscuous mode [ 222.947088][ T7746] veth0_to_bridge: left promiscuous mode [ 222.965717][ T7746] bond_slave_1: left promiscuous mode [ 223.054274][ T5843] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 223.054299][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.063392][ T5843] usb 6-1: config 0 descriptor?? [ 223.100083][ T5843] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 223.625166][ T7757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.683'. [ 224.191773][ T7765] netlink: 'syz.1.687': attribute type 1 has an invalid length. [ 224.191794][ T7765] netlink: 'syz.1.687': attribute type 4 has an invalid length. [ 224.191805][ T7765] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.687'. [ 224.317604][ T5843] usb 6-1: USB disconnect, device number 2 [ 224.378699][ T7768] ref_ctr_offset mismatch. inode: 0x2ef offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 225.022982][ T7778] netlink: 'syz.0.693': attribute type 1 has an invalid length. [ 225.215850][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.695'. [ 227.236485][ T7825] tipc: Failed to remove unknown binding: 66,1,1/0:140689745/140689747 [ 227.236519][ T7825] tipc: Failed to remove unknown binding: 66,1,1/0:140689745/140689747 [ 227.879719][ T5843] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 228.028324][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 228.030928][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.030956][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.030993][ T5843] usb 5-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 228.031012][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.037002][ T5843] usb 5-1: config 0 descriptor?? [ 228.145337][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 228.145521][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 228.145542][ T5853] Bluetooth: hci4: command 0x0406 tx timeout [ 228.146536][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 228.475677][ T5843] betop 0003:20BC:5500.0007: collection stack underflow [ 228.475708][ T5843] betop 0003:20BC:5500.0007: item 0 2 0 12 parsing failed [ 228.476491][ T5843] betop 0003:20BC:5500.0007: parse failed [ 228.476553][ T5843] betop 0003:20BC:5500.0007: probe with driver betop failed with error -22 [ 228.681784][ T31] usb 5-1: USB disconnect, device number 10 [ 229.074090][ T7870] netlink: 165 bytes leftover after parsing attributes in process `syz.2.731'. [ 229.075890][ T7870] netlink: 165 bytes leftover after parsing attributes in process `syz.2.731'. [ 229.173063][ T7872] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input16 [ 229.227977][ T5889] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 229.383359][ T5889] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 229.383416][ T5889] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 229.383435][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 229.412678][ T5889] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 229.412704][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 229.412722][ T5889] usb 2-1: Product: syz [ 229.412734][ T5889] usb 2-1: Manufacturer: syz [ 229.412746][ T5889] usb 2-1: SerialNumber: syz [ 229.451356][ T5889] usb 2-1: config 0 descriptor?? [ 229.464724][ T5889] hub 2-1:0.0: bad descriptor, ignoring hub [ 229.464760][ T5889] hub 2-1:0.0: probe with driver hub failed with error -5 [ 229.491139][ T5889] usb 2-1: selecting invalid altsetting 0 [ 230.414084][ T7898] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 230.649801][ T7902] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input17 [ 231.192217][ T37] audit: type=1326 audit(1756500275.096:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7923 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a3a5ebe9 code=0x7ffc0000 [ 231.193013][ T37] audit: type=1326 audit(1756500275.096:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7923 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f64a3a5ebe9 code=0x7ffc0000 [ 231.194447][ T37] audit: type=1326 audit(1756500275.096:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7923 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a3a5ebe9 code=0x7ffc0000 [ 231.194996][ T37] audit: type=1326 audit(1756500275.096:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7923 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a3a5ebe9 code=0x7ffc0000 [ 231.195338][ T37] audit: type=1326 audit(1756500275.096:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7923 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f64a3a5ebe9 code=0x7ffc0000 [ 231.197718][ T37] audit: type=1326 audit(1756500275.096:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7923 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a3a5ebe9 code=0x7ffc0000 [ 231.770258][ T7938] loop3: detected capacity change from 0 to 1 [ 231.775469][ T7938] Dev loop3: unable to read RDB block 1 [ 231.775513][ T7938] loop3: unable to read partition table [ 231.775737][ T7938] loop3: partition table beyond EOD, truncated [ 231.775753][ T7938] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 231.785518][ T7938] Dev loop3: unable to read RDB block 1 [ 231.785560][ T7938] loop3: unable to read partition table [ 231.785794][ T7938] loop3: partition table beyond EOD, truncated [ 233.238110][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 233.400121][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 233.909818][ T9] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 233.916062][ T9] usb 6-1: config 0 has no interfaces? [ 233.918983][ T9] usb 6-1: config 0 has no interfaces? [ 233.923254][ T9] usb 6-1: config 0 has no interfaces? [ 233.925903][ T9] usb 6-1: config 0 has no interfaces? [ 233.927018][ T9] usb 6-1: config 0 has no interfaces? [ 233.928330][ T9] usb 6-1: config 0 has no interfaces? [ 233.929462][ T9] usb 6-1: config 0 has no interfaces? [ 233.930549][ T9] usb 6-1: config 0 has no interfaces? [ 234.147855][ T9] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 234.147882][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.147898][ T9] usb 6-1: Product: syz [ 234.147910][ T9] usb 6-1: Manufacturer: syz [ 234.147923][ T9] usb 6-1: SerialNumber: syz [ 234.381857][ T5908] usb 2-1: USB disconnect, device number 9 [ 234.452231][ T9] usb 6-1: config 0 descriptor?? [ 234.678167][ T5889] usb 6-1: USB disconnect, device number 3 [ 235.003169][ T7999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.779'. [ 235.068107][ T5843] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 235.218159][ T5843] usb 1-1: Using ep0 maxpacket: 32 [ 235.220705][ T5843] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 235.220731][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.233126][ T5843] usb 1-1: config 0 descriptor?? [ 235.270339][ T5843] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 236.059094][ T8021] netlink: 'syz.1.789': attribute type 12 has an invalid length. [ 236.480096][ T5843] gspca_nw80x: reg_w err -71 [ 236.480186][ T5843] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 236.486789][ T5843] usb 1-1: USB disconnect, device number 13 [ 237.666681][ T3713] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.160507][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.184795][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.189444][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.195751][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.196459][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.370007][ T8059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.373765][ T8059] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 238.377715][ T8059] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 238.412874][ T3713] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.575139][ T8064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.805'. [ 238.808122][ T8064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.883010][ T8066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.883505][ T8066] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 238.884778][ T8066] bond1: (slave vti0): Error -95 calling set_mac_address [ 239.277780][ T3713] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.639233][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.659517][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.661465][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.663186][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.663929][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.677964][ T5889] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 239.706032][ T3713] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.718042][ T5908] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 239.853087][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.853116][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 239.853138][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 239.853156][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.853206][ T5889] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.853226][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.867946][ T5889] usb 1-1: config 0 descriptor?? [ 239.904419][ T5908] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 239.904444][ T5908] usb 3-1: config 0 has no interface number 0 [ 239.904492][ T5908] usb 3-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.904513][ T5908] usb 3-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.904548][ T5908] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 239.904567][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.933627][ T5908] usb 3-1: config 0 descriptor?? [ 240.255867][ T8087] netlink: 452 bytes leftover after parsing attributes in process `syz.4.814'. [ 240.299112][ T5850] Bluetooth: hci0: command tx timeout [ 240.366306][ T5908] logitech-djreceiver 0003:046D:C534.0008: unknown main item tag 0x0 [ 240.366339][ T5908] logitech-djreceiver 0003:046D:C534.0008: unknown main item tag 0x0 [ 240.366364][ T5908] logitech-djreceiver 0003:046D:C534.0008: unknown main item tag 0x0 [ 240.366394][ T5908] logitech-djreceiver 0003:046D:C534.0008: unknown main item tag 0x0 [ 240.419002][ T5908] logitech-djreceiver 0003:046D:C534.0008: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.2-1/input28 [ 240.452305][ T5889] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 240.607318][ T5889] usb 3-1: USB disconnect, device number 8 [ 240.826705][ T8051] chnl_net:caif_netlink_parms(): no params data found [ 240.927140][ T3713] bridge_slave_1: left allmulticast mode [ 240.927170][ T3713] bridge_slave_1: left promiscuous mode [ 240.927463][ T3713] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.009443][ T3713] bridge_slave_0: left allmulticast mode [ 241.009476][ T3713] bridge_slave_0: left promiscuous mode [ 241.009741][ T3713] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.722100][ T8082] usb 1-1: string descriptor 0 read error: -71 [ 241.749070][ T5850] Bluetooth: hci1: command tx timeout [ 241.978197][ T5930] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 242.127932][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 242.130299][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.130326][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.130345][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 242.130383][ T5930] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 242.130403][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.135701][ T5930] usb 3-1: config 0 descriptor?? [ 242.378755][ T5850] Bluetooth: hci0: command tx timeout [ 242.512044][ T45] usb 1-1: USB disconnect, device number 14 [ 242.595972][ T5930] hid-multitouch 0003:0457:07DA.000A: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 242.823583][ T3121] usb 3-1: USB disconnect, device number 9 [ 243.263797][ T8123] Bluetooth: MGMT ver 1.23 [ 243.818655][ T5850] Bluetooth: hci1: command tx timeout [ 244.058813][ T3713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.150378][ T3713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.215525][ T3713] bond0 (unregistering): Released all slaves [ 244.458027][ T5850] Bluetooth: hci0: command tx timeout [ 245.382449][ T8145] syz_tun: entered allmulticast mode [ 245.571723][ T8155] Oops: general protection fault, probably for non-canonical address 0xdffffc000000014b: 0000 [#1] SMP KASAN PTI [ 245.571747][ T8155] KASAN: null-ptr-deref in range [0x0000000000000a58-0x0000000000000a5f] [ 245.571768][ T8155] CPU: 1 UID: 0 PID: 8155 Comm: syz.0.836 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 245.571788][ T8155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.571799][ T8155] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 245.571829][ T8155] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 50 a2 dc 08 cc 66 66 66 66 66 66 2e [ 245.571843][ T8155] RSP: 0018:ffffc90004f077e0 EFLAGS: 00010006 [ 245.571861][ T8155] RAX: dffffc0000000000 RBX: ffffffff8af9dfe7 RCX: 82d86a1aef62b300 [ 245.571874][ T8155] RDX: 0000000000000000 RSI: ffffffff8af9dfe7 RDI: 000000000000014b [ 245.571886][ T8155] RBP: ffffffff81908477 R08: 0000000000000001 R09: 0000000000000000 [ 245.571897][ T8155] R10: dffffc0000000000 R11: fffffbfff1e3a947 R12: 0000000000000000 [ 245.571909][ T8155] R13: 0000000000000a58 R14: 0000000000000a58 R15: 0000000000000001 [ 245.571920][ T8155] FS: 00007f54bb8bd6c0(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 245.571935][ T8155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.571947][ T8155] CR2: 00007f54bb8bdd58 CR3: 000000006af16000 CR4: 00000000003526f0 [ 245.571961][ T8155] Call Trace: [ 245.571969][ T8155] [ 245.571975][ T8155] __kasan_check_byte+0x12/0x40 [ 245.571998][ T8155] lock_acquire+0x8d/0x360 [ 245.572020][ T8155] ? preempt_schedule_common+0x83/0xd0 [ 245.572045][ T8155] _raw_spin_lock_irqsave+0xa7/0xf0 [ 245.572066][ T8155] ? try_to_wake_up+0x67/0x12b0 [ 245.572088][ T8155] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 245.572111][ T8155] ? rcuwait_wake_up+0x1c/0x230 [ 245.572137][ T8155] try_to_wake_up+0x67/0x12b0 [ 245.572158][ T8155] ? rcuwait_wake_up+0x1c/0x230 [ 245.572182][ T8155] ? rcuwait_wake_up+0x1c/0x230 [ 245.572205][ T8155] ? rcuwait_wake_up+0x1c/0x230 [ 245.572229][ T8155] requeue_pi_wake_futex+0x24b/0x2f0 [ 245.572254][ T8155] ? __pfx_requeue_pi_wake_futex+0x10/0x10 [ 245.572279][ T8155] futex_requeue+0x135f/0x1870 [ 245.572301][ T8155] ? try_to_take_rt_mutex+0x840/0xb00 [ 245.572324][ T8155] ? rtlock_slowlock_locked+0xd8/0x4010 [ 245.572343][ T8155] ? __pfx_futex_requeue+0x10/0x10 [ 245.572364][ T8155] ? __lock_acquire+0xab9/0xd20 [ 245.572387][ T8155] ? do_raw_spin_lock+0x121/0x290 [ 245.572410][ T8155] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 245.572431][ T8155] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.572454][ T8155] do_futex+0x362/0x420 [ 245.572475][ T8155] ? __pfx_do_futex+0x10/0x10 [ 245.572491][ T8155] ? rt_mutex_slowunlock+0x493/0x8a0 [ 245.572513][ T8155] __se_sys_futex+0x36f/0x400 [ 245.572531][ T8155] ? rcu_is_watching+0x15/0xb0 [ 245.572556][ T8155] ? __pfx___se_sys_futex+0x10/0x10 [ 245.572574][ T8155] ? rcu_is_watching+0x15/0xb0 [ 245.572600][ T8155] ? __x64_sys_futex+0x21/0xf0 [ 245.572619][ T8155] do_syscall_64+0xfa/0x3b0 [ 245.572641][ T8155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.572658][ T8155] ? __switch_to_asm+0x39/0x70 [ 245.572673][ T8155] ? clear_bhb_loop+0x60/0xb0 [ 245.572692][ T8155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.572717][ T8155] RIP: 0033:0x7f54bd67ebe9 [ 245.572739][ T8155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.572753][ T8155] RSP: 002b:00007f54bb8bd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 245.572771][ T8155] RAX: ffffffffffffffda RBX: 00007f54bd8a6090 RCX: 00007f54bd67ebe9 [ 245.572784][ T8155] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc [ 245.572796][ T8155] RBP: 00007f54bd701e19 R08: 0000200000048000 R09: 0000000000000000 [ 245.572807][ T8155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.572818][ T8155] R13: 00007f54bd8a6128 R14: 00007f54bd8a6090 R15: 00007fff5b7f0488 [ 245.572838][ T8155] [ 245.572844][ T8155] Modules linked in: [ 245.572863][ T8155] ---[ end trace 0000000000000000 ]--- [ 245.572875][ T8155] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 245.572898][ T8155] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 50 a2 dc 08 cc 66 66 66 66 66 66 2e [ 245.572911][ T8155] RSP: 0018:ffffc90004f077e0 EFLAGS: 00010006 [ 245.572926][ T8155] RAX: dffffc0000000000 RBX: ffffffff8af9dfe7 RCX: 82d86a1aef62b300 [ 245.572939][ T8155] RDX: 0000000000000000 RSI: ffffffff8af9dfe7 RDI: 000000000000014b [ 245.572950][ T8155] RBP: ffffffff81908477 R08: 0000000000000001 R09: 0000000000000000 [ 245.572960][ T8155] R10: dffffc0000000000 R11: fffffbfff1e3a947 R12: 0000000000000000 [ 245.572971][ T8155] R13: 0000000000000a58 R14: 0000000000000a58 R15: 0000000000000001 [ 245.572982][ T8155] FS: 00007f54bb8bd6c0(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 245.572997][ T8155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.573009][ T8155] CR2: 00007f54bb8bdd58 CR3: 000000006af16000 CR4: 00000000003526f0 [ 245.573025][ T8155] Kernel panic - not syncing: Fatal exception [ 245.573280][ T8155] Kernel Offset: disabled