last executing test programs: 3.703436698s ago: executing program 2 (id=725): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="5c00000012", 0x5}], 0x1, 0x0, 0x1f, 0x1f00c00e}, 0x0) r0 = fanotify_init(0x28, 0x109800) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2) 3.651200829s ago: executing program 2 (id=727): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2a, 0x2, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 3.526139683s ago: executing program 2 (id=730): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r1, 0x5, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48051}, 0x10) 3.351049411s ago: executing program 2 (id=734): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000080)=[{0x84, 0x77, 0x0, 0x0, @time={0x9, 0x80000001}, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x9, 0x5, 0x5, 0x83, @time={0xb9, 0x5}, {0xfd}, {}, @raw32={[0xb, 0x1, 0x100]}}, {0x4, 0x6, 0x3, 0x8, @time={0x80, 0x3}, {0xb, 0x4}, {0xd, 0x9}, @ext={0x0, 0x0}}], 0x54) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) 2.880888131s ago: executing program 0 (id=743): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 2.647373522s ago: executing program 0 (id=748): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = inotify_init1(0x800) r2 = fcntl$dupfd(r0, 0x406, r1) setsockopt$inet_mtu(r2, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) 2.467495079s ago: executing program 0 (id=751): memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x00\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1ps\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched_retired(r1, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000004b00)={&(0x7f0000000340)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0x4}, {0x6, 0xc}, {0x8, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x40010) 1.111633865s ago: executing program 3 (id=765): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) socket$key(0xf, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) 1.088320031s ago: executing program 3 (id=767): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 710.633166ms ago: executing program 0 (id=771): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x5, 0x12) 667.328929ms ago: executing program 0 (id=773): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/178, 0xb2}], 0x1}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x40000022, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x53}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 554.858363ms ago: executing program 0 (id=775): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x189) 451.853333ms ago: executing program 1 (id=776): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000200)=0x7) 422.263183ms ago: executing program 1 (id=777): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800001, 0x11, r1, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x1, 0x4) 370.957169ms ago: executing program 1 (id=778): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x0, "518aba4d000000000000000000000000002000"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 270.680984ms ago: executing program 1 (id=779): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendfile(r1, r0, 0x0, 0x80001d00c0d0) 263.557051ms ago: executing program 2 (id=780): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 235.529452ms ago: executing program 1 (id=781): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 135.57846ms ago: executing program 3 (id=782): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x7ff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) 135.406698ms ago: executing program 2 (id=783): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x8, 0x0, {0x9, 0x1}, {0x47, 0x2}, @cond=[{0x100, 0x20c8, 0x20, 0x4, 0xaf}, {0x7ffe, 0x11, 0x1, 0x10, 0x5, 0xfaa}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000540)=""/240) 78.683956ms ago: executing program 1 (id=784): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) mmap$dsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0x0) read$dsp(r0, &(0x7f0000000200)=""/168, 0xa8) 0s ago: executing program 3 (id=785): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@canfd={{}, 0x2e, 0x0, 0x0, 0x0, "4e4e488e419039dda425818c34de45852abd1372621b404219373c9a72cdb611ef256a70bf66c39d7082f2809cbc3da9bb3c86e0c5e53cff15d561c53fe9ae3a"}, 0x48}}, 0x811) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. [ 79.686750][ T5823] cgroup: Unknown subsys name 'net' [ 79.829062][ T5823] cgroup: Unknown subsys name 'cpuset' [ 79.837853][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.484107][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.685190][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.707485][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.715942][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.716692][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.723479][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.732379][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.746954][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.747909][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.759156][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.762994][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.776478][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.777210][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.783776][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.793072][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.799460][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.807016][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.812169][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.829037][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.839282][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.859648][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.390214][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 84.487716][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 84.559418][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 84.629517][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 84.711468][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.718807][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.726747][ T5834] bridge_slave_0: entered allmulticast mode [ 84.734111][ T5834] bridge_slave_0: entered promiscuous mode [ 84.771393][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.778961][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.786544][ T5834] bridge_slave_1: entered allmulticast mode [ 84.793771][ T5834] bridge_slave_1: entered promiscuous mode [ 84.850141][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.857491][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.864716][ T5836] bridge_slave_0: entered allmulticast mode [ 84.872389][ T5836] bridge_slave_0: entered promiscuous mode [ 84.922775][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.930049][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.937780][ T5836] bridge_slave_1: entered allmulticast mode [ 84.945023][ T5836] bridge_slave_1: entered promiscuous mode [ 84.962479][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.969705][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.977579][ T5842] bridge_slave_0: entered allmulticast mode [ 84.984783][ T5842] bridge_slave_0: entered promiscuous mode [ 84.996105][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.028715][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.036199][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.044067][ T5842] bridge_slave_1: entered allmulticast mode [ 85.052648][ T5842] bridge_slave_1: entered promiscuous mode [ 85.062288][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.072566][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.080374][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.088586][ T5835] bridge_slave_0: entered allmulticast mode [ 85.096460][ T5835] bridge_slave_0: entered promiscuous mode [ 85.105564][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.113689][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.121244][ T5835] bridge_slave_1: entered allmulticast mode [ 85.128620][ T5835] bridge_slave_1: entered promiscuous mode [ 85.138662][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.184140][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.252737][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.264693][ T5834] team0: Port device team_slave_0 added [ 85.274763][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.286343][ T5836] team0: Port device team_slave_0 added [ 85.294710][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.306141][ T5834] team0: Port device team_slave_1 added [ 85.315158][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.332365][ T5836] team0: Port device team_slave_1 added [ 85.405549][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.412614][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.439014][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.475220][ T5842] team0: Port device team_slave_0 added [ 85.483696][ T5842] team0: Port device team_slave_1 added [ 85.490389][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.498595][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.525111][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.538435][ T5835] team0: Port device team_slave_0 added [ 85.545087][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.552255][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.583874][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.632169][ T5835] team0: Port device team_slave_1 added [ 85.639119][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.646585][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.672986][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.684775][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.692080][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.718563][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.731540][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.738565][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.764996][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.842409][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.849700][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.876893][ T5844] Bluetooth: hci3: command tx timeout [ 85.876899][ T51] Bluetooth: hci0: command tx timeout [ 85.877097][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.885848][ T5844] Bluetooth: hci2: command tx timeout [ 85.890725][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.911692][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.938487][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.955697][ T5844] Bluetooth: hci1: command tx timeout [ 85.974123][ T5834] hsr_slave_0: entered promiscuous mode [ 85.981274][ T5834] hsr_slave_1: entered promiscuous mode [ 86.029368][ T5842] hsr_slave_0: entered promiscuous mode [ 86.036717][ T5842] hsr_slave_1: entered promiscuous mode [ 86.042955][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 86.048881][ T5842] Cannot create hsr debugfs directory [ 86.108717][ T5836] hsr_slave_0: entered promiscuous mode [ 86.115203][ T5836] hsr_slave_1: entered promiscuous mode [ 86.122348][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 86.128332][ T5836] Cannot create hsr debugfs directory [ 86.197378][ T5835] hsr_slave_0: entered promiscuous mode [ 86.204178][ T5835] hsr_slave_1: entered promiscuous mode [ 86.211613][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 86.217790][ T5835] Cannot create hsr debugfs directory [ 86.714393][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.727615][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.757706][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.769931][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.853548][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.871177][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.904296][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.919584][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.018561][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.045728][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.080096][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.144173][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.309719][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.358491][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.398279][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.430689][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.456638][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.521533][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.540543][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.562217][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.569659][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.598800][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.606412][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.623896][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.654067][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.672556][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.679872][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.722734][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.729954][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.757320][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.788980][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.796337][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.826431][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.833611][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.956218][ T5844] Bluetooth: hci2: command tx timeout [ 87.962051][ T5844] Bluetooth: hci3: command tx timeout [ 87.967722][ T51] Bluetooth: hci0: command tx timeout [ 88.036613][ T5844] Bluetooth: hci1: command tx timeout [ 88.050806][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.091169][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.150597][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.157797][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.199912][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.207207][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.433991][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.569250][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.607095][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.628625][ T5834] veth0_vlan: entered promiscuous mode [ 88.670937][ T5834] veth1_vlan: entered promiscuous mode [ 88.748592][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.782686][ T5835] veth0_vlan: entered promiscuous mode [ 88.817124][ T5835] veth1_vlan: entered promiscuous mode [ 88.824452][ T5836] veth0_vlan: entered promiscuous mode [ 88.862280][ T5834] veth0_macvtap: entered promiscuous mode [ 88.871690][ T5836] veth1_vlan: entered promiscuous mode [ 88.883787][ T5834] veth1_macvtap: entered promiscuous mode [ 88.913631][ T5842] veth0_vlan: entered promiscuous mode [ 88.948116][ T5835] veth0_macvtap: entered promiscuous mode [ 88.957957][ T5842] veth1_vlan: entered promiscuous mode [ 88.975168][ T5835] veth1_macvtap: entered promiscuous mode [ 88.992045][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.020640][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.054421][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.072862][ T5842] veth0_macvtap: entered promiscuous mode [ 89.080292][ T3500] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.090874][ T3500] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.109930][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.120950][ T3500] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.130350][ T3500] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.152761][ T3500] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.165169][ T5842] veth1_macvtap: entered promiscuous mode [ 89.177756][ T5836] veth0_macvtap: entered promiscuous mode [ 89.186953][ T3500] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.197067][ T3500] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.221961][ T5836] veth1_macvtap: entered promiscuous mode [ 89.229504][ T3500] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.276989][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.313241][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.324353][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.364070][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.417235][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.428796][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.457376][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.467159][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.486559][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.494524][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.526095][ T3500] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.535019][ T3500] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.549444][ T3500] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.571088][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.579575][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.595032][ T3500] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.689824][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.697988][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.713757][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.735736][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.800340][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.820319][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.891025][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.906562][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.914771][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.039235][ T5844] Bluetooth: hci0: command tx timeout [ 90.039256][ T5158] Bluetooth: hci2: command tx timeout [ 90.039286][ T5158] Bluetooth: hci3: command tx timeout [ 90.097258][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.110002][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.126799][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.134971][ T5158] Bluetooth: hci1: command tx timeout [ 90.135363][ T5925] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.142884][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.242146][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 90.478841][ T5932] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4'. [ 90.497755][ T5931] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 91.082001][ T5953] sctp: [Deprecated]: syz.3.11 (pid 5953) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.082001][ T5953] Use struct sctp_sack_info instead [ 91.178697][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 91.194115][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 91.768952][ T5979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27'. [ 91.789098][ T5979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27'. [ 92.115586][ T5158] Bluetooth: hci0: command tx timeout [ 92.115867][ T51] Bluetooth: hci2: command tx timeout [ 92.121730][ T5158] Bluetooth: hci3: command tx timeout [ 92.196616][ T5158] Bluetooth: hci1: command tx timeout [ 93.277085][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.451380][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 93.469819][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.490617][ T10] usb 1-1: config 0 descriptor?? [ 93.505440][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.514871][ T10] gspca_main: spca508-2.14.0 probing 8086:0110 [ 93.675455][ T5904] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.683277][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 93.694629][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 93.710035][ T10] gspca_spca508: reg_read err -32 [ 93.722272][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 93.733168][ T10] gspca_spca508: reg_read err -32 [ 93.739737][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.750202][ T9] usb 3-1: Product: syz [ 93.754609][ T9] usb 3-1: Manufacturer: syz [ 93.761353][ T9] usb 3-1: SerialNumber: syz [ 93.776736][ T9] usb 3-1: config 0 descriptor?? [ 93.788627][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 93.851229][ T5904] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 93.862909][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.873209][ T5904] usb 2-1: Product: syz [ 93.878373][ T5904] usb 2-1: Manufacturer: syz [ 93.883256][ T5904] usb 2-1: SerialNumber: syz [ 93.913051][ T5904] usb 2-1: config 0 descriptor?? [ 93.929557][ T5904] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 93.950308][ T10] gspca_spca508: reg_read err -71 [ 93.970060][ T10] gspca_spca508: reg_read err -71 [ 93.986553][ T10] gspca_spca508: reg write: error -71 [ 94.001708][ T10] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 94.031449][ T10] usb 1-1: USB disconnect, device number 2 [ 94.146973][ T6051] netlink: 'syz.3.59': attribute type 83 has an invalid length. [ 94.408913][ T9] gspca_zc3xx: reg_w_i err -71 [ 94.751216][ T5904] gspca_sunplus: reg_r err -71 [ 94.762406][ T5904] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 94.779581][ T5904] usb 2-1: USB disconnect, device number 2 [ 95.015385][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 95.021918][ T9] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 95.036367][ T9] usb 3-1: USB disconnect, device number 2 [ 95.179069][ T6064] netlink: 104 bytes leftover after parsing attributes in process `syz.2.65'. [ 95.761151][ T6082] can0: slcan on ttyS3. [ 95.849848][ T6087] can0 (unregistered): slcan off ttyS3. [ 97.150750][ T6146] input: syz0 as /devices/virtual/input/input5 [ 97.237274][ T42] cfg80211: failed to load regulatory.db [ 97.481691][ T6161] Cache volume key already in use (9p,(null),) [ 98.225951][ T6184] netlink: 400 bytes leftover after parsing attributes in process `syz.0.109'. [ 98.325866][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 98.365952][ T5158] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 98.589607][ T6196] loop2: detected capacity change from 0 to 7 [ 98.626381][ T5847] Dev loop2: unable to read RDB block 7 [ 98.635649][ T5847] loop2: unable to read partition table [ 98.641780][ T5847] loop2: partition table beyond EOD, truncated [ 98.695492][ T6196] Dev loop2: unable to read RDB block 7 [ 98.701766][ T6196] loop2: unable to read partition table [ 98.715680][ T6196] loop2: partition table beyond EOD, truncated [ 98.767326][ T6196] loop_reread_partitions: partition scan of loop2 (賫x ) failed (rc=-5) [ 98.866021][ T6205] capability: warning: `syz.0.118' uses 32-bit capabilities (legacy support in use) [ 99.335505][ T42] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 99.530338][ T42] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 99.546281][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.556167][ T42] usb 1-1: Product: syz [ 99.560470][ T42] usb 1-1: Manufacturer: syz [ 99.567974][ T42] usb 1-1: SerialNumber: syz [ 99.588432][ T42] usb 1-1: config 0 descriptor?? [ 99.836705][ T6226] process 'syz.2.129' launched './file0' with NULL argv: empty string added [ 99.883305][ T5837] usb 1-1: USB disconnect, device number 3 [ 100.002832][ T6230] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.553553][ T6247] netlink: 'syz.0.139': attribute type 16 has an invalid length. [ 100.584780][ T6247] netlink: 'syz.0.139': attribute type 2 has an invalid length. [ 100.607859][ T6247] netlink: 'syz.0.139': attribute type 2 has an invalid length. [ 100.636708][ T6247] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.139'. [ 101.425844][ T5837] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.608945][ T5837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.625515][ T5837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.663354][ T5837] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 101.685614][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.708382][ T5837] usb 1-1: config 0 descriptor?? [ 101.752870][ T6286] syz.3.158 uses obsolete (PF_INET,SOCK_PACKET) [ 101.915832][ T42] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.075468][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 102.098295][ T42] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 102.115961][ T42] usb 2-1: config 0 has no interface number 0 [ 102.126257][ T42] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 102.144204][ T5837] logitech 0003:046D:C298.0001: item fetching failed at offset 5/7 [ 102.153348][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.172985][ T42] usb 2-1: Product: syz [ 102.178547][ T5837] logitech 0003:046D:C298.0001: parse failed [ 102.184686][ T5837] logitech 0003:046D:C298.0001: probe with driver logitech failed with error -22 [ 102.204810][ T42] usb 2-1: Manufacturer: syz [ 102.215791][ T42] usb 2-1: SerialNumber: syz [ 102.245611][ T42] usb 2-1: config 0 descriptor?? [ 102.259827][ T42] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 102.323471][ T6296] netlink: 'syz.2.163': attribute type 22 has an invalid length. [ 102.367602][ T6296] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.163'. [ 102.374319][ T5837] usb 1-1: USB disconnect, device number 4 [ 102.479610][ T42] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 102.509132][ T42] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 102.899122][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 102.908153][ T42] usb 2-1: USB disconnect, device number 3 [ 102.936482][ T42] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 102.959391][ T42] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 102.992508][ T42] quatech2 2-1:0.51: device disconnected [ 103.237395][ T6315] block nbd0: Unsupported socket: should be TCP or UNIX. [ 104.781047][ T6370] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 105.792693][ T6413] loop9: detected capacity change from 0 to 7 [ 105.834228][ T6413] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.858459][ T6413] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.884085][ T6413] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.916501][ T6413] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.928387][ T6413] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.938366][ T6413] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.967728][ T6413] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.969250][ T6423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.978558][ T6413] ldm_validate_partition_table(): Disk read failed. [ 105.994498][ T6413] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.002971][ T6413] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.017424][ T6413] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.028067][ T6413] Dev loop9: unable to read RDB block 0 [ 106.033787][ T6413] loop9: unable to read partition table [ 106.048874][ T6413] loop9: partition table beyond EOD, truncated [ 106.065444][ T6413] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 106.065444][ T6413] ) failed (rc=-5) [ 106.592997][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 106.646377][ T5904] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.655773][ T42] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.807323][ T5904] usb 1-1: config 0 has an invalid interface number: 229 but max is 0 [ 106.815911][ T5904] usb 1-1: config 0 has no interface number 0 [ 106.825457][ T5904] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 106.835779][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 106.841178][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.847684][ T42] usb 2-1: unable to get BOS descriptor or descriptor too short [ 106.863601][ T5904] usb 1-1: config 0 descriptor?? [ 106.875529][ T42] usb 2-1: config 4 has an invalid interface number: 101 but max is 0 [ 106.885467][ T42] usb 2-1: config 4 has no interface number 0 [ 106.892920][ T42] usb 2-1: config 4 interface 101 has no altsetting 0 [ 106.912125][ T42] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=a5.52 [ 106.926261][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.934896][ T42] usb 2-1: Product: syz [ 106.941786][ T42] usb 2-1: Manufacturer: syz [ 106.947854][ T42] usb 2-1: SerialNumber: syz [ 106.983627][ T6457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.116594][ T5904] usb 1-1: USB disconnect, device number 5 [ 107.202394][ T42] ttusbir 2-1:4.101: cannot find expected altsetting [ 107.257050][ T42] usb 2-1: USB disconnect, device number 4 [ 107.535188][ T6472] netlink: 'syz.2.248': attribute type 10 has an invalid length. [ 107.553386][ T6472] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 107.745182][ T6479] netlink: 830 bytes leftover after parsing attributes in process `syz.0.251'. [ 107.781351][ T6479] netlink: 830 bytes leftover after parsing attributes in process `syz.0.251'. [ 107.799667][ T6479] Zero length message leads to an empty skb [ 108.102234][ T6493] team0: No ports can be present during mode change [ 108.481246][ T6506] input: syz0 as /devices/virtual/input/input9 [ 108.549633][ T6510] overlayfs: workdir and upperdir must reside under the same mount [ 108.825432][ T5837] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.987195][ T5837] usb 3-1: Using ep0 maxpacket: 16 [ 109.025727][ T5837] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 109.045527][ T5837] usb 3-1: config 1 has no interface number 0 [ 109.054035][ T5837] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 109.068525][ T5837] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 109.109403][ T5837] usb 3-1: config 1 interface 105 has no altsetting 0 [ 109.149641][ T5837] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 109.166688][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.192290][ T5837] usb 3-1: Product: syz [ 109.206712][ T5837] usb 3-1: Manufacturer: syz [ 109.211547][ T5837] usb 3-1: SerialNumber: syz [ 109.242511][ T6511] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.260748][ T6511] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.704106][ T6511] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.715971][ T6511] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.744447][ T6544] netlink: 'syz.1.282': attribute type 21 has an invalid length. [ 109.752972][ T6544] netlink: 156 bytes leftover after parsing attributes in process `syz.1.282'. [ 109.778622][ T6544] netlink: 'syz.1.282': attribute type 21 has an invalid length. [ 109.800549][ T6544] netlink: 156 bytes leftover after parsing attributes in process `syz.1.282'. [ 110.157569][ T5837] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 110.180725][ T5837] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 110.194498][ T5837] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 110.254998][ T5837] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 0e:41:7d:56:01:bd [ 110.297966][ T5837] usb 3-1: USB disconnect, device number 3 [ 110.317666][ T5837] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 110.385411][ T5904] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.436873][ T5837] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 110.447491][ T5837] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 110.458815][ T5837] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 110.536693][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 110.548659][ T5904] usb 2-1: config 0 has no interfaces? [ 110.564480][ T5904] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 110.579451][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.592883][ T5904] usb 2-1: config 0 descriptor?? [ 110.615428][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 110.759339][ T29] audit: type=1326 audit(1769511496.592:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab0d9aeb9 code=0x7ffc0000 [ 110.785353][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 110.797510][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.836090][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.845927][ T29] audit: type=1326 audit(1769511496.612:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab0d9aeb9 code=0x7ffc0000 [ 110.845981][ T29] audit: type=1326 audit(1769511496.622:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6ab0d9aeb9 code=0x7ffc0000 [ 110.846023][ T29] audit: type=1326 audit(1769511496.622:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6ab0d9ac22 code=0x7ffc0000 [ 110.846067][ T29] audit: type=1326 audit(1769511496.622:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6ab0d9ac22 code=0x7ffc0000 [ 110.846107][ T29] audit: type=1326 audit(1769511496.622:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab0d9aeb9 code=0x7ffc0000 [ 110.846148][ T29] audit: type=1326 audit(1769511496.622:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab0d9aeb9 code=0x7ffc0000 [ 110.846189][ T29] audit: type=1326 audit(1769511496.622:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ab0d5b78e code=0x7ffc0000 [ 110.846233][ T29] audit: type=1326 audit(1769511496.622:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab0d9aeb9 code=0x7ffc0000 [ 110.846276][ T29] audit: type=1326 audit(1769511496.632:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6ab0d9aeb9 code=0x7ffc0000 [ 111.036229][ T1211] usb 2-1: USB disconnect, device number 5 [ 111.079593][ T6570] Bluetooth: MGMT ver 1.23 [ 111.141954][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.165704][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.199317][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.223824][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.232224][ T6572] IPVS: persistence engine module ip_vs_pe_ not found [ 111.455173][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 111.465453][ T9] usbtmc 1-1:16.0: can't read capabilities [ 111.614003][ T6585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 111.698472][ T5904] usb 1-1: USB disconnect, device number 6 [ 111.816021][ T6587] batadv_slave_1: entered promiscuous mode [ 111.823883][ T6586] batadv_slave_1: left promiscuous mode [ 112.002064][ T6596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.485463][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 112.648123][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.657961][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 112.667662][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.683272][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 112.692660][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 112.700960][ T9] usb 2-1: Product: syz [ 112.705514][ T9] usb 2-1: Manufacturer: syz [ 112.712016][ T9] usb 2-1: SerialNumber: syz [ 112.933962][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 113.160781][ T5904] usb 2-1: USB disconnect, device number 6 [ 113.185256][ T5904] usblp0: removed [ 113.193481][ T6622] capability: warning: `syz.3.317' uses deprecated v2 capabilities in a way that may be insecure [ 114.076204][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'. [ 114.797327][ T6668] mmap: syz.3.333 (6668) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.826502][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'. [ 114.859007][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'. [ 115.585387][ T5904] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.775419][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 115.802440][ T5904] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.819719][ T5904] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.846681][ T5904] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.856698][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.875762][ T5904] usb 4-1: Product: syz [ 115.880107][ T5904] usb 4-1: Manufacturer: syz [ 115.890261][ T5904] usb 4-1: SerialNumber: syz [ 116.114761][ T5904] usb 4-1: 0:2 : does not exist [ 116.131998][ T5904] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 116.251304][ T5904] usb 4-1: USB disconnect, device number 2 [ 116.277428][ T5158] Bluetooth: hci1: command 0x0406 tx timeout [ 116.349920][ T6560] udevd[6560]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.455484][ T42] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.489256][ T6720] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.605420][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 116.624539][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.645002][ T42] usb 3-1: config 0 has no interfaces? [ 116.654138][ T42] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 116.664197][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.704085][ T42] usb 3-1: config 0 descriptor?? [ 116.945073][ T42] usb 3-1: USB disconnect, device number 4 [ 117.127487][ T6747] netlink: 88 bytes leftover after parsing attributes in process `syz.1.376'. [ 117.139270][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 117.454593][ T6761] netlink: 116 bytes leftover after parsing attributes in process `syz.0.383'. [ 117.495485][ T6761] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 119.669111][ T6836] dvmrp1: entered allmulticast mode [ 119.698978][ T6836] dvmrp1: left allmulticast mode [ 120.365622][ T6854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.424'. [ 120.560364][ T6859] netlink: 56 bytes leftover after parsing attributes in process `syz.3.427'. [ 121.717423][ T6900] : entered promiscuous mode [ 122.228399][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 122.228419][ T29] audit: type=1326 audit(1769511508.062:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.3.455" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa472f9aeb9 code=0x0 [ 123.337020][ T6969] warning: `syz.0.477' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.612652][ T6978] input: syz1 as /devices/virtual/input/input11 [ 123.853762][ T6984] netlink: 36 bytes leftover after parsing attributes in process `syz.3.483'. [ 123.884042][ T6984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.483'. [ 123.914804][ T6988] netlink: 64 bytes leftover after parsing attributes in process `syz.2.486'. [ 124.028122][ T6992] kernel read not supported for file /file1 (pid: 6992 comm: syz.1.496) [ 124.048046][ T29] audit: type=1800 audit(1769511509.872:15): pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.496" name="file1" dev="mqueue" ino=15411 res=0 errno=0 [ 124.635916][ T7012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.513175][ T7045] netlink: 36 bytes leftover after parsing attributes in process `syz.1.513'. [ 125.526464][ T7045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.513'. [ 127.265625][ T7102] binder: 7101:7102 ioctl 400c620e 0 returned -14 [ 127.686062][ T42] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.874021][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 127.899552][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 127.906703][ T1211] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 127.954088][ T42] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 127.973932][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.997772][ T42] usb 1-1: Product: syz [ 128.002085][ T42] usb 1-1: Manufacturer: syz [ 128.014337][ T42] usb 1-1: SerialNumber: syz [ 128.081605][ T42] usb 1-1: config 0 descriptor?? [ 128.101497][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.126888][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.148101][ T1211] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 128.157640][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.178247][ T1211] usb 2-1: config 0 descriptor?? [ 128.217992][ T1211] hub 2-1:0.0: USB hub found [ 128.402268][ T1211] hub 2-1:0.0: 1 port detected [ 128.475362][ T5922] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 128.530318][ T42] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 128.654386][ T5922] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.690921][ T5922] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.732125][ T5922] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 128.768389][ T5922] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.785498][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.824899][ T5922] usb 3-1: Product: syz [ 128.832720][ T5922] usb 3-1: Manufacturer: syz [ 128.845379][ T5922] usb 3-1: SerialNumber: syz [ 128.865346][ T7133] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 128.889342][ T5922] cdc_mbim 3-1:1.0: skipping garbage [ 128.944113][ T42] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 128.971698][ T42] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 129.024753][ T42] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 129.064566][ T42] usb 1-1: USB disconnect, device number 7 [ 129.245437][ T5921] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.417703][ T5921] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.439266][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 129.468920][ T5921] usb 4-1: config 1 has no interface number 0 [ 129.485731][ T5921] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.505873][ T1211] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 129.512950][ T1211] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 129.536099][ T5921] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.549074][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 129.557887][ T5921] usb 4-1: Product: syz [ 129.562370][ T5921] usb 4-1: SerialNumber: syz [ 129.569872][ T1211] usbhid 2-1:0.0: can't add hid device: -32 [ 129.576241][ T1211] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 129.616053][ T5921] cdc_ncm 4-1:1.1: skipping garbage [ 129.621360][ T5921] usb 4-1: selecting invalid altsetting 1 [ 129.629882][ T1211] usb 2-1: USB disconnect, device number 7 [ 129.737368][ T5922] cdc_mbim 3-1:1.0: bind() failure [ 129.758862][ T5922] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 129.779067][ T5922] cdc_ncm 3-1:1.1: bind() failure [ 129.824184][ T5922] usb 3-1: USB disconnect, device number 5 [ 130.224327][ T5921] cdc_ncm 4-1:1.1: SET_CRC_MODE failed [ 130.235912][ T5921] cdc_ncm 4-1:1.1: SET_NTB_FORMAT failed [ 130.264581][ T5921] usb 4-1: selecting invalid altsetting 1 [ 130.281596][ T5921] cdc_ncm 4-1:1.1: bind() failure [ 130.312713][ T5921] usb 4-1: USB disconnect, device number 3 [ 130.553321][ T7176] loop5: detected capacity change from 0 to 7 [ 130.569706][ T7176] Dev loop5: unable to read RDB block 7 [ 130.579411][ T7176] loop5: AHDI p1 p2 [ 130.583378][ T7176] loop5: partition table partially beyond EOD, truncated [ 130.598590][ T7176] loop5: p1 start 1702000233 is beyond EOD, truncated [ 130.851197][ T7181] binder: 7180:7181 ioctl c018620c 200000000340 returned -1 [ 131.102568][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.566'. [ 131.115419][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 131.269169][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 131.296472][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.319914][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.356157][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 131.386181][ T9] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 131.398094][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.411231][ T9] usb 2-1: config 0 descriptor?? [ 131.796438][ T5904] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.886881][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input12 [ 131.970245][ T5904] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.982357][ T9] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 131.995109][ T5904] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 132.007782][ T9] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 132.019677][ T5904] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 132.033281][ T5904] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 132.044534][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.061945][ T7204] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 132.071929][ T7183] random: crng reseeded on system resumption [ 132.109122][ T10] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 132.133149][ T10] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 132.158809][ T9] usb 2-1: USB disconnect, device number 8 [ 132.168800][ T10] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 132.213203][ T10] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 132.219883][ T7212] ======================================================= [ 132.219883][ T7212] WARNING: The mand mount option has been deprecated and [ 132.219883][ T7212] and is ignored by this kernel. Remove the mand [ 132.219883][ T7212] option from the mount to silence this warning. [ 132.219883][ T7212] ======================================================= [ 132.326652][ T7212] overlay: filesystem on ./file0 not supported as upperdir [ 133.096026][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.104706][ T5904] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 133.105838][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.129825][ T5904] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input13 [ 133.256092][ T5904] usb 4-1: USB disconnect, device number 4 [ 133.262033][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 133.482365][ T7237] binder: 7236:7237 ioctl 40046205 0 returned -22 [ 133.977856][ T7248] Attempt to restore checkpoint with obsolete wellknown handles [ 137.864002][ T7357] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.644'. [ 139.251118][ T7409] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 139.788441][ T7436] program syz.2.683 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.939124][ T7441] netlink: 'syz.2.684': attribute type 83 has an invalid length. [ 140.324610][ T7455] kvm: apic: phys broadcast and lowest prio [ 140.862417][ T77] Bluetooth: hci4: Frame reassembly failed (-84) [ 140.959832][ T7483] kvm: kvm [7482]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x2a [ 141.055383][ T5904] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 141.236953][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 141.248126][ T5904] usb 3-1: config 0 has an invalid interface number: 135 but max is 0 [ 141.268186][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.285437][ T5904] usb 3-1: config 0 has no interface number 0 [ 141.298478][ T5904] usb 3-1: config 0 interface 135 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 141.325343][ T5904] usb 3-1: config 0 interface 135 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 0 [ 141.352707][ T5904] usb 3-1: config 0 interface 135 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.365386][ T29] audit: type=1326 audit(1769511527.192:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.0.712" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75b5d9aeb9 code=0x0 [ 141.370372][ T5904] usb 3-1: config 0 interface 135 has no altsetting 0 [ 141.400185][ T5904] usb 3-1: New USB device found, idVendor=0f11, idProduct=1011, bcdDevice=49.1a [ 141.409516][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.417931][ T5904] usb 3-1: Product: syz [ 141.422208][ T5904] usb 3-1: Manufacturer: syz [ 141.430610][ T5904] usb 3-1: SerialNumber: syz [ 141.440462][ T5904] usb 3-1: config 0 descriptor?? [ 141.450806][ T5904] ldusb 3-1:0.135: Interrupt in endpoint not found [ 141.482400][ T7504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.713'. [ 141.544405][ T7506] input: syz1 as /devices/virtual/input/input14 [ 141.701282][ T24] usb 3-1: USB disconnect, device number 6 [ 142.587310][ T7529] netlink: 16 bytes leftover after parsing attributes in process `syz.0.726'. [ 142.693051][ T7532] block nbd2: NBD_DISCONNECT [ 142.915422][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 143.235679][ T5904] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 143.396968][ T5904] usb 3-1: device descriptor read/64, error -71 [ 143.450104][ T7566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.744'. [ 143.460160][ T7565] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.743' sets config #0 [ 143.471745][ T7566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.744'. [ 143.505593][ T7565] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.743' sets config #1 [ 143.512777][ T7568] netlink: 128 bytes leftover after parsing attributes in process `syz.3.745'. [ 143.637897][ T5904] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 143.797702][ T5904] usb 3-1: device descriptor read/64, error -71 [ 143.916411][ T5904] usb usb3-port1: attempt power cycle [ 144.045751][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 144.210285][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 144.234991][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.244540][ T10] usb 1-1: Product: syz [ 144.253943][ T10] usb 1-1: Manufacturer: syz [ 144.258865][ T10] usb 1-1: SerialNumber: syz [ 144.265517][ T5904] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 144.298509][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 144.316199][ T5904] usb 3-1: device descriptor read/8, error -71 [ 144.339439][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 144.575424][ T5904] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 144.597826][ T5904] usb 3-1: device descriptor read/8, error -71 [ 144.685102][ T7601] sp0: Synchronizing with TNC [ 144.707567][ T5904] usb usb3-port1: unable to enumerate USB device [ 144.963820][ T24] usb 1-1: USB disconnect, device number 8 [ 145.556371][ T9] usb 1-1: Service connection timeout for: 256 [ 145.569830][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 145.597341][ T9] ath9k_htc: Failed to initialize the device [ 145.616964][ T24] usb 1-1: ath9k_htc: USB layer deinitialized [ 145.743749][ T29] audit: type=1326 audit(1769511531.572:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7631 comm="syz.0.775" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75b5d9aeb9 code=0x0 [ 146.219656][ T7649] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 146.231618][ T7649] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 146.240074][ T7649] CPU: 0 UID: 0 PID: 7649 Comm: syz.2.783 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.251049][ T7649] Tainted: [L]=SOFTLOCKUP [ 146.255423][ T7649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 146.265597][ T7649] RIP: 0010:__queue_work+0xa2/0xf90 [ 146.270842][ T7649] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 146.290660][ T7649] RSP: 0018:ffffc90003817418 EFLAGS: 00010002 [ 146.296762][ T7649] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000080000 [ 146.304772][ T7649] RDX: ffffc9000d957000 RSI: 00000000000001c0 RDI: 00000000000001c1 [ 146.312786][ T7649] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 146.320809][ T7649] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 146.328908][ T7649] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 146.337002][ T7649] FS: 00007f6ab1ba16c0(0000) GS:ffff888125063000(0000) knlGS:0000000000000000 [ 146.345966][ T7649] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.352566][ T7649] CR2: 00007fd750dabb40 CR3: 000000007e42c000 CR4: 00000000003526f0 [ 146.360553][ T7649] Call Trace: [ 146.363840][ T7649] [ 146.366775][ T7649] ? __asan_memcpy+0x40/0x70 [ 146.371385][ T7649] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 146.377633][ T7649] queue_work_on+0x106/0x1d0 [ 146.382244][ T7649] puts_queue+0xa3/0xe0 [ 146.386403][ T7649] ? __pfx_puts_queue+0x10/0x10 [ 146.391262][ T7649] k_fn+0x7c/0xd0 [ 146.394898][ T7649] k_pad+0x79a/0xa90 [ 146.398799][ T7649] ? lock_acquire+0x106/0x330 [ 146.403484][ T7649] ? atomic_notifier_call_chain+0x26/0x180 [ 146.409302][ T7649] ? __pfx_k_pad+0x10/0x10 [ 146.413722][ T7649] ? atomic_notifier_call_chain+0x26/0x180 [ 146.419554][ T7649] ? atomic_notifier_call_chain+0x26/0x180 [ 146.425377][ T7649] kbd_event+0x2ec1/0x40d0 [ 146.429803][ T7649] ? __pfx_kbd_event+0x10/0x10 [ 146.434583][ T7649] ? finish_task_switch+0x240/0x920 [ 146.439870][ T7649] ? lockdep_hardirqs_on+0x7a/0x110 [ 146.445074][ T7649] ? __lock_acquire+0x6b5/0x2cf0 [ 146.450015][ T7649] ? __lock_acquire+0x6b5/0x2cf0 [ 146.454961][ T7649] ? __lock_acquire+0x6b5/0x2cf0 [ 146.459901][ T7649] ? __lock_acquire+0x6b5/0x2cf0 [ 146.464849][ T7649] ? __lock_acquire+0x6b5/0x2cf0 [ 146.469798][ T7649] ? input_pass_values+0x8d/0x890 [ 146.474826][ T7649] ? lock_acquire+0x106/0x330 [ 146.479506][ T7649] ? input_pass_values+0x8d/0x890 [ 146.484538][ T7649] input_handle_events_default+0xd4/0x1a0 [ 146.490262][ T7649] ? input_pass_values+0x8d/0x890 [ 146.495462][ T7649] input_pass_values+0x288/0x890 [ 146.500410][ T7649] ? input_handle_event+0x70c/0xf30 [ 146.505623][ T7649] input_event_dispose+0x330/0x6b0 [ 146.510747][ T7649] input_inject_event+0x1dd/0x340 [ 146.515800][ T7649] ? input_inject_event+0xb6/0x340 [ 146.520918][ T7649] evdev_write+0x325/0x4c0 [ 146.525346][ T7649] ? __lock_acquire+0x6b5/0x2cf0 [ 146.530307][ T7649] ? __pfx_evdev_write+0x10/0x10 [ 146.535255][ T7649] ? bpf_lsm_file_permission+0x9/0x20 [ 146.540642][ T7649] ? security_file_permission+0x75/0x260 [ 146.546372][ T7649] ? rw_verify_area+0x255/0x4d0 [ 146.551233][ T7649] ? __pfx_evdev_write+0x10/0x10 [ 146.556264][ T7649] vfs_write+0x29a/0xb90 [ 146.560701][ T7649] ? __pfx_vfs_write+0x10/0x10 [ 146.565559][ T7649] ? __fget_files+0x2a/0x420 [ 146.570183][ T7649] ? __fget_files+0x2a/0x420 [ 146.574899][ T7649] ? __fget_files+0x3a0/0x420 [ 146.579692][ T7649] ? __fget_files+0x2a/0x420 [ 146.584307][ T7649] ksys_write+0x150/0x270 [ 146.588741][ T7649] ? __pfx_ksys_write+0x10/0x10 [ 146.594294][ T7649] do_syscall_64+0xe2/0xf80 [ 146.599427][ T7649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.605680][ T7649] ? trace_irq_disable+0x37/0x100 [ 146.610727][ T7649] ? clear_bhb_loop+0x40/0x90 [ 146.615676][ T7649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.621574][ T7649] RIP: 0033:0x7f6ab0d9aeb9 [ 146.626123][ T7649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.646027][ T7649] RSP: 002b:00007f6ab1ba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 146.654481][ T7649] RAX: ffffffffffffffda RBX: 00007f6ab1015fa0 RCX: 00007f6ab0d9aeb9 [ 146.662474][ T7649] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 146.670456][ T7649] RBP: 00007f6ab0e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 146.678432][ T7649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.686422][ T7649] R13: 00007f6ab1016038 R14: 00007f6ab1015fa0 R15: 00007ffd0cc37488 [ 146.694403][ T7649] [ 146.697423][ T7649] Modules linked in: [ 146.701415][ T7649] ---[ end trace 0000000000000000 ]--- [ 146.706958][ T7649] RIP: 0010:__queue_work+0xa2/0xf90 [ 146.712177][ T7649] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 146.731963][ T7649] RSP: 0018:ffffc90003817418 EFLAGS: 00010002 [ 146.738040][ T7649] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000080000 [ 146.746016][ T7649] RDX: ffffc9000d957000 RSI: 00000000000001c0 RDI: 00000000000001c1 [ 146.753997][ T7649] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 146.762058][ T7649] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 146.770039][ T7649] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 146.778023][ T7649] FS: 00007f6ab1ba16c0(0000) GS:ffff888125063000(0000) knlGS:0000000000000000 [ 146.786958][ T7649] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.793543][ T7649] CR2: 00007fd750dabb40 CR3: 000000007e42c000 CR4: 00000000003526f0 [ 146.801524][ T7649] Kernel panic - not syncing: Fatal exception [ 146.807746][ T7649] Kernel Offset: disabled [ 146.812065][ T7649] Rebooting in 86400 seconds..