last executing test programs: 1m21.714077606s ago: executing program 2 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%pS \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m6.47061826s ago: executing program 2 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%pS \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 52.861395452s ago: executing program 2 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%pS \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 35.351686163s ago: executing program 2 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%pS \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 19.991022539s ago: executing program 2 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%pS \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 7.807076402s ago: executing program 2 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%pS \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4.849227934s ago: executing program 0 (id=1003): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 4.460401338s ago: executing program 1 (id=1008): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x25}, @initr0, @exit, @alu={0x7, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syz_tun\x00', @multicast}) 3.752609801s ago: executing program 0 (id=1013): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.472462107s ago: executing program 0 (id=1015): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.352669066s ago: executing program 0 (id=1017): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xb, 0x20000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x80c1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 3.240944392s ago: executing program 0 (id=1018): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x2d2}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x39000000, 0x0, 0x0, 0x0) 3.07685847s ago: executing program 0 (id=1020): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x63, 0xe1, 0xd8, 0x8, 0x10b8, 0x1bb2, 0xc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x6, 0xe0, 0x7, [{{0x9, 0x4, 0xf5, 0x0, 0x1, 0x92, 0xd0, 0x15, 0x7, [], [{{0x9, 0x5, 0x3, 0xc, 0x8, 0xaf, 0x9, 0x4}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ecm(0x2, 0x62, &(0x7f0000001640)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x2, 0x50, 0x4f, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x9, 0xe, 0x7f}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x262c, 0x8, 0x2, 0x6, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xb, 0x4, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x2, 0x7, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xb, 0xf, 0x1}}}}}]}}]}}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x401}}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000001c00)={0x14, 0x0, &(0x7f0000001bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r1, &(0x7f0000002380)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, &(0x7f0000002340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x51, 0x5c, 0x6, 0x9, 0x6, 0x1, 0x1ff}}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000002bc0)={0x1c, &(0x7f0000002ac0)={0x0, 0x17, 0x4, "eb944c04"}, 0x0, 0x0}) 2.836265058s ago: executing program 3 (id=1023): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x8, @mcast1, 0x20000004, 0x3}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000140)={@remote, @empty}, 0xc) 2.359208767s ago: executing program 4 (id=1027): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x2, 0x4, 0x222c, 0xfffffffffffffffe}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000480)=ANY=[@ANYRES32=r2], 0x103) 2.186863367s ago: executing program 1 (id=1028): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="20181a000000fdbbf262d3f4d045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000300)={0x20, 0x8, 0x13, "9be0ab3ee0985669915247dfb53ad30c6aa290"}, 0x0, 0x0, 0x0, 0x0}) 2.186635618s ago: executing program 3 (id=1029): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) lseek(r0, 0x2004, 0x0) 1.628370018s ago: executing program 3 (id=1030): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000001200)="6dd8eed1e34ae4f2a2", 0x9}, 0x1, 0x0, 0x0, 0x8004}, 0x0) read(r0, &(0x7f0000005500)=""/4096, 0x1000) 1.551809213s ago: executing program 3 (id=1031): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x6) close(r0) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2021, 0x3, &(0x7f00005c0000/0x2000)=nil) 1.550271047s ago: executing program 1 (id=1032): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b717"], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x18, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x80) 1.341137179s ago: executing program 4 (id=1033): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00000000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000009c0)='mem_connect\x00', r1}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r2, 0x25, 0x4, @void}, 0x10) 1.338325716s ago: executing program 3 (id=1034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x58, 0x2, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT={0x34, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @mcast2}}}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8091}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 1.242219153s ago: executing program 4 (id=1035): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}], 0x2}}], 0x2, 0x10, 0x0) 1.129565176s ago: executing program 4 (id=1036): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r0, 0x2, 0x0, 0x7, &(0x7f0000002b00)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.029858445s ago: executing program 3 (id=1037): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000600)=[{0x7, 0x211, 0x0, 0x0}, {0x8, 0x4021, 0x0, 0x0}], 0x2}) 1.024760069s ago: executing program 4 (id=1038): r0 = inotify_init1(0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xd0000121) inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0xa4000061) open(&(0x7f0000000000)='./file0\x00', 0x100000, 0xa0) 862.907472ms ago: executing program 1 (id=1039): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x40005, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000080071000040"]) 827.345533ms ago: executing program 1 (id=1040): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 695.067627ms ago: executing program 4 (id=1041): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000540b4550182195f57584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x11, "4b802cef364df3f249399395ab8b6ca3c6"}, 0x0}) 0s ago: executing program 1 (id=1042): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x40d, 0x4, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x8, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}]}, 0x38}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) kernel console output (not intermixed with test programs): can0 (unregistered): slcan off ttyS3. [ 93.836548][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 93.861445][ T5893] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 93.890891][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.914032][ T5892] usb 3-1: USB disconnect, device number 2 [ 94.058732][ T5893] usb 5-1: config 0 descriptor?? [ 94.169971][ T5975] fido_id[5975]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 94.281058][ T5893] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 94.342483][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 94.403371][ T5893] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 94.459493][ T5987] netlink: 14 bytes leftover after parsing attributes in process `syz.1.17'. [ 94.475179][ T5893] usb 5-1: media controller created [ 94.619148][ T5990] capability: warning: `syz.3.18' uses deprecated v2 capabilities in a way that may be insecure [ 94.636578][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.893632][ T5997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20'. [ 94.898654][ T5999] netlink: 'syz.3.21': attribute type 1 has an invalid length. [ 94.912536][ T5997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20'. [ 94.924528][ T5999] netlink: 56 bytes leftover after parsing attributes in process `syz.3.21'. [ 95.005985][ T5987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.046706][ T5893] az6027: usb out operation failed. (-71) [ 95.068029][ T5893] stb0899_attach: Driver disabled by Kconfig [ 95.090889][ T5987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.091091][ T5893] az6027: no front-end attached [ 95.091091][ T5893] [ 95.126623][ T5893] az6027: usb out operation failed. (-71) [ 95.140434][ T5893] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 95.148469][ T5987] bond0 (unregistering): Released all slaves [ 95.162460][ T5893] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 95.225773][ T5893] dvb-usb: schedule remote query interval to 400 msecs. [ 95.274592][ T5893] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 95.308680][ T5893] usb 5-1: USB disconnect, device number 2 [ 95.607074][ T5893] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 95.903633][ T5893] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.922661][ T6023] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.951585][ T5893] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.215957][ T5906] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.414001][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.441910][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.488513][ T5906] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 97.528076][ T2153] kernel read not supported for file /dsp (pid: 2153 comm: kworker/1:2) [ 97.876878][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 97.883621][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 97.997775][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.014874][ T5906] usb 2-1: config 0 descriptor?? [ 98.145118][ T2153] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.322337][ T2153] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.334633][ T2153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 98.345874][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.364108][ T2153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 98.388100][ T2153] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.401807][ T2153] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.412895][ T2153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.433757][ T2153] usb 5-1: config 0 descriptor?? [ 98.462423][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 98.463252][ T5906] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 98.477940][ T6083] netlink: 'syz.0.48': attribute type 1 has an invalid length. [ 98.496992][ T6083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.48'. [ 98.545166][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 98.548864][ T5906] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 98.597585][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.618991][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.654047][ T5906] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 98.676623][ T43] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 98.706611][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.749212][ T43] usb 3-1: config 0 descriptor?? [ 98.818212][ T6088] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.877245][ T2153] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 98.909984][ T2153] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 98.977625][ T2153] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 99.065361][ T5906] cp2112 0003:10C4:EA90.0003: error setting SMBus config [ 99.091362][ T5906] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -71 [ 99.127660][ T5906] usb 2-1: USB disconnect, device number 2 [ 99.242758][ T43] savu 0003:1E7D:2D5A.0005: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 99.520881][ T5906] IPVS: starting estimator thread 0... [ 99.635907][ T6098] IPVS: using max 24 ests per chain, 57600 per kthread [ 100.299717][ T5912] usb 3-1: USB disconnect, device number 3 [ 100.533769][ T6107] usb usb1: usbfs: process 6107 (syz.3.57) did not claim interface 63 before use [ 101.055497][ T5912] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.092095][ T5906] usb 5-1: USB disconnect, device number 3 [ 101.250649][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.279832][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 101.337677][ T5912] usb 4-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 101.365449][ T30] audit: type=1326 audit(1750816224.217:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6121 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ab18e929 code=0x7ffc0000 [ 101.387339][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.416459][ T5912] usb 4-1: config 0 descriptor?? [ 101.535078][ T30] audit: type=1326 audit(1750816224.217:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6121 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ab18e929 code=0x7ffc0000 [ 101.652338][ T30] audit: type=1326 audit(1750816224.217:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6121 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd8ab18e929 code=0x7ffc0000 [ 101.765306][ T30] audit: type=1326 audit(1750816224.217:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6121 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ab18e929 code=0x7ffc0000 [ 101.858379][ T30] audit: type=1326 audit(1750816224.217:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6121 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fd8ab18e929 code=0x7ffc0000 [ 101.937848][ T5912] viewsonic 0003:0543:E621.0006: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.3-1/input0 [ 101.955271][ T30] audit: type=1326 audit(1750816224.367:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6121 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ab18e929 code=0x7ffc0000 [ 102.050572][ T30] audit: type=1326 audit(1750816224.367:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6121 comm="syz.0.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ab18e929 code=0x7ffc0000 [ 102.141061][ T5912] usb 4-1: USB disconnect, device number 2 [ 102.291201][ T6136] fido_id[6136]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 102.415061][ T5906] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 102.595296][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 102.621619][ T5906] usb 5-1: config 0 has no interfaces? [ 102.637984][ T5906] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.663319][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.692858][ T5906] usb 5-1: config 0 descriptor?? [ 103.065076][ T5981] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.152937][ T6137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.185549][ T6137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.225163][ T5981] usb 1-1: Using ep0 maxpacket: 32 [ 103.277202][ T5906] usb 5-1: USB disconnect, device number 4 [ 103.285946][ T5981] usb 1-1: config 0 interface 0 has no altsetting 0 [ 103.324274][ T5981] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 103.346198][ T5981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.386277][ T6149] dummy0: entered promiscuous mode [ 103.398121][ T5981] usb 1-1: Product: syz [ 103.413687][ T5981] usb 1-1: Manufacturer: syz [ 103.436673][ T6149] bond0: entered promiscuous mode [ 103.442148][ T5981] usb 1-1: SerialNumber: syz [ 103.456102][ T6149] bond_slave_0: entered promiscuous mode [ 103.478325][ T5981] usb 1-1: config 0 descriptor?? [ 103.495476][ T6149] bond_slave_1: entered promiscuous mode [ 103.540175][ T6149] hsr1: entered allmulticast mode [ 103.546837][ T6149] dummy0: entered allmulticast mode [ 103.562683][ T6149] bond0: entered allmulticast mode [ 103.582594][ T6149] bond_slave_0: entered allmulticast mode [ 103.600448][ T6149] bond_slave_1: entered allmulticast mode [ 103.958889][ T5981] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 104.600833][ T5981] usb 1-1: USB disconnect, device number 2 [ 105.294221][ T6188] syz.4.91 (6188) used greatest stack depth: 16184 bytes left [ 106.120382][ T6199] hsr0: entered promiscuous mode [ 106.200675][ T6199] vlan2: entered promiscuous mode [ 106.889166][ T6211] syz.3.101 uses obsolete (PF_INET,SOCK_PACKET) [ 108.521952][ T6246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.747928][ T2153] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.945118][ T2153] usb 2-1: Using ep0 maxpacket: 32 [ 109.957131][ T2153] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 109.974171][ T2153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.023978][ T2153] usb 2-1: config 0 descriptor?? [ 110.248424][ T2153] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 110.277368][ T2153] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.310622][ T2153] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 110.340207][ T2153] usb 2-1: media controller created [ 110.380403][ T6286] binder: 6285:6286 ioctl c0306201 200000001a80 returned -14 [ 110.470083][ T2153] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.724688][ T6300] 9pnet: p9_errstr2errno: server reported unknown error @ [ 110.986341][ T2153] az6027: usb out operation failed. (-71) [ 110.995014][ T2153] stb0899_attach: Driver disabled by Kconfig [ 111.018132][ T6284] geneve0: entered promiscuous mode [ 111.029194][ T6284] geneve0: entered allmulticast mode [ 111.029658][ T2153] az6027: no front-end attached [ 111.029658][ T2153] [ 111.695112][ T2153] az6027: usb out operation failed. (-71) [ 111.701169][ T2153] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 111.731911][ T2153] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 111.775935][ T2153] dvb-usb: schedule remote query interval to 400 msecs. [ 111.782962][ T2153] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 111.927822][ T2153] usb 2-1: USB disconnect, device number 3 [ 112.202616][ T2153] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 112.546431][ T6319] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 112.630720][ T30] audit: type=1326 audit(1750816235.487:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6318 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7ffc0000 [ 112.711099][ T30] audit: type=1326 audit(1750816235.487:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6318 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7ffc0000 [ 112.795896][ T30] audit: type=1326 audit(1750816235.487:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6318 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fbb4698e929 code=0x7ffc0000 [ 112.875074][ T30] audit: type=1326 audit(1750816235.487:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6318 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7ffc0000 [ 112.982061][ T30] audit: type=1326 audit(1750816235.517:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6318 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7ffc0000 [ 113.175162][ T5893] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.291755][ T6333] netlink: 'syz.2.153': attribute type 1 has an invalid length. [ 113.314316][ T6333] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.153'. [ 113.371247][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.413764][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 113.450057][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 113.478016][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.575155][ T5893] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.584259][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.658676][ T5912] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.688149][ T5893] usb 2-1: config 0 descriptor?? [ 113.815594][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 113.843690][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.890277][ T5912] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 113.912660][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.956211][ T5912] usb 1-1: config 0 descriptor?? [ 114.138154][ T5893] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 114.150232][ T5893] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 114.206543][ T5893] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 114.423122][ T5912] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0008/input/input8 [ 114.443496][ T5906] usb 2-1: USB disconnect, device number 4 [ 114.545915][ T5912] appleir 0003:05AC:8241.0008: input,hiddev0,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 114.644570][ T5912] usb 1-1: USB disconnect, device number 3 [ 114.919872][ T6365] input: syz1 as /devices/virtual/input/input9 [ 116.022089][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 116.380076][ T6409] batadv0: entered promiscuous mode [ 116.409776][ T6409] macsec1: entered promiscuous mode [ 116.417705][ T6409] macsec1: entered allmulticast mode [ 116.428118][ T6409] batadv0: entered allmulticast mode [ 116.456016][ T6409] batadv0: left allmulticast mode [ 116.463863][ T6409] batadv0: left promiscuous mode [ 117.835302][ T5981] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.983459][ T6460] input: syz0 as /devices/virtual/input/input10 [ 118.028318][ T5981] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 118.052488][ T5981] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.093761][ T5981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 118.117386][ T5981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 118.159989][ T5981] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.184328][ T5981] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.197134][ T5981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.241270][ T5981] usb 2-1: config 0 descriptor?? [ 118.261974][ T6451] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.358239][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 118.359267][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 118.700238][ T5981] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 118.721137][ T5981] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 118.769706][ T5981] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 119.030801][ T5981] usb 2-1: USB disconnect, device number 5 [ 119.208047][ T6479] syzkaller1: entered promiscuous mode [ 119.244160][ T6479] syzkaller1: entered allmulticast mode [ 120.065157][ T5981] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 120.241466][ T5981] usb 2-1: Using ep0 maxpacket: 16 [ 120.274658][ T5981] usb 2-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 120.345121][ T5981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.377359][ T5981] usb 2-1: Product: syz [ 120.381674][ T5981] usb 2-1: Manufacturer: syz [ 120.419857][ T5981] usb 2-1: SerialNumber: syz [ 120.434519][ T5981] usb 2-1: config 0 descriptor?? [ 120.502061][ T5981] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 120.505534][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.736467][ T5981] pwc: Warning: more than 1 configuration available. [ 120.749479][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.759303][ T5981] pwc: Failed to set LED on/off time (-71) [ 120.779883][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.782340][ T5981] pwc: send_video_command error -71 [ 120.809155][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 120.817853][ T5981] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 120.840467][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 120.859863][ T5981] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 120.884830][ T24] usb 3-1: SerialNumber: syz [ 120.906464][ T5981] usb 2-1: USB disconnect, device number 6 [ 120.911900][ T6522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.199098][ T24] usb 3-1: 0:2 : does not exist [ 121.296244][ T24] usb 3-1: USB disconnect, device number 4 [ 121.541954][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.875782][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.004090][ T6554] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.060130][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.081524][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.122238][ T24] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 122.155216][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.170227][ T6558] warning: `syz.4.250' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.218730][ T24] usb 1-1: config 0 descriptor?? [ 122.678890][ T24] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 122.730027][ T24] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 122.797713][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.000A/input/input12 [ 122.855791][ T5893] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.938045][ T24] cm6533_jd 0003:0D8C:0022.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 122.975421][ T24] usb 1-1: USB disconnect, device number 4 [ 123.032176][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.058910][ T2153] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 123.073080][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.102100][ T5893] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 123.115061][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.154326][ T5893] usb 3-1: config 0 descriptor?? [ 123.202348][ T6581] fido_id[6581]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 123.245892][ T2153] usb 2-1: Using ep0 maxpacket: 8 [ 123.274373][ T2153] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 123.289784][ T2153] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.307197][ T2153] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.319678][ T2153] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.346119][ T2153] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.359951][ T2153] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.370959][ T2153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.575821][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.625114][ T2153] usb 2-1: usb_control_msg returned -32 [ 123.637239][ T2153] usbtmc 2-1:16.0: can't read capabilities [ 123.745559][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 123.760522][ T24] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 123.776219][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.784381][ T24] usb 4-1: Product: syz [ 123.789226][ T24] usb 4-1: Manufacturer: syz [ 123.799764][ T5893] hid-led 0003:27B8:01ED.000B: probe with driver hid-led failed with error -71 [ 123.809038][ T24] usb 4-1: SerialNumber: syz [ 123.824575][ T24] usb 4-1: config 0 descriptor?? [ 123.830623][ T5893] usb 3-1: USB disconnect, device number 5 [ 123.844363][ T24] gspca_main: sq905-2.14.0 probing 2770:9120 [ 123.978944][ T6597] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 124.660695][ T5981] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 124.723961][ T6619] 9pnet: p9_errstr2errno: server reported unknown error [ 124.842159][ T5981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 124.854429][ T24] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 124.876141][ T24] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 124.884257][ T5981] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 124.901431][ T24] usb 4-1: USB disconnect, device number 3 [ 124.903689][ T5981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.946088][ T5981] usb 1-1: config 0 descriptor?? [ 124.962516][ T6609] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 125.412564][ T5981] elan 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 125.464248][ T6635] Context (ID=0x0) not attached to queue pair (handle=0x0:0x9) [ 125.598431][ T5981] usb 1-1: USB disconnect, device number 5 [ 125.626286][ T6636] fido_id[6636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 125.845601][ T24] usb 2-1: USB disconnect, device number 7 [ 127.166630][ T6684] netlink: 16 bytes leftover after parsing attributes in process `syz.4.307'. [ 127.219532][ T6684] team0: entered promiscuous mode [ 127.253842][ T6684] team_slave_0: entered promiscuous mode [ 127.272244][ T6684] team_slave_1: entered promiscuous mode [ 127.281272][ T24] Process accounting resumed [ 127.297719][ T6684] batadv_slave_1: entered promiscuous mode [ 127.316884][ T6684] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 127.342261][ T6684] Cannot create hsr debugfs directory [ 127.618996][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.724445][ T6696] netlink: 'syz.1.320': attribute type 29 has an invalid length. [ 127.751549][ T6696] netlink: 'syz.1.320': attribute type 29 has an invalid length. [ 127.777750][ T6696] netlink: 508 bytes leftover after parsing attributes in process `syz.1.320'. [ 127.946686][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.017421][ T6700] delete_channel: no stack [ 128.157463][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.653402][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.420130][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.430896][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.439674][ T49] bridge_slave_1: left allmulticast mode [ 129.447807][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.455920][ T49] bridge_slave_1: left promiscuous mode [ 129.462031][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.470984][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.482295][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.534442][ T49] bridge_slave_0: left allmulticast mode [ 129.548617][ T49] bridge_slave_0: left promiscuous mode [ 129.599332][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.960629][ T6740] loop5: detected capacity change from 0 to 2919 [ 130.008245][ T6741] loop5: detected capacity change from 2919 to 3303 [ 130.055100][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 130.077968][ T5871] Buffer I/O error on dev loop5, logical block 412, async page read [ 130.154148][ T5871] Buffer I/O error on dev loop5, logical block 412, async page read [ 130.246054][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 130.268025][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 130.298967][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 130.349128][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.398963][ T24] usb 5-1: config 0 descriptor?? [ 130.437050][ T24] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 130.798929][ T5175] bcm5974 5-1:0.0: could not read from device [ 130.858244][ T24] usb 5-1: USB disconnect, device number 5 [ 131.016812][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.065730][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.084135][ T49] bond0 (unregistering): Released all slaves [ 131.555371][ T5836] Bluetooth: hci3: command tx timeout [ 132.230211][ T6784] netlink: 27 bytes leftover after parsing attributes in process `syz.3.338'. [ 132.855624][ T24] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 133.033784][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.047347][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.068537][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.092651][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.094872][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.100830][ T24] usb 1-1: Product: syz [ 133.107459][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.111522][ T24] usb 1-1: Manufacturer: syz [ 133.122550][ T24] usb 1-1: SerialNumber: syz [ 133.218279][ T49] hsr_slave_0: left promiscuous mode [ 133.234541][ T49] hsr_slave_1: left promiscuous mode [ 133.250308][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.266898][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.284746][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.317134][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.409363][ T49] veth1_macvtap: left promiscuous mode [ 133.414291][ T24] usb 1-1: 0:2 : does not exist [ 133.438858][ T49] veth0_macvtap: left promiscuous mode [ 133.455956][ T24] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 133.457670][ T49] veth1_vlan: left promiscuous mode [ 133.485371][ T49] veth0_vlan: left promiscuous mode [ 133.513325][ T24] usb 1-1: USB disconnect, device number 6 [ 133.581316][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.635234][ T5893] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 133.644196][ T5836] Bluetooth: hci3: command tx timeout [ 133.825054][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 133.855086][ T5893] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 133.863494][ T5893] usb 4-1: config 150 has no interface number 0 [ 133.885114][ T5893] usb 4-1: config 150 interface 204 has no altsetting 0 [ 133.892161][ T5893] usb 4-1: config 150 interface 1 has no altsetting 0 [ 133.917454][ T5893] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 133.939962][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.951181][ T5893] usb 4-1: Product: syz [ 133.962364][ T5893] usb 4-1: Manufacturer: syz [ 133.967520][ T5893] usb 4-1: SerialNumber: syz [ 133.985287][ T6815] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.347'. [ 134.222896][ T5893] xr_serial 4-1:150.204: xr_serial converter detected [ 134.549825][ T6825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.696319][ T49] team0 (unregistering): Port device team_slave_1 removed [ 134.753695][ T49] team0 (unregistering): Port device team_slave_0 removed [ 135.036173][ T5893] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 135.054048][ T5893] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 135.130953][ T5893] usb 4-1: USB disconnect, device number 4 [ 135.153522][ T5893] xr_serial 4-1:150.204: device disconnected [ 135.674879][ T6721] chnl_net:caif_netlink_parms(): no params data found [ 135.717457][ T5836] Bluetooth: hci3: command tx timeout [ 136.524216][ T6721] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.563811][ T6721] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.613650][ T6721] bridge_slave_0: entered allmulticast mode [ 136.655553][ T6721] bridge_slave_0: entered promiscuous mode [ 136.674854][ T6721] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.699054][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.720024][ T6721] bridge_slave_1: entered allmulticast mode [ 136.738158][ T6721] bridge_slave_1: entered promiscuous mode [ 137.037195][ T6721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.087861][ T6879] Illegal XDP return value 3877101089 on prog (id 55) dev syz_tun, expect packet loss! [ 137.098356][ T6721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.356464][ T6721] team0: Port device team_slave_0 added [ 137.394481][ T6721] team0: Port device team_slave_1 added [ 137.610163][ T6721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.635201][ T6721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.732218][ T6721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.806016][ T5836] Bluetooth: hci3: command tx timeout [ 137.947807][ T6721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.977278][ T6721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.072429][ T6721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.333739][ T6721] hsr_slave_0: entered promiscuous mode [ 138.349908][ T6721] hsr_slave_1: entered promiscuous mode [ 138.355211][ T30] audit: type=1326 audit(1750816261.197:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6905 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7ffc0000 [ 138.365882][ T6721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.429700][ T6721] Cannot create hsr debugfs directory [ 138.490282][ T30] audit: type=1326 audit(1750816261.197:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6905 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7ffc0000 [ 138.544236][ T30] audit: type=1326 audit(1750816261.197:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6905 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7ffc0000 [ 138.666380][ T30] audit: type=1326 audit(1750816261.197:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6905 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7ffc0000 [ 138.719578][ T30] audit: type=1326 audit(1750816261.197:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6905 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb4692ab19 code=0x7ffc0000 [ 138.745484][ T30] audit: type=1326 audit(1750816261.197:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6905 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7ffc0000 [ 138.775568][ T30] audit: type=1326 audit(1750816261.197:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6905 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7ffc0000 [ 138.802138][ T30] audit: type=1326 audit(1750816261.197:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6905 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7ffc0000 [ 138.827933][ T30] audit: type=1326 audit(1750816261.197:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6905 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7ffc0000 [ 138.857338][ T30] audit: type=1326 audit(1750816261.197:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6905 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7ffc0000 [ 139.885159][ T5893] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.013398][ T6721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 140.065131][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 140.079743][ T5893] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 140.097257][ T6721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 140.122156][ T6721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 140.126606][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.150190][ T6721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 140.165215][ T5893] usb 4-1: Product: syz [ 140.169453][ T5893] usb 4-1: Manufacturer: syz [ 140.174198][ T5893] usb 4-1: SerialNumber: syz [ 140.191421][ T5893] usb 4-1: config 0 descriptor?? [ 140.540363][ T6721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.612173][ T6721] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.655687][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.662991][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.686910][ T5893] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 140.710034][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.717444][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.850224][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.884008][ T5893] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 140.909996][ T5893] usb 4-1: media controller created [ 140.999705][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.107513][ T5893] zl10353_read_register: readreg error (reg=127, ret==0) [ 141.118354][ T5893] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 141.134717][ T5893] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 141.173774][ T5893] usb 4-1: USB disconnect, device number 5 [ 141.262116][ T5948] udevd[5948]: setting mode of /dev/dvb/adapter1/demux0 to 020660 failed: No such file or directory [ 141.323174][ T5948] udevd[5948]: setting owner of /dev/dvb/adapter1/demux0 to uid=0, gid=28 failed: No such file or directory [ 141.370727][ T5893] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 141.537898][ T6721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.690917][ T6721] veth0_vlan: entered promiscuous mode [ 141.756090][ T6721] veth1_vlan: entered promiscuous mode [ 141.902376][ T6721] veth0_macvtap: entered promiscuous mode [ 141.941373][ T6721] veth1_macvtap: entered promiscuous mode [ 141.984338][ T6721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.013043][ T6721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.041768][ T6721] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.085392][ T6721] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.094167][ T6721] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.125175][ T6721] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.375767][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.419'. [ 142.387289][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.406920][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.488417][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.509100][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.546548][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.008055][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.281070][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.514831][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.725654][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 144.735226][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.743777][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 144.753628][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 144.763549][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 144.879230][ T7054] input: syz1 as /devices/virtual/input/input14 [ 145.097032][ T36] bridge_slave_1: left allmulticast mode [ 145.133275][ T36] bridge_slave_1: left promiscuous mode [ 145.153668][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.220539][ T36] bridge_slave_0: left allmulticast mode [ 145.226724][ T7062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.240845][ T36] bridge_slave_0: left promiscuous mode [ 145.248905][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.743568][ T5832] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 145.755061][ T5832] Bluetooth: hci0: Injecting HCI hardware error event [ 145.763586][ T5836] Bluetooth: hci0: hardware error 0x00 [ 146.733911][ T2153] kernel write not supported for file /243/oom_adj (pid: 2153 comm: kworker/1:2) [ 146.845610][ T5832] Bluetooth: hci3: command tx timeout [ 146.899289][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.940367][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.963092][ T36] bond0 (unregistering): Released all slaves [ 147.205188][ T2153] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 147.430859][ T2153] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 147.457391][ T2153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.503176][ T2153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.529445][ T2153] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 147.564599][ T2153] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 147.587467][ T2153] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 147.608521][ T2153] usb 5-1: Manufacturer: syz [ 147.643028][ T2153] usb 5-1: config 0 descriptor?? [ 147.927990][ T36] hsr_slave_0: left promiscuous mode [ 147.947423][ T36] hsr_slave_1: left promiscuous mode [ 147.978399][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.999898][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.026542][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.035347][ T5836] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 148.052223][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.082349][ T36] veth1_macvtap: left promiscuous mode [ 148.084588][ T2153] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 148.096328][ T2153] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 148.098923][ T36] veth0_macvtap: left promiscuous mode [ 148.117600][ T2153] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 148.130341][ T36] veth1_vlan: left promiscuous mode [ 148.143070][ T36] veth0_vlan: left promiscuous mode [ 148.369108][ T2153] usb 5-1: USB disconnect, device number 6 [ 148.921353][ T5836] Bluetooth: hci3: command tx timeout [ 149.363517][ T7174] mmap: syz.4.466 (7174) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 149.682387][ T36] team0 (unregistering): Port device team_slave_1 removed [ 149.803700][ T36] team0 (unregistering): Port device team_slave_0 removed [ 150.964692][ T7049] chnl_net:caif_netlink_parms(): no params data found [ 150.997781][ T5836] Bluetooth: hci3: command tx timeout [ 151.850623][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'. [ 151.936167][ T7049] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.955904][ T7049] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.963288][ T7049] bridge_slave_0: entered allmulticast mode [ 151.979145][ T7049] bridge_slave_0: entered promiscuous mode [ 152.020151][ T7049] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.035319][ T7262] capability: warning: `syz.0.485' uses 32-bit capabilities (legacy support in use) [ 152.044203][ T7049] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.057346][ T7049] bridge_slave_1: entered allmulticast mode [ 152.091804][ T7049] bridge_slave_1: entered promiscuous mode [ 152.259799][ T7049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.317783][ T7049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.392746][ T7049] team0: Port device team_slave_0 added [ 152.427762][ T7267] Zero length message leads to an empty skb [ 152.453366][ T7049] team0: Port device team_slave_1 added [ 152.616584][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 152.616604][ T30] audit: type=1326 audit(1750816275.477:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7275 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d38d8e929 code=0x7ffc0000 [ 152.626942][ T7274] netlink: 76 bytes leftover after parsing attributes in process `syz.0.493'. [ 152.649482][ T30] audit: type=1326 audit(1750816275.477:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7275 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d38d8e929 code=0x7ffc0000 [ 152.680025][ T7049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.685148][ T30] audit: type=1326 audit(1750816275.537:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7275 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0d38d8e929 code=0x7ffc0000 [ 152.689431][ T7049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.713448][ T30] audit: type=1326 audit(1750816275.537:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7275 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0d38d858e7 code=0x7ffc0000 [ 152.734559][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.769295][ T7049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.769989][ T30] audit: type=1326 audit(1750816275.537:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7275 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d38d2ab19 code=0x7ffc0000 [ 152.808522][ T30] audit: type=1326 audit(1750816275.537:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7275 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d38d8e929 code=0x7ffc0000 [ 152.846265][ T7049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.856982][ T30] audit: type=1326 audit(1750816275.537:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7275 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d38d8e929 code=0x7ffc0000 [ 152.878453][ T7049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.878516][ T7049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.940495][ T30] audit: type=1326 audit(1750816275.547:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7275 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0d38d858e7 code=0x7ffc0000 [ 152.979794][ T30] audit: type=1326 audit(1750816275.547:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7275 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d38d2ab19 code=0x7ffc0000 [ 153.058972][ T30] audit: type=1326 audit(1750816275.547:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7275 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f0d38d8e929 code=0x7ffc0000 [ 153.080421][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.090455][ T5836] Bluetooth: hci3: command tx timeout [ 153.263541][ T7049] hsr_slave_0: entered promiscuous mode [ 153.292896][ T7049] hsr_slave_1: entered promiscuous mode [ 153.321286][ T7049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.325171][ T5981] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 153.349604][ T7049] Cannot create hsr debugfs directory [ 153.464484][ T7290] vivid-000: disconnect [ 153.484794][ T7288] vivid-000: reconnect [ 153.499272][ T5981] usb 1-1: Using ep0 maxpacket: 8 [ 153.533161][ T5981] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.583527][ T5981] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 153.628640][ T5981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.689611][ T5981] usb 1-1: config 0 descriptor?? [ 153.738657][ T5981] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 153.791453][ T5885] IPVS: starting estimator thread 0... [ 153.797792][ T7294] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 153.907525][ T7298] IPVS: using max 23 ests per chain, 55200 per kthread [ 154.613567][ T7049] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 154.647071][ T7049] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 154.668968][ T7049] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 154.693149][ T7049] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 154.747507][ T5981] gspca_vc032x: reg_r err -71 [ 154.769409][ T5981] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 154.784271][ T5981] usb 1-1: USB disconnect, device number 7 [ 155.061545][ T7049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.131780][ T7049] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.181236][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.188526][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.256970][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.264173][ T7099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.029330][ T7353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.522'. [ 156.090822][ T7358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.522'. [ 156.102201][ T7355] GUP no longer grows the stack in syz.4.524 (7355): 200000004000-20000000a000 (200000002000) [ 156.120975][ T7357] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 156.144088][ T7355] CPU: 0 UID: 0 PID: 7355 Comm: syz.4.524 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 156.144119][ T7355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.144129][ T7355] Call Trace: [ 156.144137][ T7355] [ 156.144146][ T7355] dump_stack_lvl+0x189/0x250 [ 156.144185][ T7355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.144214][ T7355] ? __pfx__printk+0x10/0x10 [ 156.144230][ T7355] ? find_vma+0xe7/0x160 [ 156.144268][ T7355] __get_user_pages+0x2a60/0x30b0 [ 156.144330][ T7355] ? __pfx___get_user_pages+0x10/0x10 [ 156.144372][ T7355] get_user_pages_remote+0x2f9/0xaa0 [ 156.144393][ T7355] ? __pfx_mtree_load+0x10/0x10 [ 156.144425][ T7355] ? __pfx_get_user_pages_remote+0x10/0x10 [ 156.144459][ T7355] __access_remote_vm+0x215/0x5f0 [ 156.144495][ T7355] ? __pfx___access_remote_vm+0x10/0x10 [ 156.144522][ T7355] ? alloc_pages_noprof+0xbe/0x190 [ 156.144599][ T7355] proc_pid_cmdline_read+0x440/0x840 [ 156.144632][ T7355] ? __asan_memset+0x22/0x50 [ 156.144676][ T7355] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 156.144703][ T7355] ? rw_verify_area+0x258/0x650 [ 156.144728][ T7355] vfs_readv+0x5aa/0x850 [ 156.144760][ T7355] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 156.144785][ T7355] ? __pfx_vfs_readv+0x10/0x10 [ 156.144831][ T7355] ? __fget_files+0x2a/0x420 [ 156.144860][ T7355] ? __fget_files+0x3a0/0x420 [ 156.144882][ T7355] ? __fget_files+0x2a/0x420 [ 156.144915][ T7355] __x64_sys_preadv+0x197/0x2a0 [ 156.144948][ T7355] ? __pfx___x64_sys_preadv+0x10/0x10 [ 156.144967][ T7355] ? rcu_is_watching+0x15/0xb0 [ 156.144999][ T7355] ? do_syscall_64+0xbe/0x3b0 [ 156.145030][ T7355] do_syscall_64+0xfa/0x3b0 [ 156.145053][ T7355] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.145075][ T7355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.145092][ T7355] ? clear_bhb_loop+0x60/0xb0 [ 156.145114][ T7355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.145132][ T7355] RIP: 0033:0x7f0d38d8e929 [ 156.145151][ T7355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.145165][ T7355] RSP: 002b:00007f0d39c22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 156.145187][ T7355] RAX: ffffffffffffffda RBX: 00007f0d38fb5fa0 RCX: 00007f0d38d8e929 [ 156.145201][ T7355] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 156.145211][ T7355] RBP: 00007f0d38e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 156.145223][ T7355] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 156.145233][ T7355] R13: 0000000000000000 R14: 00007f0d38fb5fa0 R15: 00007ffd80210248 [ 156.145265][ T7355] [ 156.170604][ T7357] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 156.329205][ T7361] openvswitch: netlink: IP tunnel TTL not specified. [ 156.365198][ T7357] overlayfs: failed to get uuid (126/file1, err=-13); falling back to uuid=null. [ 156.595949][ T7049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.782908][ T7049] veth0_vlan: entered promiscuous mode [ 156.838836][ T7049] veth1_vlan: entered promiscuous mode [ 157.007208][ T7049] veth0_macvtap: entered promiscuous mode [ 157.130273][ T7049] veth1_macvtap: entered promiscuous mode [ 157.216705][ T7049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.291088][ T7049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.346922][ T7049] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.404056][ T7049] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.435451][ T7049] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.444300][ T7049] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.521830][ T7385] syzkaller1: entered promiscuous mode [ 157.531251][ T7385] syzkaller1: entered allmulticast mode [ 157.860575][ T7105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.884177][ T7105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.980341][ T7099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.007753][ T7099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.226353][ T7403] netlink: 'syz.3.542': attribute type 29 has an invalid length. [ 158.418681][ T7407] loop2: detected capacity change from 0 to 7 [ 158.445187][ T5871] Dev loop2: unable to read RDB block 7 [ 158.457055][ T5871] loop2: unable to read partition table [ 158.466238][ T5871] loop2: partition table beyond EOD, truncated [ 158.496185][ T7407] Dev loop2: unable to read RDB block 7 [ 158.516043][ T7407] loop2: unable to read partition table [ 158.534632][ T7407] loop2: partition table beyond EOD, truncated [ 158.562728][ T7407] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 158.912012][ T7095] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.055138][ T5981] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 159.088827][ T7095] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.219815][ T5981] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 159.238652][ T5981] usb 5-1: config 1 has no interface number 0 [ 159.261031][ T7418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.268941][ T5981] usb 5-1: config 1 interface 105 has no altsetting 0 [ 159.288302][ T5981] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 159.305110][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.319553][ T5981] usb 5-1: Product: syz [ 159.323925][ T5981] usb 5-1: Manufacturer: syz [ 159.329848][ T5981] usb 5-1: SerialNumber: syz [ 159.496666][ T7095] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.707233][ T7095] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.836143][ T7430] netlink: 'syz.1.553': attribute type 1 has an invalid length. [ 159.998632][ T5981] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 160.040523][ T5981] aqc111 5-1:1.105: probe with driver aqc111 failed with error -61 [ 160.125625][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.135431][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.145126][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.156388][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.167268][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.394749][ T7095] bridge_slave_1: left allmulticast mode [ 160.423376][ T7095] bridge_slave_1: left promiscuous mode [ 160.434284][ T7095] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.464222][ T7095] bridge_slave_0: left allmulticast mode [ 160.491036][ T7095] bridge_slave_0: left promiscuous mode [ 160.517482][ T7095] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.718308][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 160.976561][ T2153] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 161.011951][ T7095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.022938][ T7095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.033100][ T7095] bond0 (unregistering): Released all slaves [ 161.138574][ T2153] usb 2-1: Using ep0 maxpacket: 16 [ 161.175139][ T2153] usb 2-1: config 1 has an invalid descriptor of length 233, skipping remainder of the config [ 161.197193][ T2153] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.230901][ T2153] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.255460][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.267083][ T2153] usb 2-1: Product: syz [ 161.272609][ T2153] usb 2-1: Manufacturer: syz [ 161.282770][ T2153] usb 2-1: SerialNumber: syz [ 161.739989][ T2153] usb 2-1: 0:2 : does not exist [ 161.821666][ T5981] usb 5-1: USB disconnect, device number 7 [ 161.837179][ T7095] hsr_slave_0: left promiscuous mode [ 161.858028][ T7095] hsr_slave_1: left promiscuous mode [ 161.880503][ T7095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.903219][ T7095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.929269][ T7095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.949171][ T7095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.998242][ T7095] veth1_macvtap: left promiscuous mode [ 162.023267][ T7095] veth0_macvtap: left promiscuous mode [ 162.033427][ T7095] veth1_vlan: left promiscuous mode [ 162.043433][ T7095] veth0_vlan: left promiscuous mode [ 162.163567][ T2153] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 162.262615][ T2153] usb 2-1: USB disconnect, device number 8 [ 162.275967][ T5832] Bluetooth: hci3: command tx timeout [ 162.320065][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.005373][ T5885] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 163.145429][ T2153] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 163.168227][ T5885] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.186221][ T5885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.225319][ T5885] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 163.263828][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 163.282179][ T5885] usb 4-1: SerialNumber: syz [ 163.352612][ T2153] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.363200][ T2153] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 163.465566][ T2153] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.490658][ T2153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 163.531801][ T2153] usb 2-1: SerialNumber: syz [ 163.554503][ T2153] cdc_ether 2-1:1.0: skipping garbage [ 163.565269][ T2153] usb 2-1: bad CDC descriptors [ 163.629025][ T5885] usb 4-1: 0:2 : does not exist [ 163.664181][ T5885] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 163.785644][ T5885] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 163.884606][ T5885] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 163.922423][ T5885] usb 4-1: USB disconnect, device number 6 [ 164.104913][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.281776][ T7095] team0 (unregistering): Port device team_slave_1 removed [ 164.369047][ T5832] Bluetooth: hci3: command tx timeout [ 164.383457][ T7095] team0 (unregistering): Port device team_slave_0 removed [ 164.391753][ T5912] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 164.626928][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.645020][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 164.685536][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 164.702977][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.735121][ T5912] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.744225][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.811237][ T5912] usb 1-1: config 0 descriptor?? [ 165.258625][ T5912] plantronics 0003:047F:FFFF.000E: ignoring exceeding usage max [ 165.290368][ T5912] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 165.335231][ T5912] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 165.925405][ T24] usb 2-1: USB disconnect, device number 9 [ 165.961526][ T7533] loop6: detected capacity change from 0 to 63 [ 166.022465][ T5871] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.051540][ T5871] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.072886][ T5871] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.097707][ T7440] chnl_net:caif_netlink_parms(): no params data found [ 166.119277][ T5871] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.135785][ T5871] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.169622][ T7533] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.185220][ T7533] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.225375][ T7533] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.271529][ T7533] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.435204][ T5832] Bluetooth: hci3: command tx timeout [ 166.607874][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.640560][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.660622][ T7440] bridge_slave_0: entered allmulticast mode [ 166.723157][ T7440] bridge_slave_0: entered promiscuous mode [ 166.772749][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.815235][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.836056][ T7440] bridge_slave_1: entered allmulticast mode [ 166.854311][ T7440] bridge_slave_1: entered promiscuous mode [ 166.914637][ T7560] netlink: 64 bytes leftover after parsing attributes in process `syz.1.601'. [ 167.132251][ T7440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.184786][ T7440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.327885][ T30] kauditd_printk_skb: 177 callbacks suppressed [ 167.327903][ T30] audit: type=1326 audit(1750816290.187:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7562 comm="syz.1.602" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa16d8e929 code=0x0 [ 167.426263][ T7440] team0: Port device team_slave_0 added [ 167.438031][ T7440] team0: Port device team_slave_1 added [ 167.503114][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.511034][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.542352][ T7440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.556708][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.563975][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.591557][ T7440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.703282][ T7440] hsr_slave_0: entered promiscuous mode [ 167.718491][ T24] usb 1-1: USB disconnect, device number 8 [ 167.726361][ T7440] hsr_slave_1: entered promiscuous mode [ 167.770419][ T7440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.796730][ T7440] Cannot create hsr debugfs directory [ 167.955717][ T24] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 168.149564][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 168.163432][ T24] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 168.202529][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.234813][ T24] usb 1-1: config 0 descriptor?? [ 168.254423][ T7565] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 168.515389][ T5832] Bluetooth: hci3: command tx timeout [ 168.730987][ T24] elan 0003:04F3:0755.000F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 168.961948][ T7440] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 168.983044][ T24] usb 1-1: USB disconnect, device number 9 [ 169.003977][ T7440] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 169.026360][ T7440] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 169.056877][ T7440] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 169.366092][ T7440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.509465][ T7440] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.528650][ T7598] syzkaller1: entered promiscuous mode [ 169.542125][ T7598] syzkaller1: entered allmulticast mode [ 169.704681][ T7086] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.712623][ T7086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.783353][ T7095] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.790568][ T7095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.235036][ T5893] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 170.433221][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 170.453251][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 170.492805][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 170.510752][ T7440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.524915][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.579587][ T5893] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.605625][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.672881][ T5893] usb 5-1: config 0 descriptor?? [ 170.694883][ T7440] veth0_vlan: entered promiscuous mode [ 170.705980][ T7611] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 170.768725][ T7440] veth1_vlan: entered promiscuous mode [ 170.913396][ T7440] veth0_macvtap: entered promiscuous mode [ 170.974136][ T7440] veth1_macvtap: entered promiscuous mode [ 171.034601][ T7440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.060947][ T7440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.090203][ T7440] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.103628][ T7440] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.133792][ T7440] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.149385][ T7440] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.181887][ T5893] plantronics 0003:047F:FFFF.0010: reserved main item tag 0xd [ 171.218358][ T5893] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 171.250571][ T5893] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 171.403303][ T7099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.431091][ T7099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.468504][ T5892] usb 5-1: USB disconnect, device number 8 [ 171.561541][ T7086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.586708][ T7086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.354131][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.628875][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.805657][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.987592][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.722080][ T36] bridge_slave_1: left allmulticast mode [ 173.732173][ T36] bridge_slave_1: left promiscuous mode [ 173.738914][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.784328][ T36] bridge_slave_0: left allmulticast mode [ 173.808375][ T36] bridge_slave_0: left promiscuous mode [ 173.829768][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.733456][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.742332][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.751105][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.807460][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.831702][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.843344][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.865955][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.883792][ T36] bond0 (unregistering): Released all slaves [ 175.938852][ T7687] vlan2: entered allmulticast mode [ 175.944160][ T7687] bond0: entered allmulticast mode [ 175.954315][ T7687] bond_slave_0: entered allmulticast mode [ 175.985317][ T7687] bond_slave_1: entered allmulticast mode [ 176.552753][ T7704] netlink: 'syz.3.658': attribute type 10 has an invalid length. [ 176.562799][ T7704] netlink: 55 bytes leftover after parsing attributes in process `syz.3.658'. [ 176.915721][ T5832] Bluetooth: hci3: command tx timeout [ 177.323659][ T36] hsr_slave_0: left promiscuous mode [ 177.346012][ T36] hsr_slave_1: left promiscuous mode [ 177.352217][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.375933][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.397778][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.419099][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.483645][ T36] veth1_macvtap: left promiscuous mode [ 177.515741][ T36] veth0_macvtap: left promiscuous mode [ 177.530220][ T36] veth1_vlan: left promiscuous mode [ 177.538133][ T36] veth0_vlan: left promiscuous mode [ 178.939264][ T36] team0 (unregistering): Port device team_slave_1 removed [ 178.995310][ T5832] Bluetooth: hci3: command tx timeout [ 179.023120][ T36] team0 (unregistering): Port device team_slave_0 removed [ 179.075034][ T30] audit: type=1326 audit(1750816301.927:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7750 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d38d8e929 code=0x7ffc0000 [ 179.120810][ T30] audit: type=1326 audit(1750816301.967:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7750 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d38d8e929 code=0x7ffc0000 [ 179.143896][ T30] audit: type=1326 audit(1750816301.967:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7750 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f0d38d8e929 code=0x7ffc0000 [ 179.167921][ T30] audit: type=1326 audit(1750816301.967:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7750 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d38d8e929 code=0x7ffc0000 [ 179.190220][ T30] audit: type=1326 audit(1750816301.967:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7750 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d38d8e929 code=0x7ffc0000 [ 179.465195][ T5912] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 179.629383][ T5912] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.644921][ T5912] usb 5-1: not running at top speed; connect to a high speed hub [ 179.660402][ T5912] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 179.674162][ T5912] usb 5-1: config 1 interface 0 has no altsetting 0 [ 179.683580][ T5912] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.693930][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.702356][ T5912] usb 5-1: Product: syz [ 179.707072][ T5912] usb 5-1: Manufacturer: syz [ 179.711711][ T5912] usb 5-1: SerialNumber: syz [ 179.721676][ T7753] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 179.952047][ T5912] usb 5-1: bad CDC descriptors [ 179.984164][ T5912] usb 5-1: USB disconnect, device number 9 [ 180.430919][ T7676] chnl_net:caif_netlink_parms(): no params data found [ 180.975803][ T2153] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 181.029998][ T2153] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 181.081907][ T5832] Bluetooth: hci3: command tx timeout [ 181.535988][ T7676] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.551836][ T7676] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.585508][ T7676] bridge_slave_0: entered allmulticast mode [ 181.593637][ T7676] bridge_slave_0: entered promiscuous mode [ 181.648765][ T7676] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.672413][ T7676] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.683244][ T7676] bridge_slave_1: entered allmulticast mode [ 181.717433][ T7676] bridge_slave_1: entered promiscuous mode [ 181.908443][ T7676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.112442][ T7800] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.208289][ T7676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.303285][ T7800] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.536139][ T7800] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.635545][ T7676] team0: Port device team_slave_0 added [ 182.667791][ T7676] team0: Port device team_slave_1 added [ 182.888392][ T7800] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.155266][ T5832] Bluetooth: hci3: command tx timeout [ 183.184118][ T7676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.195080][ T7676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.245063][ T7676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.267540][ T7676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.284212][ T7676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.355030][ T7676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.410515][ T7800] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.584258][ T7800] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.671527][ T7676] hsr_slave_0: entered promiscuous mode [ 183.686783][ T7676] hsr_slave_1: entered promiscuous mode [ 183.693245][ T7676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.716377][ T7676] Cannot create hsr debugfs directory [ 183.731737][ T7800] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.783860][ T7800] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.635684][ T7676] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 185.668422][ T7676] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 185.705726][ T7676] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 185.733195][ T7676] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 185.774275][ T7897] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.733'. [ 186.034669][ T7676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.102539][ T7676] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.339668][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.347041][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.481037][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.488341][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.657146][ T7676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.806103][ T7913] syzkaller1: entered promiscuous mode [ 186.816584][ T7913] syzkaller1: entered allmulticast mode [ 187.333156][ T7676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.413030][ T7927] netlink: 112 bytes leftover after parsing attributes in process `syz.4.742'. [ 187.481003][ T7676] veth0_vlan: entered promiscuous mode [ 187.550057][ T7676] veth1_vlan: entered promiscuous mode [ 187.761771][ T7676] veth0_macvtap: entered promiscuous mode [ 187.869231][ T7676] veth1_macvtap: entered promiscuous mode [ 187.999012][ T7676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.047617][ T7676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.102722][ T7676] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.151773][ T7676] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.181058][ T7676] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.225047][ T7676] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.630931][ T7105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.653284][ T7105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.779766][ T7101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.792734][ T7101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.543399][ T5892] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 189.601639][ T5892] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 189.616407][ T5892] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 189.671992][ T5892] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 189.693921][ T5892] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 189.715833][ T5892] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 189.723334][ T5892] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 189.757263][ T5892] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 189.764752][ T5892] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 189.802849][ T5892] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 189.810671][ T5981] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 189.831210][ T5892] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 189.845265][ T5892] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 189.873084][ T5892] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 189.893334][ T5892] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 189.913657][ T5892] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 189.943625][ T5892] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 189.966576][ T5892] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 189.974563][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.984308][ T5981] usb 1-1: Using ep0 maxpacket: 16 [ 190.013783][ T5981] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.028652][ T5892] hid-generic 0002:0004:0009.0012: hidraw0: HID v0.04 Device [syz0] on syz0 [ 190.056747][ T5981] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.085128][ T5981] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 190.119591][ T5981] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 190.172790][ T5981] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.212601][ T5981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 190.245290][ T5981] usb 1-1: SerialNumber: syz [ 190.266251][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.278315][ T5981] hub 1-1:1.0: bad descriptor, ignoring hub [ 190.284278][ T5981] hub 1-1:1.0: probe with driver hub failed with error -5 [ 190.323087][ T5981] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 190.463533][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.647432][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.873941][ T36] bridge_slave_1: left allmulticast mode [ 190.880076][ T36] bridge_slave_1: left promiscuous mode [ 190.894720][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.918290][ T36] bridge_slave_0: left allmulticast mode [ 190.924376][ T36] bridge_slave_0: left promiscuous mode [ 190.951242][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.329459][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.765'. [ 191.936598][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.953914][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.962997][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.991106][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.011075][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.087550][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.769'. [ 192.117598][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.129248][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.139822][ T36] bond0 (unregistering): Released all slaves [ 192.509274][ T24] usb 1-1: USB disconnect, device number 10 [ 192.557218][ T8006] Invalid ELF header magic: != ELF [ 192.929625][ T8018] overlayfs: failed to verify upper root origin [ 193.197053][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 193.243132][ T36] hsr_slave_0: left promiscuous mode [ 193.269799][ T36] hsr_slave_1: left promiscuous mode [ 193.277038][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.284585][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.330384][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.353773][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.397894][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 193.408748][ T24] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 193.425501][ T24] usb 5-1: config 0 has no interface number 0 [ 193.431700][ T24] usb 5-1: config 0 interface 184 has no altsetting 0 [ 193.433481][ T36] veth1_macvtap: left promiscuous mode [ 193.447893][ T36] veth0_macvtap: left promiscuous mode [ 193.453809][ T36] veth1_vlan: left promiscuous mode [ 193.457512][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 193.462262][ T36] veth0_vlan: left promiscuous mode [ 193.473634][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.496804][ T24] usb 5-1: Product: syz [ 193.501030][ T24] usb 5-1: Manufacturer: syz [ 193.515090][ T24] usb 5-1: SerialNumber: syz [ 193.523132][ T24] usb 5-1: config 0 descriptor?? [ 193.557867][ T24] smsc75xx v1.0.0 [ 193.638234][ T977] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 193.805910][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 193.818702][ T977] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 193.836340][ T977] usb 1-1: config 179 has no interface number 0 [ 193.851008][ T977] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 193.875309][ T977] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 193.910109][ T977] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 193.942563][ T977] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 193.992205][ T977] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 194.040501][ T977] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 194.075244][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.103717][ T8029] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 194.115293][ T5832] Bluetooth: hci3: command tx timeout [ 194.243068][ T8040] ======================================================= [ 194.243068][ T8040] WARNING: The mand mount option has been deprecated and [ 194.243068][ T8040] and is ignored by this kernel. Remove the mand [ 194.243068][ T8040] option from the mount to silence this warning. [ 194.243068][ T8040] ======================================================= [ 194.478240][ T5981] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input17 [ 194.524847][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.531563][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.651113][ T8029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.696257][ T8029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.786872][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 194.807984][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 194.835940][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 194.854986][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 194.890942][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 194.913374][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 194.934037][ T24] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 194.969293][ T5893] usb 1-1: USB disconnect, device number 11 [ 194.969335][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 194.981291][ T24] usb 5-1: USB disconnect, device number 10 [ 194.984777][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 195.437960][ T36] team0 (unregistering): Port device team_slave_1 removed [ 195.521017][ T36] team0 (unregistering): Port device team_slave_0 removed [ 196.217208][ T5832] Bluetooth: hci3: command tx timeout [ 196.565285][ T5892] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 196.595274][ T5981] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 196.738954][ T5892] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 196.759004][ T5892] usb 1-1: config 0 has no interface number 0 [ 196.772276][ T5981] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 196.797297][ T5892] usb 1-1: config 0 interface 41 has no altsetting 0 [ 196.804875][ T8071] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 196.809236][ T5981] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 196.812197][ T5893] IPVS: starting estimator thread 0... [ 196.822613][ T5981] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 196.852941][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.859972][ T5892] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 196.894066][ T8069] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 196.910512][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.925451][ T8073] IPVS: using max 27 ests per chain, 64800 per kthread [ 196.938873][ T5981] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.946607][ T5892] usb 1-1: Product: syz [ 196.958523][ T5892] usb 1-1: Manufacturer: syz [ 196.965042][ T5892] usb 1-1: SerialNumber: syz [ 196.994061][ T5892] usb 1-1: config 0 descriptor?? [ 197.340137][ T977] usb 5-1: USB disconnect, device number 11 [ 197.491490][ T8064] bridge_slave_0: left allmulticast mode [ 197.512102][ T8064] bridge_slave_0: left promiscuous mode [ 197.519012][ T8064] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.536573][ T8064] bridge_slave_1: left allmulticast mode [ 197.543803][ T8064] bridge_slave_1: left promiscuous mode [ 197.552521][ T8064] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.583138][ T8064] team0: Port device team_slave_0 removed [ 197.599850][ T8064] team0: Port device team_slave_1 removed [ 197.607475][ T8064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.616837][ T8064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.627324][ T8064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.634795][ T8064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.681792][ T8066] team0: Mode changed to "loadbalance" [ 197.862987][ T5892] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 198.094592][ T7992] chnl_net:caif_netlink_parms(): no params data found [ 198.103983][ T5892] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 198.137130][ T5892] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 198.165704][ T5892] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 198.216636][ T5892] usb 1-1: USB disconnect, device number 12 [ 198.275251][ T5832] Bluetooth: hci3: command tx timeout [ 198.435218][ T30] audit: type=1400 audit(1750816321.287:287): lsm=SMACK fn=smack_task_kill action=denied subject="w" object="_" requested=w pid=8098 comm="syz.1.807" opid=8098 ocomm="syz.1.807" [ 198.729500][ T7992] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.755209][ T7992] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.762498][ T7992] bridge_slave_0: entered allmulticast mode [ 198.811488][ T7992] bridge_slave_0: entered promiscuous mode [ 198.833635][ T7992] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.859503][ T7992] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.897028][ T7992] bridge_slave_1: entered allmulticast mode [ 198.906041][ T7992] bridge_slave_1: entered promiscuous mode [ 199.054200][ T7992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.118586][ T7992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.318926][ T7992] team0: Port device team_slave_0 added [ 199.343348][ T7992] team0: Port device team_slave_1 added [ 199.490886][ T7992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.501671][ T7992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.545964][ T7992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.576627][ T2153] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 199.596958][ T8145] input: syz0 as /devices/virtual/input/input18 [ 199.597721][ T7992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.617908][ T2153] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 199.649699][ T7992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.713116][ T7992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.020511][ T7992] hsr_slave_0: entered promiscuous mode [ 200.056370][ T7992] hsr_slave_1: entered promiscuous mode [ 200.062989][ T7992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.094353][ T7992] Cannot create hsr debugfs directory [ 200.355214][ T5832] Bluetooth: hci3: command tx timeout [ 201.245277][ T5981] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 201.305965][ T7992] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 201.337216][ T7992] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 201.360306][ T7992] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.393467][ T7992] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.418265][ T5981] usb 5-1: config 0 has an invalid interface number: 25 but max is 0 [ 201.439381][ T5981] usb 5-1: config 0 has no interface number 0 [ 201.453375][ T5981] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 201.468755][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.480463][ T5981] usb 5-1: config 0 descriptor?? [ 201.488786][ T5981] cp210x 5-1:0.25: cp210x converter detected [ 201.639640][ T7992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.700962][ T7992] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.728647][ T7095] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.735938][ T7095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.764080][ T8195] dvmrp1: entered allmulticast mode [ 201.808291][ T7095] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.815581][ T7095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.891335][ T5981] cp210x 5-1:0.25: failed to get vendor val 0x000e size 3: -71 [ 201.929862][ T5981] usb 5-1: cp210x converter now attached to ttyUSB0 [ 201.978327][ T5981] usb 5-1: USB disconnect, device number 12 [ 202.011604][ T5981] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 202.042856][ T5981] cp210x 5-1:0.25: device disconnected [ 202.385453][ T7992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.471960][ T7992] veth0_vlan: entered promiscuous mode [ 202.494220][ T7992] veth1_vlan: entered promiscuous mode [ 202.579482][ T7992] veth0_macvtap: entered promiscuous mode [ 202.611252][ T7992] veth1_macvtap: entered promiscuous mode [ 202.643513][ T7992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.674676][ T7992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.701378][ T7992] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.719868][ T7992] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.733626][ T7992] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.747428][ T7992] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.128092][ T7105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.155457][ T7105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.308967][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.364863][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.554034][ T8268] netlink: 96 bytes leftover after parsing attributes in process `syz.0.868'. [ 204.905278][ T30] audit: type=1326 audit(1750816327.757:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8251 comm="syz.3.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7fc00000 [ 204.981951][ T30] audit: type=1326 audit(1750816327.757:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8251 comm="syz.3.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb4698e929 code=0x7fc00000 [ 205.005280][ T30] audit: type=1326 audit(1750816327.757:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8251 comm="syz.3.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7fc00000 [ 205.081145][ T30] audit: type=1326 audit(1750816327.757:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8251 comm="syz.3.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7fc00000 [ 205.137646][ T30] audit: type=1326 audit(1750816327.757:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8251 comm="syz.3.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7fc00000 [ 205.171523][ T7086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.187862][ T30] audit: type=1326 audit(1750816327.757:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8251 comm="syz.3.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7fc00000 [ 205.276816][ T30] audit: type=1326 audit(1750816327.757:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8251 comm="syz.3.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7fc00000 [ 205.367596][ T30] audit: type=1326 audit(1750816327.757:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8251 comm="syz.3.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7fc00000 [ 205.429852][ T30] audit: type=1326 audit(1750816327.757:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8251 comm="syz.3.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7fc00000 [ 205.482168][ T30] audit: type=1326 audit(1750816327.757:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8251 comm="syz.3.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4698e929 code=0x7fc00000 [ 205.740737][ T7086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.790723][ T7086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.861340][ T7086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.004220][ T7086] bridge_slave_1: left allmulticast mode [ 206.010280][ T7086] bridge_slave_1: left promiscuous mode [ 206.016368][ T7086] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.026065][ T7086] bridge_slave_0: left allmulticast mode [ 206.031750][ T7086] bridge_slave_0: left promiscuous mode [ 206.039679][ T7086] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.835968][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 206.837954][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 206.958308][ T7086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.973022][ T7086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.983987][ T7086] bond0 (unregistering): Released all slaves [ 207.030829][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.045798][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.054559][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.066993][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.077255][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.216491][ T8317] chnl_net:caif_netlink_parms(): no params data found [ 208.420514][ T7086] hsr_slave_0: left promiscuous mode [ 208.462241][ T7086] hsr_slave_1: left promiscuous mode [ 208.480850][ T7086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.490968][ T7086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.502849][ T7086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.510963][ T7086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.546837][ T7086] veth1_macvtap: left promiscuous mode [ 208.561183][ T7086] veth0_macvtap: left promiscuous mode [ 208.573639][ T7086] veth1_vlan: left promiscuous mode [ 208.583960][ T7086] veth0_vlan: left promiscuous mode [ 209.155308][ T5836] Bluetooth: hci3: command tx timeout [ 209.649393][ T7086] team0 (unregistering): Port device team_slave_1 removed [ 209.698392][ T7086] team0 (unregistering): Port device team_slave_0 removed [ 209.709314][ T8379] netlink: 44 bytes leftover after parsing attributes in process `syz.1.909'. [ 210.372694][ T8358] vlan2: entered promiscuous mode [ 210.408135][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.909'. [ 210.711493][ T8317] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.731116][ T8317] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.761802][ T8317] bridge_slave_0: entered allmulticast mode [ 210.771791][ T8317] bridge_slave_0: entered promiscuous mode [ 210.787073][ T8317] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.794588][ T8317] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.807653][ T8317] bridge_slave_1: entered allmulticast mode [ 210.820235][ T8317] bridge_slave_1: entered promiscuous mode [ 211.053360][ T8317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.107337][ T8317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.235245][ T5836] Bluetooth: hci3: command tx timeout [ 211.336783][ T8317] team0: Port device team_slave_0 added [ 211.352589][ T8317] team0: Port device team_slave_1 added [ 211.517640][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.524658][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.554576][ T8317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.578894][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.586446][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.683748][ T8317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.923430][ T8317] hsr_slave_0: entered promiscuous mode [ 211.950537][ T8317] hsr_slave_1: entered promiscuous mode [ 211.985957][ T8317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.014250][ T8317] Cannot create hsr debugfs directory [ 213.315388][ T5836] Bluetooth: hci3: command tx timeout [ 213.350786][ T8317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.393013][ T8467] serio: Serial port ptm0 [ 213.417664][ T8317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 213.471699][ T8317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.522850][ T8317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 213.932965][ T8317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.220663][ T8317] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.271899][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.279176][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.499881][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.507218][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.549270][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.961'. [ 214.587500][ T8508] hsr_slave_0: left promiscuous mode [ 214.604318][ T8508] hsr_slave_1: left promiscuous mode [ 214.744079][ T8317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.855310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 214.963847][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 214.963866][ T30] audit: type=1326 audit(1750816337.817:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8518 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb4692ab19 code=0x7ffc0000 [ 215.062118][ T30] audit: type=1326 audit(1750816337.857:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8518 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb4692ab19 code=0x7ffc0000 [ 215.103793][ T8527] kvm: MWAIT instruction emulated as NOP! [ 215.145148][ T30] audit: type=1326 audit(1750816337.867:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8518 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb4692ab19 code=0x7ffc0000 [ 215.248308][ T30] audit: type=1326 audit(1750816337.867:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8518 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb4692ab19 code=0x7ffc0000 [ 215.290269][ T30] audit: type=1326 audit(1750816337.867:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8518 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb4692ab19 code=0x7ffc0000 [ 215.312944][ T30] audit: type=1326 audit(1750816337.867:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8518 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb4692ab19 code=0x7ffc0000 [ 215.379453][ T30] audit: type=1326 audit(1750816337.867:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8518 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb4692ab19 code=0x7ffc0000 [ 215.406413][ T5836] Bluetooth: hci3: command tx timeout [ 215.420601][ T8317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.456574][ T30] audit: type=1326 audit(1750816337.867:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8518 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb4692ab19 code=0x7ffc0000 [ 215.487002][ T30] audit: type=1326 audit(1750816337.867:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8518 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb4692ab19 code=0x7ffc0000 [ 215.509708][ T30] audit: type=1326 audit(1750816337.867:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8518 comm="syz.3.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb4692ab19 code=0x7ffc0000 [ 215.512960][ T8317] veth0_vlan: entered promiscuous mode [ 215.578019][ T8317] veth1_vlan: entered promiscuous mode [ 215.638767][ T8317] veth0_macvtap: entered promiscuous mode [ 215.652240][ T8317] veth1_macvtap: entered promiscuous mode [ 215.676305][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.696215][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.723905][ T8317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.736422][ T8317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.747716][ T8317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.756495][ T8317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.881858][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.895389][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.942770][ T7086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.951533][ T7086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.221897][ T5836] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 216.232476][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: kworker/u9:9 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 216.232511][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.232524][ T5836] Workqueue: hci2 hci_rx_work [ 216.232564][ T5836] Call Trace: [ 216.232573][ T5836] [ 216.232582][ T5836] dump_stack_lvl+0x189/0x250 [ 216.232622][ T5836] ? kernfs_path_from_node+0x2c/0x260 [ 216.232653][ T5836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.232693][ T5836] ? __pfx__printk+0x10/0x10 [ 216.232714][ T5836] ? kernfs_path_from_node+0x2c/0x260 [ 216.232736][ T5836] ? kernfs_path_from_node+0x2c/0x260 [ 216.232762][ T5836] ? kernfs_path_from_node+0x22c/0x260 [ 216.232802][ T5836] ? kernfs_path_from_node+0x2c/0x260 [ 216.232831][ T5836] sysfs_create_dir_ns+0x259/0x280 [ 216.232865][ T5836] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 216.232893][ T5836] ? do_raw_spin_unlock+0x122/0x240 [ 216.232919][ T5836] kobject_add_internal+0x59f/0xb40 [ 216.232949][ T5836] kobject_add+0x155/0x220 [ 216.232986][ T5836] ? __pfx_kobject_add+0x10/0x10 [ 216.233016][ T5836] ? _raw_spin_unlock+0x28/0x50 [ 216.233045][ T5836] ? get_device_parent+0x366/0x3a0 [ 216.233071][ T5836] device_add+0x408/0xb50 [ 216.233097][ T5836] hci_conn_add_sysfs+0xd5/0x1e0 [ 216.233127][ T5836] le_conn_complete_evt+0xc3a/0x1220 [ 216.233167][ T5836] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 216.233190][ T5836] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 216.233223][ T5836] ? __pfx___mutex_lock+0x10/0x10 [ 216.233246][ T5836] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 216.233277][ T5836] ? skb_pull_data+0xfb/0x200 [ 216.233309][ T5836] hci_le_enh_conn_complete_evt+0x189/0x470 [ 216.233333][ T5836] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 216.233357][ T5836] hci_event_packet+0x78f/0x1200 [ 216.233389][ T5836] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 216.233411][ T5836] ? __pfx_hci_event_packet+0x10/0x10 [ 216.233439][ T5836] ? kcov_remote_start+0x4d3/0x7f0 [ 216.233460][ T5836] ? warn_bogus_irq_restore+0x30/0x40 [ 216.233491][ T5836] ? hci_send_to_monitor+0xe2/0x570 [ 216.233517][ T5836] hci_rx_work+0x46a/0xe80 [ 216.233556][ T5836] ? process_scheduled_works+0x9ef/0x17b0 [ 216.233586][ T5836] process_scheduled_works+0xade/0x17b0 [ 216.233651][ T5836] ? __pfx_process_scheduled_works+0x10/0x10 [ 216.233700][ T5836] worker_thread+0x8a0/0xda0 [ 216.233730][ T5836] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 216.233764][ T5836] ? __kthread_parkme+0x7b/0x200 [ 216.233802][ T5836] kthread+0x70e/0x8a0 [ 216.233825][ T5836] ? __pfx_worker_thread+0x10/0x10 [ 216.233851][ T5836] ? __pfx_kthread+0x10/0x10 [ 216.233874][ T5836] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.233899][ T5836] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.233923][ T5836] ? __pfx_kthread+0x10/0x10 [ 216.233945][ T5836] ret_from_fork+0x3fc/0x770 [ 216.233974][ T5836] ? __pfx_ret_from_fork+0x10/0x10 [ 216.234003][ T5836] ? __switch_to_asm+0x39/0x70 [ 216.234018][ T5836] ? __switch_to_asm+0x33/0x70 [ 216.234034][ T5836] ? __pfx_kthread+0x10/0x10 [ 216.234055][ T5836] ret_from_fork_asm+0x1a/0x30 [ 216.234094][ T5836] [ 216.234127][ T5836] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 216.564725][ T5836] Bluetooth: hci2: failed to register connection device [ 217.353369][ T8572] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 217.554461][ T3514] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.077722][ T3514] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.390601][ T3514] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.451849][ T3514] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.558799][ T3514] bridge_slave_1: left allmulticast mode [ 218.564524][ T3514] bridge_slave_1: left promiscuous mode [ 218.599833][ T3514] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.632539][ T3514] bridge_slave_0: left allmulticast mode [ 218.657965][ T3514] bridge_slave_0: left promiscuous mode [ 218.685246][ T3514] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.155243][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 219.252972][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.270972][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.280783][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.317175][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.332810][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 219.340866][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.356163][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 219.379171][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.387345][ T24] usb 5-1: Product: syz [ 219.391536][ T24] usb 5-1: Manufacturer: syz [ 219.396891][ T24] usb 5-1: SerialNumber: syz [ 219.409009][ T24] usb 5-1: config 0 descriptor?? [ 219.418140][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 219.777734][ T3514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.788933][ T3514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.800420][ T3514] bond0 (unregistering): Released all slaves [ 220.305727][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 220.325639][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 220.364679][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 220.385353][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 220.398078][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 220.404451][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 220.410764][ T3514] hsr_slave_0: left promiscuous mode [ 220.436936][ T3514] hsr_slave_1: left promiscuous mode [ 220.446471][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.453974][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.469627][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.478546][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.521751][ T3514] veth1_macvtap: left promiscuous mode [ 220.529747][ T3514] veth0_macvtap: left promiscuous mode [ 220.540610][ T3514] veth1_vlan: left promiscuous mode [ 220.546166][ T3514] veth0_vlan: left promiscuous mode [ 220.638369][ T24] gspca_sonixj: reg_w1 err -71 [ 220.696326][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 220.702399][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 220.713117][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 220.720371][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 220.726808][ T24] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 220.750261][ T24] usb 5-1: USB disconnect, device number 13 [ 221.104801][ T8616] ceph: No mds server is up or the cluster is laggy [ 221.115279][ T8621] ceph: No mds server is up or the cluster is laggy [ 221.400689][ T5836] Bluetooth: hci3: command tx timeout [ 221.478387][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 221.554827][ T3514] team0 (unregistering): Port device team_slave_1 removed [ 221.642765][ T3514] team0 (unregistering): Port device team_slave_0 removed [ 221.738988][ T8658] binder: 8657:8658 ioctl c0306201 2000000003c0 returned -14 [ 222.244649][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 222.282985][ T8671] loop4: detected capacity change from 0 to 7 [ 222.293374][ T8671] Dev loop4: unable to read RDB block 7 [ 222.305420][ T8671] loop4: unable to read partition table [ 222.313154][ T8671] loop4: partition table beyond EOD, truncated [ 222.335420][ T8671] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 222.425293][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 222.434574][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 222.448917][ T24] usb 1-1: config 0 has an invalid interface number: 245 but max is 0 [ 222.459199][ T24] usb 1-1: config 0 has no interface number 0 [ 222.479827][ T24] usb 1-1: string descriptor 0 read error: -22 [ 222.489214][ T24] usb 1-1: New USB device found, idVendor=10b8, idProduct=1bb2, bcdDevice= 0.c7 [ 222.500765][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.518691][ T24] usb 1-1: config 0 descriptor?? [ 222.732219][ T8632] syz_tun: entered promiscuous mode [ 222.737889][ T8632] syz_tun: entered allmulticast mode [ 222.745623][ T24] dvb-usb: found a 'DiBcom NIM7090 reference design' in cold state, will try to load a firmware [ 222.839804][ T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 222.855402][ T24] dib0700: firmware download failed at 7 with -22 [ 222.872832][ T24] usb 1-1: USB disconnect, device number 13 [ 222.963594][ T8588] chnl_net:caif_netlink_parms(): no params data found [ 223.165759][ T8588] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.173485][ T8588] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.181501][ T8588] bridge_slave_0: entered allmulticast mode [ 223.190279][ T8588] bridge_slave_0: entered promiscuous mode [ 223.204485][ T8588] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.212537][ T8588] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.220483][ T8588] bridge_slave_1: entered allmulticast mode [ 223.247629][ T8588] bridge_slave_1: entered promiscuous mode [ 223.323200][ T8588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.335219][ T24] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 223.348118][ T8588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.424473][ T8588] team0: Port device team_slave_0 added [ 223.438740][ T8588] team0: Port device team_slave_1 added [ 223.475558][ T5832] Bluetooth: hci3: command tx timeout [ 223.507655][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 223.539571][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 223.540082][ T8588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.555181][ T24] usb 1-1: config 0 has an invalid interface number: 245 but max is 0 [ 223.569195][ T24] usb 1-1: config 0 has no interface number 0 [ 223.579866][ T8588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.586885][ T24] usb 1-1: New USB device found, idVendor=10b8, idProduct=1bb2, bcdDevice= 0.c7 [ 223.610492][ T8588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.629352][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.638155][ T24] usb 1-1: SerialNumber: syz [ 223.652854][ T24] usb 1-1: config 0 descriptor?? [ 223.657221][ T8588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.668618][ T8588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.709807][ T8588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.838514][ T8588] hsr_slave_0: entered promiscuous mode [ 223.845700][ T8588] hsr_slave_1: entered promiscuous mode [ 223.852226][ T8588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.870823][ T8588] Cannot create hsr debugfs directory [ 224.272765][ T24] dvb-usb: found a 'DiBcom NIM7090 reference design' in warm state. [ 224.291320][ T24] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 224.302519][ T24] dvbdev: DVB: registering new adapter (DiBcom NIM7090 reference design) [ 224.312509][ T24] usb 1-1: media controller created [ 224.324443][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.365467][ T5893] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 224.535177][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 224.575956][ T5893] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.584456][ T5893] usb 4-1: config 0 has no interface number 0 [ 224.656303][ T5893] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 224.676101][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.702328][ T7086] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.704992][ T5893] usb 4-1: Product: syz [ 224.743837][ T5893] usb 4-1: Manufacturer: syz [ 224.775624][ T5893] usb 4-1: SerialNumber: syz [ 224.781599][ T24] DVB: Unable to find symbol dib7000p_attach() [ 224.795863][ T24] dvb-usb: no frontend was attached by 'DiBcom NIM7090 reference design' [ 224.805847][ T5893] usb 4-1: config 0 descriptor?? [ 224.814123][ T7086] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.816990][ T5893] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 224.865853][ T5893] usb 4-1: selecting invalid altsetting 1 [ 224.871665][ T5893] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 224.912785][ T5893] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 224.953346][ T5893] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 224.963540][ T5893] usb 4-1: media controller created [ 224.967062][ T7086] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.999931][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 225.018749][ T24] Registered IR keymap rc-empty [ 225.024000][ T24] dvb-usb: could not initialize remote control. [ 225.032319][ T8707] ------------[ cut here ]------------ [ 225.038312][ T8707] usb 1-1: BOGUS control dir, pipe 80000e80 doesn't match bRequestType c0 [ 225.066279][ T8707] WARNING: CPU: 0 PID: 8707 at drivers/usb/core/urb.c:413 usb_submit_urb+0x115d/0x1890 [ 225.076238][ T8707] Modules linked in: [ 225.080383][ T8707] CPU: 0 UID: 0 PID: 8707 Comm: syz.3.1037 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 225.086335][ T24] dvb-usb: DiBcom NIM7090 reference design successfully initialized and connected. [ 225.092719][ T8707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.103047][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.112177][ T8707] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 225.126563][ T8707] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 c0 57 33 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 94 29 6a fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 225.146419][ T8707] RSP: 0018:ffffc90003fff850 EFLAGS: 00010246 [ 225.152552][ T8707] RAX: d10a21ca04b51d00 RBX: ffff888027d64500 RCX: 0000000000080000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 225.161341][ T8707] RDX: ffffc9000c77a000 RSI: 000000000000397f RDI: 0000000000003980 [ 225.169625][ T8707] RBP: 1ffff1100ad8b974 R08: 0000000000000003 R09: 0000000000000004 [ 225.177811][ T8707] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff888056c5cba0 [ 225.185991][ T8707] R13: dffffc0000000000 R14: 0000000080000e80 R15: ffff888020aca3a0 [ 225.194292][ T8707] FS: 00007fbb4776c6c0(0000) GS:ffff888125c83000(0000) knlGS:0000000000000000 [ 225.203520][ T8707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.210222][ T8707] CR2: 00007fc8c07b6038 CR3: 0000000078820000 CR4: 00000000003526f0 [ 225.218328][ T8707] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144 [ 225.226432][ T8707] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 225.234462][ T8707] Call Trace: [ 225.242573][ T8707] [ 225.246835][ T8707] usb_start_wait_urb+0x114/0x4c0 [ 225.252028][ T8707] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 225.257744][ T8707] usb_control_msg+0x232/0x3e0 [ 225.262570][ T8707] dib0700_i2c_xfer+0xba7/0xf70 [ 225.267567][ T8707] __i2c_transfer+0x874/0x2170 [ 225.272414][ T8707] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.277746][ T8707] ? __pfx___i2c_transfer+0x10/0x10 [ 225.283089][ T8707] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 225.288573][ T8707] ? i2c_transfer+0x11d/0x3a0 [ 225.293553][ T8707] i2c_transfer+0x25b/0x3a0 [ 225.298446][ T8707] ? __pfx_i2c_transfer+0x10/0x10 [ 225.303539][ T8707] ? _copy_from_user+0x94/0xb0 [ 225.308472][ T8707] i2cdev_ioctl_rdwr+0x460/0x740 [ 225.313480][ T8707] i2cdev_ioctl+0x64b/0x7f0 [ 225.319174][ T8707] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 225.324280][ T8707] ? __fget_files+0x3a0/0x420 [ 225.329119][ T8707] ? __fget_files+0x2a/0x420 [ 225.333856][ T8707] ? bpf_lsm_file_ioctl+0x9/0x20 [ 225.339291][ T8707] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 225.344370][ T8707] __se_sys_ioctl+0xf9/0x170 [ 225.349085][ T8707] do_syscall_64+0xfa/0x3b0 [ 225.353638][ T8707] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.358947][ T8707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.365147][ T8707] ? clear_bhb_loop+0x60/0xb0 [ 225.369900][ T8707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.376843][ T8707] RIP: 0033:0x7fbb4698e929 [ 225.381318][ T8707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.401507][ T8707] RSP: 002b:00007fbb4776c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.410398][ T8707] RAX: ffffffffffffffda RBX: 00007fbb46bb5fa0 RCX: 00007fbb4698e929 [ 225.418509][ T8707] RDX: 0000200000000280 RSI: 0000000000000707 RDI: 0000000000000006 [ 225.426624][ T8707] RBP: 00007fbb46a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 225.434641][ T8707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.442817][ T8707] R13: 0000000000000000 R14: 00007fbb46bb5fa0 R15: 00007ffd80bd7868 [ 225.450901][ T8707] [ 225.453973][ T8707] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 225.461288][ T8707] CPU: 0 UID: 0 PID: 8707 Comm: syz.3.1037 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 225.473274][ T8707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.483775][ T8707] Call Trace: [ 225.487064][ T8707] [ 225.490181][ T8707] dump_stack_lvl+0x99/0x250 [ 225.494886][ T8707] ? __asan_memcpy+0x40/0x70 [ 225.499490][ T8707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.504705][ T8707] ? __pfx__printk+0x10/0x10 [ 225.509320][ T8707] panic+0x2db/0x790 [ 225.513241][ T8707] ? __pfx_panic+0x10/0x10 [ 225.517690][ T8707] __warn+0x31b/0x4b0 [ 225.521746][ T8707] ? usb_submit_urb+0x115d/0x1890 [ 225.526787][ T8707] ? usb_submit_urb+0x115d/0x1890 [ 225.531823][ T8707] report_bug+0x2be/0x4f0 [ 225.536268][ T8707] ? usb_submit_urb+0x115d/0x1890 [ 225.541314][ T8707] ? usb_submit_urb+0x115d/0x1890 [ 225.546353][ T8707] ? usb_submit_urb+0x115f/0x1890 [ 225.551394][ T8707] handle_bug+0x84/0x160 [ 225.555650][ T8707] exc_invalid_op+0x1a/0x50 [ 225.560163][ T8707] asm_exc_invalid_op+0x1a/0x20 [ 225.565034][ T8707] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 225.570770][ T8707] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 c0 57 33 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 94 29 6a fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 225.590389][ T8707] RSP: 0018:ffffc90003fff850 EFLAGS: 00010246 [ 225.596483][ T8707] RAX: d10a21ca04b51d00 RBX: ffff888027d64500 RCX: 0000000000080000 [ 225.604565][ T8707] RDX: ffffc9000c77a000 RSI: 000000000000397f RDI: 0000000000003980 [ 225.612551][ T8707] RBP: 1ffff1100ad8b974 R08: 0000000000000003 R09: 0000000000000004 [ 225.620618][ T8707] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff888056c5cba0 [ 225.628599][ T8707] R13: dffffc0000000000 R14: 0000000080000e80 R15: ffff888020aca3a0 [ 225.636614][ T8707] usb_start_wait_urb+0x114/0x4c0 [ 225.641661][ T8707] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 225.647242][ T8707] usb_control_msg+0x232/0x3e0 [ 225.652029][ T8707] dib0700_i2c_xfer+0xba7/0xf70 [ 225.656918][ T8707] __i2c_transfer+0x874/0x2170 [ 225.661696][ T8707] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.667013][ T8707] ? __pfx___i2c_transfer+0x10/0x10 [ 225.672226][ T8707] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 225.677613][ T8707] ? i2c_transfer+0x11d/0x3a0 [ 225.682302][ T8707] i2c_transfer+0x25b/0x3a0 [ 225.686827][ T8707] ? __pfx_i2c_transfer+0x10/0x10 [ 225.691867][ T8707] ? _copy_from_user+0x94/0xb0 [ 225.696643][ T8707] i2cdev_ioctl_rdwr+0x460/0x740 [ 225.701606][ T8707] i2cdev_ioctl+0x64b/0x7f0 [ 225.706122][ T8707] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 225.711184][ T8707] ? __fget_files+0x3a0/0x420 [ 225.715923][ T8707] ? __fget_files+0x2a/0x420 [ 225.720553][ T8707] ? bpf_lsm_file_ioctl+0x9/0x20 [ 225.725596][ T8707] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 225.730640][ T8707] __se_sys_ioctl+0xf9/0x170 [ 225.735246][ T8707] do_syscall_64+0xfa/0x3b0 [ 225.739768][ T8707] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.744989][ T8707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.751070][ T8707] ? clear_bhb_loop+0x60/0xb0 [ 225.755760][ T8707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.761676][ T8707] RIP: 0033:0x7fbb4698e929 [ 225.766114][ T8707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.785732][ T8707] RSP: 002b:00007fbb4776c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.794421][ T8707] RAX: ffffffffffffffda RBX: 00007fbb46bb5fa0 RCX: 00007fbb4698e929 [ 225.802405][ T8707] RDX: 0000200000000280 RSI: 0000000000000707 RDI: 0000000000000006 [ 225.810394][ T8707] RBP: 00007fbb46a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 225.818394][ T8707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.826406][ T8707] R13: 0000000000000000 R14: 00007fbb46bb5fa0 R15: 00007ffd80bd7868 [ 225.834504][ T8707] [ 225.837854][ T8707] Kernel Offset: disabled [ 225.842186][ T8707] Rebooting in 86400 seconds..