last executing test programs: 5.267448949s ago: executing program 2 (id=344): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3a66505}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000005c0)={0x4, 0x8, 0x7f, 0x0, 0xd}) 5.04243692s ago: executing program 2 (id=346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2005, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 4.66240716s ago: executing program 2 (id=348): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000380)={r2}, &(0x7f0000000400)=0x8) 4.366606071s ago: executing program 2 (id=350): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000002c0)={0x20, 0x9, 0x4, "67c8a427"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.827864363s ago: executing program 1 (id=354): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 3.634731546s ago: executing program 4 (id=355): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x40, 0x1, 0x0, 0x0, "ce2a4fa7a0aa108b"}}, 0x48}}, 0x40884) 3.571145978s ago: executing program 1 (id=356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28102) write$sndseq(r1, 0x0, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 3.467267019s ago: executing program 4 (id=357): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf25040000001800018014000200766c616e310000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000006) 3.114706101s ago: executing program 4 (id=359): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = socket(0x40000000015, 0x5, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.517848375s ago: executing program 1 (id=368): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000340)={r1}) 2.298436001s ago: executing program 1 (id=372): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "01ff"}, @main=@item_4={0x3, 0x0, 0x0, "e7e03604"}, @local=@item_012={0x2, 0x2, 0x2, '\x00\b'}, @global=@item_4={0x3, 0x1, 0x2, "0200"}, @main=@item_4={0x3, 0x0, 0x8, "0400"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) 2.175699302s ago: executing program 3 (id=373): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002]}, 0x45c) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000000c0)={'syz1\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0x0, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x9, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2002, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x402, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x3c4, 0x2, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x10000, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0x6, 0x633, 0x20d, 0x9, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x2, 0x17, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x81, 0x7, 0xa8a, 0x4, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0xfffffff8, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x6, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x4, 0x401, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x656, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0xff, 0x1ff, 0x8, 0x431, 0x6, 0x40000005, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) 2.175200086s ago: executing program 4 (id=374): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x0, 0xe1d9, 0x1101, 0xff}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x2, 0x6, 0x1101, 0x1}) 2.039753186s ago: executing program 4 (id=376): fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x10e) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES32=r1], 0x0) 2.002941809s ago: executing program 2 (id=377): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 1.96164614s ago: executing program 3 (id=378): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'virt_wifi0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, r2, 0x267a4e37}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000) 1.820066186s ago: executing program 0 (id=379): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x5) 1.714356366s ago: executing program 0 (id=380): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00769aff95595915303d74ffdeffff000400"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.577997765s ago: executing program 0 (id=381): ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000140)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @a}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="931c00007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 1.577080946s ago: executing program 3 (id=382): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, &(0x7f0000000180)=0x2) 757.33332ms ago: executing program 3 (id=383): r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x9471) lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180), &(0x7f0000000000)=@ng={0x4, 0xd}, 0x2, 0x1) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x0) 495.828648ms ago: executing program 0 (id=384): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 486.017854ms ago: executing program 3 (id=385): mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) acct(&(0x7f0000000040)='./bus\x00') 374.113076ms ago: executing program 1 (id=386): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x0) 287.961394ms ago: executing program 4 (id=387): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 266.501082ms ago: executing program 0 (id=388): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="11"], 0x11) 232.537298ms ago: executing program 3 (id=389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 152.4728ms ago: executing program 2 (id=390): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="cc", 0x1}], 0x1}}], 0x1, 0x24008804) accept4(r1, 0x0, 0x0, 0x800) 86.619984ms ago: executing program 1 (id=391): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) close(0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) 0s ago: executing program 0 (id=392): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x5000009) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) inotify_add_watch(r0, &(0x7f0000000340)='./file0\x00', 0x203) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts. [ 81.973471][ T5804] cgroup: Unknown subsys name 'net' [ 82.109204][ T5804] cgroup: Unknown subsys name 'cpuset' [ 82.118705][ T5804] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.785537][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.033601][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.044852][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.052821][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.085273][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.092854][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.101127][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.110197][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.117571][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.125102][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.132628][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.140454][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.165344][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.194890][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.202345][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.211877][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.219532][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.219799][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.234051][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.242669][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.244095][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.258764][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.266147][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.268554][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.275189][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.288018][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.973725][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 89.049819][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 89.107466][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 89.151129][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 89.249623][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 89.390232][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.399162][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.408246][ T5814] bridge_slave_0: entered allmulticast mode [ 89.417368][ T5814] bridge_slave_0: entered promiscuous mode [ 89.434163][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.441366][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.448855][ T5814] bridge_slave_1: entered allmulticast mode [ 89.456996][ T5814] bridge_slave_1: entered promiscuous mode [ 89.558197][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.565475][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.572792][ T5821] bridge_slave_0: entered allmulticast mode [ 89.580389][ T5821] bridge_slave_0: entered promiscuous mode [ 89.588118][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.595372][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.602564][ T5818] bridge_slave_0: entered allmulticast mode [ 89.610013][ T5818] bridge_slave_0: entered promiscuous mode [ 89.635552][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.665158][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.672326][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.680743][ T5821] bridge_slave_1: entered allmulticast mode [ 89.688893][ T5821] bridge_slave_1: entered promiscuous mode [ 89.707867][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.715503][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.722690][ T5818] bridge_slave_1: entered allmulticast mode [ 89.730201][ T5818] bridge_slave_1: entered promiscuous mode [ 89.755436][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.790951][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.798397][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.806252][ T5828] bridge_slave_0: entered allmulticast mode [ 89.813495][ T5828] bridge_slave_0: entered promiscuous mode [ 89.839363][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.891457][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.899647][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.907803][ T5819] bridge_slave_0: entered allmulticast mode [ 89.916327][ T5819] bridge_slave_0: entered promiscuous mode [ 89.926609][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.933734][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.941022][ T5828] bridge_slave_1: entered allmulticast mode [ 89.948346][ T5828] bridge_slave_1: entered promiscuous mode [ 89.957997][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.970247][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.982550][ T5814] team0: Port device team_slave_0 added [ 89.989189][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.996723][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.004100][ T5819] bridge_slave_1: entered allmulticast mode [ 90.011738][ T5819] bridge_slave_1: entered promiscuous mode [ 90.060993][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.084961][ T5814] team0: Port device team_slave_1 added [ 90.133963][ T5821] team0: Port device team_slave_0 added [ 90.172590][ T5818] team0: Port device team_slave_0 added [ 90.197615][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.211846][ T5821] team0: Port device team_slave_1 added [ 90.218823][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.228995][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.255463][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.269310][ T5818] team0: Port device team_slave_1 added [ 90.275308][ T51] Bluetooth: hci2: command tx timeout [ 90.294881][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.306730][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.349432][ T51] Bluetooth: hci4: command tx timeout [ 90.359404][ T5817] Bluetooth: hci3: command tx timeout [ 90.359418][ T5826] Bluetooth: hci0: command tx timeout [ 90.359695][ T5826] Bluetooth: hci1: command tx timeout [ 90.379967][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.387163][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.413517][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.447548][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.454718][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.482527][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.497804][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.534070][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.541207][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.567219][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.580715][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.588547][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.615162][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.627656][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.634853][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.661520][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.690641][ T5819] team0: Port device team_slave_0 added [ 90.701394][ T5828] team0: Port device team_slave_0 added [ 90.742955][ T5819] team0: Port device team_slave_1 added [ 90.753195][ T5828] team0: Port device team_slave_1 added [ 90.823989][ T5814] hsr_slave_0: entered promiscuous mode [ 90.830682][ T5814] hsr_slave_1: entered promiscuous mode [ 90.895795][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.903349][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.930520][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.948574][ T5821] hsr_slave_0: entered promiscuous mode [ 90.955134][ T5821] hsr_slave_1: entered promiscuous mode [ 90.961247][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.969099][ T5821] Cannot create hsr debugfs directory [ 90.989685][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.996929][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.023325][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.035751][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.042724][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.068811][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.086642][ T5818] hsr_slave_0: entered promiscuous mode [ 91.093108][ T5818] hsr_slave_1: entered promiscuous mode [ 91.099504][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.107134][ T5818] Cannot create hsr debugfs directory [ 91.123473][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.130627][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.156923][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.322569][ T5828] hsr_slave_0: entered promiscuous mode [ 91.329095][ T5828] hsr_slave_1: entered promiscuous mode [ 91.335514][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.343090][ T5828] Cannot create hsr debugfs directory [ 91.468963][ T5819] hsr_slave_0: entered promiscuous mode [ 91.478433][ T5819] hsr_slave_1: entered promiscuous mode [ 91.489809][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.497480][ T5819] Cannot create hsr debugfs directory [ 91.876040][ T9] cfg80211: failed to load regulatory.db [ 91.998015][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.020347][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.041496][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.061622][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.109142][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.124165][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.151968][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.172827][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.228519][ T5818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.247120][ T5818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.259375][ T5818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.289862][ T5818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.347517][ T5826] Bluetooth: hci2: command tx timeout [ 92.424654][ T5826] Bluetooth: hci1: command tx timeout [ 92.425640][ T51] Bluetooth: hci4: command tx timeout [ 92.430119][ T5826] Bluetooth: hci3: command tx timeout [ 92.435770][ T5832] Bluetooth: hci0: command tx timeout [ 92.454523][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.480920][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.488750][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.500198][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.529593][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.623646][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.659247][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.672252][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.691220][ T4106] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.698883][ T4106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.712906][ T4106] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.720109][ T4106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.729886][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.743320][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.803992][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.893494][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.919352][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.938105][ T4469] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.945305][ T4469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.955203][ T4469] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.962409][ T4469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.998136][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.116446][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.198685][ T4469] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.206076][ T4469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.223467][ T4469] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.230683][ T4469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.256229][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.337128][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.409304][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.436668][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.474006][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.483565][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.490714][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.511416][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.518679][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.530823][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.538137][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.598153][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.605359][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.835020][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.883008][ T5814] veth0_vlan: entered promiscuous mode [ 93.933717][ T5814] veth1_vlan: entered promiscuous mode [ 93.952445][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.060660][ T5814] veth0_macvtap: entered promiscuous mode [ 94.104687][ T5814] veth1_macvtap: entered promiscuous mode [ 94.153055][ T5818] veth0_vlan: entered promiscuous mode [ 94.198602][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.213632][ T5818] veth1_vlan: entered promiscuous mode [ 94.253521][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.303306][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.319587][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.328812][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.343747][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.427529][ T5832] Bluetooth: hci2: command tx timeout [ 94.458535][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.503874][ T5818] veth0_macvtap: entered promiscuous mode [ 94.506482][ T5832] Bluetooth: hci0: command tx timeout [ 94.512548][ T51] Bluetooth: hci4: command tx timeout [ 94.515125][ T5817] Bluetooth: hci3: command tx timeout [ 94.520431][ T5826] Bluetooth: hci1: command tx timeout [ 94.548972][ T5818] veth1_macvtap: entered promiscuous mode [ 94.672336][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.683703][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.701722][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.719200][ T5828] veth0_vlan: entered promiscuous mode [ 94.755433][ T5828] veth1_vlan: entered promiscuous mode [ 94.765469][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.776728][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.786617][ T5818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.800839][ T5818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.809749][ T5818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.819834][ T5818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.881303][ T5821] veth0_vlan: entered promiscuous mode [ 94.936708][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.939719][ T5821] veth1_vlan: entered promiscuous mode [ 94.950343][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.981176][ T5819] veth0_vlan: entered promiscuous mode [ 95.012987][ T5828] veth0_macvtap: entered promiscuous mode [ 95.058516][ T5828] veth1_macvtap: entered promiscuous mode [ 95.077169][ T5819] veth1_vlan: entered promiscuous mode [ 95.105997][ T5814] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.144327][ T4469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.181400][ T4469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.221024][ T5821] veth0_macvtap: entered promiscuous mode [ 95.301564][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.313639][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.317781][ T5821] veth1_macvtap: entered promiscuous mode [ 95.327178][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.360572][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.406866][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.416950][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.438006][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.455911][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.470769][ T5819] veth0_macvtap: entered promiscuous mode [ 95.499235][ T5819] veth1_macvtap: entered promiscuous mode [ 95.516538][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.562050][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.634922][ T5821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.643680][ T5821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.670085][ T5821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.681317][ T5821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.736510][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.821540][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.871207][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.875321][ T5819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.889956][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.894980][ T5819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.906700][ T5819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.916557][ T5819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.043984][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.059232][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.085765][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.098043][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.191366][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.217194][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.247075][ T5822] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.269463][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.307810][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.379026][ T4469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.393127][ T4469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.434602][ T5822] usb 4-1: Using ep0 maxpacket: 16 [ 96.449751][ T5822] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 96.505097][ T5826] Bluetooth: hci2: command tx timeout [ 96.511222][ T5822] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 96.546845][ T5930] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.557287][ T5872] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.575504][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.585471][ T5826] Bluetooth: hci1: command tx timeout [ 96.592371][ T5826] Bluetooth: hci4: command tx timeout [ 96.594571][ T51] Bluetooth: hci0: command tx timeout [ 96.598786][ T5832] Bluetooth: hci3: command tx timeout [ 96.664151][ T5822] usb 4-1: config 0 descriptor?? [ 96.742468][ T5822] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 96.765008][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 96.786732][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.823740][ T5872] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 96.874080][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.953487][ T5872] usb 2-1: config 0 descriptor?? [ 97.267541][ T5822] bcm5974 4-1:0.0: could not read from device [ 97.294897][ T5172] bcm5974 4-1:0.0: could not read from device [ 97.315497][ T5822] input: failed to attach handler mousedev to device input5, error: -5 [ 97.339252][ T5822] usb 4-1: USB disconnect, device number 2 [ 97.347271][ T5172] bcm5974 4-1:0.0: could not read from device [ 97.397751][ T5872] hid (null): global environment stack underflow [ 97.456857][ T5872] mcp2221 0003:04D8:00DD.0001: global environment stack underflow [ 97.478537][ T5872] mcp2221 0003:04D8:00DD.0001: item 0 0 1 11 parsing failed [ 97.502819][ T5872] mcp2221 0003:04D8:00DD.0001: can't parse reports [ 97.546273][ T5872] mcp2221 0003:04D8:00DD.0001: probe with driver mcp2221 failed with error -22 [ 97.627720][ T5942] veth3: entered promiscuous mode [ 97.650787][ T5907] usb 2-1: USB disconnect, device number 2 [ 99.169635][ T5990] Bluetooth: MGMT ver 1.23 [ 99.384608][ T5872] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 99.565100][ T5872] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 99.573339][ T5872] usb 5-1: config 0 has no interface number 0 [ 99.620872][ T5872] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 99.634642][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.645461][ T5872] usb 5-1: Product: syz [ 99.649672][ T5872] usb 5-1: Manufacturer: syz [ 99.662343][ T5872] usb 5-1: SerialNumber: syz [ 99.684238][ T5872] usb 5-1: config 0 descriptor?? [ 100.561186][ T10] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 100.720112][ T5872] usb 5-1: non-Atmel transceiver xxxx3800 [ 100.769354][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 100.798795][ T10] usb 3-1: config 0 has no interface number 0 [ 100.829443][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 100.869926][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 100.892674][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 100.924278][ T5872] usb 5-1: Firmware version (0.0) predates our first public release. [ 100.934830][ T5822] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.953021][ T5872] usb 5-1: Please update to version 0.2 or newer [ 100.959611][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 100.983380][ T5872] usb 5-1: atusb_probe: initialization failed, error = -19 [ 100.993278][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 101.022764][ T5872] usb 5-1: USB disconnect, device number 2 [ 101.043666][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 101.080154][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 101.082386][ T6028] netlink: 36 bytes leftover after parsing attributes in process `syz.3.47'. [ 101.101123][ T5822] usb 2-1: Using ep0 maxpacket: 16 [ 101.104483][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.137422][ T5822] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 101.158484][ T10] usb 3-1: config 0 descriptor?? [ 101.158570][ T5822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.198694][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 101.212129][ T5822] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.215561][ T6018] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 101.246579][ T5822] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.263712][ T6018] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 101.264681][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.301333][ T5822] usb 2-1: Product: syz [ 101.309762][ T5822] usb 2-1: Manufacturer: syz [ 101.314403][ T5822] usb 2-1: SerialNumber: syz [ 101.361821][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 101.748523][ T10] usb 3-1: USB disconnect, device number 2 [ 101.748608][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 101.779061][ T6036] input: syz0 as /devices/virtual/input/input6 [ 101.781614][ T5822] usb 2-1: 0:2 : does not exist [ 101.788257][ T6033] process 'syz.4.50' launched './file1' with NULL argv: empty string added [ 101.801843][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 102.418334][ T5822] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 102.533490][ T5822] usb 2-1: USB disconnect, device number 3 [ 102.628190][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.665155][ T6054] warning: `syz.0.58' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.690101][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 102.880195][ T10] usb 4-1: config 0 has an invalid interface number: 139 but max is 0 [ 102.908631][ T10] usb 4-1: config 0 has no interface number 0 [ 102.951276][ T10] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 102.961945][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.974116][ T10] usb 4-1: Product: syz [ 102.980712][ T10] usb 4-1: Manufacturer: syz [ 102.992178][ T10] usb 4-1: SerialNumber: syz [ 103.005729][ T10] usb 4-1: config 0 descriptor?? [ 103.489782][ T10] mct_u232 4-1:0.139: MCT U232 converter detected [ 103.526693][ T10] mct_u232 ttyUSB0: expected endpoint missing [ 103.570663][ T10] usb 4-1: USB disconnect, device number 3 [ 103.602376][ T10] mct_u232 4-1:0.139: device disconnected [ 104.465470][ T6088] syz.1.73: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 104.517648][ T6088] CPU: 1 UID: 0 PID: 6088 Comm: syz.1.73 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 104.517679][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.517700][ T6088] Call Trace: [ 104.517709][ T6088] [ 104.517723][ T6088] dump_stack_lvl+0x189/0x250 [ 104.517767][ T6088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.517796][ T6088] ? __pfx__printk+0x10/0x10 [ 104.517829][ T6088] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 104.517857][ T6088] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 104.517888][ T6088] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 104.517917][ T6088] warn_alloc+0x214/0x310 [ 104.517949][ T6088] ? stack_depot_save_flags+0x429/0x900 [ 104.517979][ T6088] ? __pfx_warn_alloc+0x10/0x10 [ 104.518011][ T6088] ? kasan_save_track+0x4f/0x80 [ 104.518036][ T6088] ? xskq_create+0x56/0x170 [ 104.518056][ T6088] ? xsk_init_queue+0xb0/0x110 [ 104.518074][ T6088] ? xsk_setsockopt+0x43f/0x710 [ 104.518090][ T6088] ? do_sock_setsockopt+0x25a/0x3e0 [ 104.518112][ T6088] ? __x64_sys_setsockopt+0x18b/0x220 [ 104.518134][ T6088] ? do_syscall_64+0xf6/0x220 [ 104.518155][ T6088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.518182][ T6088] __vmalloc_node_range_noprof+0x125/0x1340 [ 104.518259][ T6088] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.518291][ T6088] ? xskq_create+0x56/0x170 [ 104.518313][ T6088] ? __kasan_kmalloc+0x93/0xb0 [ 104.518341][ T6088] vmalloc_user_noprof+0xad/0xf0 [ 104.518371][ T6088] ? xskq_create+0xbf/0x170 [ 104.518392][ T6088] xskq_create+0xbf/0x170 [ 104.518416][ T6088] xsk_init_queue+0xb0/0x110 [ 104.518439][ T6088] xsk_setsockopt+0x43f/0x710 [ 104.518461][ T6088] ? __pfx_xsk_setsockopt+0x10/0x10 [ 104.518480][ T6088] ? __lock_acquire+0xab9/0xd20 [ 104.518510][ T6088] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 104.518543][ T6088] ? __pfx_xsk_setsockopt+0x10/0x10 [ 104.518564][ T6088] do_sock_setsockopt+0x25a/0x3e0 [ 104.518591][ T6088] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 104.518613][ T6088] ? __fget_files+0x2a/0x420 [ 104.518646][ T6088] ? __fget_files+0x3a0/0x420 [ 104.518672][ T6088] ? __fget_files+0x2a/0x420 [ 104.518709][ T6088] __x64_sys_setsockopt+0x18b/0x220 [ 104.518740][ T6088] do_syscall_64+0xf6/0x220 [ 104.518762][ T6088] ? clear_bhb_loop+0x60/0xb0 [ 104.518784][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.518801][ T6088] RIP: 0033:0x7f607338e969 [ 104.518823][ T6088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.518837][ T6088] RSP: 002b:00007f6074280038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 104.518857][ T6088] RAX: ffffffffffffffda RBX: 00007f60735b5fa0 RCX: 00007f607338e969 [ 104.518869][ T6088] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 104.518879][ T6088] RBP: 00007f6073410ab1 R08: 0000000000000052 R09: 0000000000000000 [ 104.518889][ T6088] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.518899][ T6088] R13: 0000000000000000 R14: 00007f60735b5fa0 R15: 00007ffd80dfb038 [ 104.518925][ T6088] [ 104.519834][ T6088] Mem-Info: [ 104.916867][ T6088] active_anon:1591 inactive_anon:18330 isolated_anon:0 [ 104.916867][ T6088] active_file:5155 inactive_file:44901 isolated_file:0 [ 104.916867][ T6088] unevictable:768 dirty:661 writeback:0 [ 104.916867][ T6088] slab_reclaimable:10013 slab_unreclaimable:99775 [ 104.916867][ T6088] mapped:40506 shmem:15549 pagetables:1047 [ 104.916867][ T6088] sec_pagetables:0 bounce:0 [ 104.916867][ T6088] kernel_misc_reclaimable:0 [ 104.916867][ T6088] free:1320342 free_pcp:1222 free_cma:0 [ 104.962796][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.093382][ T6088] Node 0 active_anon:6364kB inactive_anon:76520kB active_file:20416kB inactive_file:179604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:165224kB dirty:2628kB writeback:0kB shmem:63860kB shmem_thp:6144kB shmem_pmdmapped:4096kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10956kB pagetables:3988kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 105.128135][ T6088] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 105.168744][ T6088] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.203126][ T6088] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 105.217313][ T6088] Node 0 DMA32 free:1344412kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:6360kB inactive_anon:77716kB active_file:20324kB inactive_file:179592kB unevictable:1536kB writepending:2620kB present:3129332kB managed:2564156kB mlocked:0kB bounce:0kB free_pcp:1536kB local_pcp:248kB free_cma:0kB [ 105.255557][ T6088] lowmem_reserve[]: 0 0 0 0 0 [ 105.260554][ T6088] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:92kB inactive_file:12kB unevictable:0kB writepending:8kB present:1048580kB managed:112kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.287275][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.295829][ T6088] lowmem_reserve[]: 0 0 0 0 0 [ 105.300624][ T6088] Node 1 Normal free:3918492kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.329587][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.355791][ T6088] lowmem_reserve[]: 0 0 0 0 0 [ 105.372617][ T6088] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 105.385742][ T6088] Node 0 DMA32: 469*4kB (UME) 608*8kB (UE) 417*16kB (UE) 37*32kB (UE) 9*64kB (UE) 8*128kB (UME) 6*256kB (UE) 5*512kB (ME) 3*1024kB (UM) 1*2048kB (E) 322*4096kB (M) = 1344324kB [ 105.409178][ T6088] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 105.422386][ T6088] Node 1 Normal: 197*4kB (UM) 51*8kB (UME) 51*16kB (UME) 240*32kB (UME) 109*64kB (UME) 41*128kB (UME) 15*256kB (UME) 7*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3918492kB [ 105.453981][ T6088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 105.473702][ T6088] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 105.483338][ T6088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 105.521561][ T6088] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 105.572330][ T6088] 67327 total pagecache pages [ 105.585218][ T6088] 0 pages in swap cache [ 105.596927][ T6088] Free swap = 124996kB [ 105.608838][ T6088] Total swap = 124996kB [ 105.617886][ T6088] 2097051 pages RAM [ 105.623143][ T6088] 0 pages HighMem/MovableOnly [ 105.634269][ T6088] 424353 pages reserved [ 105.662332][ T6088] 0 pages cma reserved [ 106.354635][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 106.531178][ T10] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 106.567494][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 106.594240][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.619780][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.621496][ T6128] cgroup: fork rejected by pids controller in /syz3 [ 106.639861][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.658290][ T10] usb 1-1: Product: syz [ 106.662688][ T10] usb 1-1: Manufacturer: syz [ 106.669218][ T10] usb 1-1: SerialNumber: syz [ 106.705363][ T5872] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.748222][ T10] usb 1-1: selecting invalid altsetting 1 [ 106.857604][ T5872] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.880096][ T5872] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.922738][ T5872] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.973289][ T5872] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.021386][ T5872] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.039365][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.061312][ T5872] usb 2-1: Product: syz [ 107.082788][ T5872] usb 2-1: Manufacturer: syz [ 107.141492][ T5872] cdc_wdm 2-1:1.0: skipping garbage [ 107.185143][ T5872] cdc_wdm 2-1:1.0: skipping garbage [ 107.242161][ T5872] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 107.268798][ T5872] cdc_wdm 2-1:1.0: Unknown control protocol [ 107.393360][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 107.395865][ T980] usb 2-1: USB disconnect, device number 4 [ 107.400160][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 107.411952][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 107.420894][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.550917][ T10] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 107.559600][ T5872] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.594187][ T10] usb 1-1: selecting invalid altsetting 1 [ 107.608785][ T10] cdc_ncm 1-1:1.0: bind() failure [ 107.626768][ T10] usb 1-1: USB disconnect, device number 2 [ 107.726479][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 107.738316][ T5872] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 107.754558][ T5872] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 107.774728][ T5872] usb 5-1: config 135 has no interface number 0 [ 107.781132][ T5872] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.798469][ T5872] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 107.814624][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.822907][ T5872] usb 5-1: Product: syz [ 107.827714][ T5872] usb 5-1: Manufacturer: syz [ 107.832338][ T5872] usb 5-1: SerialNumber: syz [ 107.859699][ T5872] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 107.879373][ T5872] usb 5-1: No valid video chain found. [ 107.944578][ T5822] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.087035][ T5872] usb 5-1: USB disconnect, device number 3 [ 108.134489][ T5822] usb 3-1: Using ep0 maxpacket: 32 [ 108.150273][ T5822] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 108.199648][ T5822] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 108.258433][ T5822] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.317128][ T5822] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 108.328212][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 108.352437][ T5822] usb 3-1: Product: syz [ 108.358026][ T5822] usb 3-1: Manufacturer: syz [ 108.362747][ T5822] usb 3-1: SerialNumber: syz [ 108.396778][ T5822] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input7 [ 108.644989][ T5872] usb 3-1: USB disconnect, device number 3 [ 108.645042][ C1] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 108.712037][ T5872] appletouch 3-1:1.0: input: appletouch disconnected [ 109.587386][ T6741] capability: warning: `syz.0.105' uses deprecated v2 capabilities in a way that may be insecure [ 110.028836][ T6761] vivid-002: disconnect [ 110.039664][ T6757] vivid-002: reconnect [ 110.604531][ T30] audit: type=1326 audit(1748336051.550:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6749 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64958e969 code=0x7fc00000 [ 110.850579][ T6785] mmap: syz.2.122 (6785) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.884200][ T6784] bond0: entered promiscuous mode [ 110.917531][ T6784] bond_slave_0: entered promiscuous mode [ 110.942798][ T6784] bond_slave_1: entered promiscuous mode [ 110.987981][ T6784] batadv0: entered promiscuous mode [ 111.015853][ T6784] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 111.081660][ T6784] bond0: left promiscuous mode [ 111.107525][ T6784] bond_slave_0: left promiscuous mode [ 111.124932][ T6784] bond_slave_1: left promiscuous mode [ 111.165129][ T6784] batadv0: left promiscuous mode [ 111.864787][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 111.872022][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 112.166750][ T6813] netlink: 44 bytes leftover after parsing attributes in process `syz.4.135'. [ 112.197016][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.206193][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.414549][ T5822] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.616183][ T5822] usb 2-1: Using ep0 maxpacket: 16 [ 112.644015][ T5822] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 112.689444][ T5822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.738498][ T5822] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.753143][ T5822] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.762778][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.772648][ T5822] usb 2-1: Product: syz [ 112.777144][ T5822] usb 2-1: Manufacturer: syz [ 112.781766][ T5822] usb 2-1: SerialNumber: syz [ 113.026578][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 113.112564][ T5822] usb 2-1: 0:2 : does not exist [ 113.152275][ T5822] usb 2-1: USB disconnect, device number 5 [ 113.287396][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.937681][ T5822] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 114.987825][ T5822] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.161934][ T6884] netlink: 'syz.1.165': attribute type 10 has an invalid length. [ 115.233368][ T6882] bridge_slave_0: left allmulticast mode [ 115.272369][ T6882] bridge_slave_0: left promiscuous mode [ 115.305588][ T6882] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.387595][ T6882] bridge_slave_1: left allmulticast mode [ 115.417429][ T6882] bridge_slave_1: left promiscuous mode [ 115.458967][ T6882] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.520298][ T6882] bond0: (slave bond_slave_0): Releasing backup interface [ 115.578929][ T6882] bond0: (slave bond_slave_1): Releasing backup interface [ 115.682456][ T6882] team0: Port device team_slave_0 removed [ 115.724612][ T6882] team0: Port device team_slave_1 removed [ 115.757174][ T6882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.790093][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.958141][ T6882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.041064][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.074811][ T5823] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 116.256754][ T6884] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 116.284599][ T5823] usb 4-1: config 0 has no interfaces? [ 116.290145][ T5823] usb 4-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 116.315393][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.345359][ T5823] usb 4-1: config 0 descriptor?? [ 116.628739][ T30] audit: type=1326 audit(1748336057.610:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6890 comm="syz.3.168" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a9e38e969 code=0x0 [ 116.712804][ T5872] usb 4-1: USB disconnect, device number 4 [ 116.914982][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c1d2800: rx timeout, send abort [ 117.027294][ T6882] syz.1.165 (6882) used greatest stack depth: 20120 bytes left [ 117.416169][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c1d2c00: rx timeout, send abort [ 117.425208][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c1d2800: abort rx timeout. Force session deactivation [ 117.924829][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c1d2c00: abort rx timeout. Force session deactivation [ 118.222237][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 118.696977][ T5823] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.874755][ T5823] usb 4-1: Using ep0 maxpacket: 8 [ 118.896964][ T5823] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 118.928406][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.930312][ T6943] syz.4.189 uses obsolete (PF_INET,SOCK_PACKET) [ 118.953782][ T5823] usb 4-1: Product: syz [ 118.963677][ T5823] usb 4-1: Manufacturer: syz [ 118.979466][ T5823] usb 4-1: SerialNumber: syz [ 118.997503][ T5823] usb 4-1: config 0 descriptor?? [ 119.128271][ T6945] Driver unsupported XDP return value 0 on prog (id 42) dev N/A, expect packet loss! [ 119.228971][ T5823] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 119.460213][ T5823] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 119.530680][ T5823] usb 4-1: USB disconnect, device number 5 [ 120.900215][ T5823] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.988737][ T6997] 9pnet: p9_errstr2errno: server reported unknown error @$  [ 121.013733][ T5823] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 121.188055][ T6999] fido_id[6999]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 121.639903][ T7006] veth1_to_team: entered promiscuous mode [ 121.856336][ T7006] team0: Port device team_slave_1 removed [ 121.898816][ T7010] netlink: 96 bytes leftover after parsing attributes in process `syz.3.216'. [ 122.285730][ T5823] libceph: connect (1)[c::]:6789 error -101 [ 122.314201][ T5823] libceph: mon0 (1)[c::]:6789 connect error [ 122.330401][ T7023] ceph: No mds server is up or the cluster is laggy [ 122.332881][ T5823] libceph: connect (1)[c::]:6789 error -101 [ 122.369219][ T5823] libceph: mon0 (1)[c::]:6789 connect error [ 122.667532][ T7038] capability: warning: `syz.2.227' uses 32-bit capabilities (legacy support in use) [ 122.901276][ T7045] hsr0: entered allmulticast mode [ 122.941172][ T7045] hsr_slave_0: entered allmulticast mode [ 122.978061][ T7045] hsr_slave_1: entered allmulticast mode [ 123.042737][ T7050] hsr_slave_0: left promiscuous mode [ 123.058840][ T7050] hsr_slave_1: left promiscuous mode [ 123.148752][ T7050] hsr0 (unregistering): left allmulticast mode [ 123.323345][ T7055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 123.411194][ T7055] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.421934][ T7055] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.432105][ T7055] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.441027][ T7055] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.470669][ T7055] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.479893][ T7055] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.489049][ T7055] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.497993][ T7055] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.943281][ T7068] 9pnet: p9_errstr2errno: server reported unknown error ../fil [ 124.407082][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 124.641601][ T7092] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.164816][ T980] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 125.254523][ T5823] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.314503][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 125.324601][ T980] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 125.336498][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.352375][ T980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.428201][ T5823] usb 3-1: Using ep0 maxpacket: 8 [ 125.453761][ T5823] usb 3-1: config 0 has no interfaces? [ 125.462574][ T5823] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 125.509747][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.548931][ T5823] usb 3-1: config 0 descriptor?? [ 125.587346][ T980] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.597085][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.615761][ T980] usb 5-1: Product: syz [ 125.619980][ T980] usb 5-1: Manufacturer: syz [ 125.635050][ T980] usb 5-1: SerialNumber: syz [ 125.868624][ T43] usb 3-1: USB disconnect, device number 4 [ 126.068832][ T980] usb 5-1: 0:2 : does not exist [ 126.184599][ T5878] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 126.357601][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 126.403840][ T5878] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 126.439612][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.484172][ T5878] usb 4-1: Product: syz [ 126.498209][ T5878] usb 4-1: Manufacturer: syz [ 126.513658][ T5878] usb 4-1: SerialNumber: syz [ 126.546966][ T5878] usb 4-1: config 0 descriptor?? [ 126.938952][ T980] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 126.995153][ T5878] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 127.034587][ T5878] gspca_sunplus: reg_w_riv err -71 [ 127.036441][ T980] usb 5-1: USB disconnect, device number 4 [ 127.062144][ T5878] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 127.155175][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.201361][ T5878] usb 4-1: USB disconnect, device number 6 [ 128.044746][ T5822] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 128.086889][ T7139] Bluetooth: hci0: invalid length 0, exp 2 for type 1 [ 128.208164][ T5822] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 128.238275][ T5822] usb 1-1: config 0 has no interface number 0 [ 128.260277][ T5822] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 128.287837][ T5822] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 128.324637][ T5822] usb 1-1: config 0 interface 255 has no altsetting 0 [ 128.342785][ T5822] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 128.372153][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.440721][ T5822] usb 1-1: config 0 descriptor?? [ 128.462827][ T5822] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 128.700416][ T5822] usb 1-1: USB disconnect, device number 3 [ 130.016666][ T7203] Zero length message leads to an empty skb [ 130.113991][ T7206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.194999][ T30] audit: type=1326 audit(1748336072.174:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7208 comm="syz.2.298" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa64958e969 code=0x0 [ 130.495152][ T7222] ======================================================= [ 130.495152][ T7222] WARNING: The mand mount option has been deprecated and [ 130.495152][ T7222] and is ignored by this kernel. Remove the mand [ 130.495152][ T7222] option from the mount to silence this warning. [ 130.495152][ T7222] ======================================================= [ 130.573886][ T7225] overlayfs: overlapping lowerdir path [ 130.611999][ T7225] overlayfs: overlapping lowerdir path [ 131.303825][ T43] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 131.469860][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 131.482672][ T43] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 131.494082][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.513577][ T43] usb 1-1: config 0 descriptor?? [ 131.528614][ T7234] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 131.584517][ T5872] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 131.624707][ T980] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.654727][ T5878] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.734513][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 131.751030][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.764638][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.785693][ T5872] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 131.804492][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 131.809685][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.820805][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.832292][ T980] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 131.839666][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 131.842828][ T5872] usb 4-1: config 0 descriptor?? [ 131.854481][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.877805][ T5878] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 131.889976][ T980] usb 5-1: config 0 descriptor?? [ 131.908538][ T5878] usb 3-1: config 0 has no interface number 0 [ 131.920327][ T5878] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 131.974624][ T5878] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 131.990979][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.002209][ T43] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 132.016151][ T5878] usb 3-1: Product: syz [ 132.039803][ T5878] usb 3-1: Manufacturer: syz [ 132.049183][ T5878] usb 3-1: SerialNumber: syz [ 132.060313][ T5878] usb 3-1: config 0 descriptor?? [ 132.073160][ T5878] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 132.093899][ T5878] em28xx 3-1:0.132: Video interface 132 found: [ 132.177097][ T5907] usb 1-1: USB disconnect, device number 4 [ 132.296729][ T5872] apple 0003:05AC:0274.0005: unknown main item tag 0x4 [ 132.314116][ T5872] apple 0003:05AC:0274.0005: unexpected long global item [ 132.323399][ T5872] apple 0003:05AC:0274.0005: parse failed [ 132.332303][ T5872] apple 0003:05AC:0274.0005: probe with driver apple failed with error -22 [ 132.348720][ T980] magicmouse 0003:05AC:0269.0006: unknown main item tag 0x0 [ 132.365082][ T980] magicmouse 0003:05AC:0269.0006: unknown main item tag 0x0 [ 132.373231][ T980] magicmouse 0003:05AC:0269.0006: unknown main item tag 0x0 [ 132.390695][ T980] magicmouse 0003:05AC:0269.0006: unknown main item tag 0x0 [ 132.398577][ T980] magicmouse 0003:05AC:0269.0006: unknown main item tag 0x0 [ 132.419923][ T980] magicmouse 0003:05AC:0269.0006: hidraw0: USB HID v0.01 Device [HID 05ac:0269] on usb-dummy_hcd.4-1/input0 [ 132.457812][ T7252] cgroup: fork rejected by pids controller in /syz1 [ 132.483802][ T5878] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 132.520801][ T980] usb 4-1: USB disconnect, device number 7 [ 132.592750][ T43] usb 5-1: USB disconnect, device number 5 [ 132.839830][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.855033][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.239624][ T8344] loop2: detected capacity change from 0 to 7 [ 133.265565][ T5925] Dev loop2: unable to read RDB block 7 [ 133.281609][ T5925] loop2: unable to read partition table [ 133.295048][ T5925] loop2: partition table beyond EOD, truncated [ 133.338396][ T8344] Dev loop2: unable to read RDB block 7 [ 133.358074][ T8344] loop2: unable to read partition table [ 133.375495][ T8344] loop2: partition table beyond EOD, truncated [ 133.394935][ T8344] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 133.638424][ T5878] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 133.657298][ T7249] em28xx 3-1:0.132: failed to trigger write to i2c address 0x28 (error=-5) [ 133.668074][ T5878] em28xx 3-1:0.132: board has no eeprom [ 133.834491][ T5878] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 133.866065][ T5878] em28xx 3-1:0.132: analog set to bulk mode. [ 133.872405][ T43] em28xx 3-1:0.132: Registering V4L2 extension [ 133.914879][ T5878] usb 3-1: USB disconnect, device number 5 [ 133.942344][ T5878] em28xx 3-1:0.132: Disconnecting em28xx [ 134.353593][ T8430] bridge_slave_0: left allmulticast mode [ 134.384233][ T8430] bridge_slave_0: left promiscuous mode [ 134.426430][ T8433] netlink: 'syz.0.329': attribute type 10 has an invalid length. [ 134.427852][ T43] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 134.455745][ T8430] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.494640][ T43] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 134.514218][ T43] em28xx 3-1:0.132: No AC97 audio processor [ 134.556534][ T43] usb 3-1: Decoder not found [ 134.561176][ T43] em28xx 3-1:0.132: failed to create media graph [ 134.612219][ T43] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 134.623102][ T8430] bridge_slave_1: left allmulticast mode [ 134.643200][ T8430] bridge_slave_1: left promiscuous mode [ 134.650653][ T43] em28xx 3-1:0.132: Remote control support is not available for this card. [ 134.663774][ T8430] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.847715][ T5878] em28xx 3-1:0.132: Closing input extension [ 134.850747][ T8430] bond0: (slave bond_slave_0): Releasing backup interface [ 134.881250][ T5878] em28xx 3-1:0.132: Freeing device [ 134.902299][ T8430] bond0: (slave bond_slave_1): Releasing backup interface [ 134.998814][ T8430] team0: Port device team_slave_0 removed [ 135.056016][ T8430] team0: Port device team_slave_1 removed [ 135.069784][ T8430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.104502][ T8430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.129760][ T8430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.155836][ T8430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.276929][ T8433] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 135.342739][ T8439] tipc: Started in network mode [ 135.359244][ T8439] tipc: Node identity ac14140f, cluster identity 4711 [ 135.385914][ T8439] tipc: New replicast peer: 255.255.255.255 [ 135.424554][ T8439] tipc: Enabled bearer , priority 10 [ 135.482198][ T8442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.331'. [ 135.551424][ T8442] tipc: Disabling bearer [ 135.894592][ T5878] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.985892][ T8452] cgroup: fork rejected by pids controller in /syz4 [ 136.074712][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 136.092276][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.120697][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.151405][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.179207][ T5878] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 136.207129][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.261413][ T5878] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 136.297503][ T5878] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 136.317335][ T5878] usb 2-1: Manufacturer: syz [ 136.336262][ T5878] usb 2-1: config 0 descriptor?? [ 136.659493][ T5872] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 136.754617][ T5878] rc_core: IR keymap rc-hauppauge not found [ 136.760577][ T5878] Registered IR keymap rc-empty [ 136.776114][ T5878] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.802497][ T5878] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.824591][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 136.833417][ T5872] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.846861][ T5878] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 136.885100][ T5872] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.900049][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.906993][ T5878] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 136.925402][ T5872] usb 1-1: Product: syz [ 136.930831][ T5872] usb 1-1: Manufacturer: syz [ 136.939121][ T5872] usb 1-1: SerialNumber: syz [ 136.999788][ T5878] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 137.054758][ T5878] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 137.084582][ T5878] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 137.164612][ T5878] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 137.195314][ T5878] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 137.248414][ T5878] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 137.295538][ T5878] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 137.335175][ T5878] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 137.386168][ T5878] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 137.415035][ T5878] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 137.461345][ T5878] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 137.497664][ T5878] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 137.527261][ T5878] usb 2-1: USB disconnect, device number 6 [ 137.744773][ T5907] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 137.904598][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 137.916678][ T5907] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 137.934521][ T5907] usb 3-1: config 0 has no interface number 0 [ 137.951079][ T5907] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 137.971554][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.986808][ T5907] usb 3-1: Product: syz [ 137.991153][ T5907] usb 3-1: Manufacturer: syz [ 137.996510][ T5907] usb 3-1: SerialNumber: syz [ 138.007521][ T5907] usb 3-1: config 0 descriptor?? [ 138.014565][ T5872] cdc_ncm 1-1:1.0: failed to get mac address [ 138.027925][ T5907] smsc95xx v2.0.0 [ 138.046713][ T8799] syzkaller1: entered promiscuous mode [ 138.052367][ T8799] syzkaller1: entered allmulticast mode [ 138.212390][ T5872] cdc_ncm 1-1:1.0: bind() failure [ 138.268346][ T5872] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 138.294630][ T5872] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 138.301173][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.357'. [ 138.311192][ T5872] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 138.329035][ T5872] usb 1-1: USB disconnect, device number 5 [ 138.448415][ T5907] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 138.471403][ T5907] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 138.714274][ T8812] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 139.093731][ T5907] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 139.125055][ T5907] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 139.138377][ T5907] usb 3-1: USB disconnect, device number 6 [ 139.260446][ T8829] netlink: 32 bytes leftover after parsing attributes in process `syz.3.367'. [ 139.588737][ T8841] input: syz1 as /devices/virtual/input/input9 [ 139.749536][ T5878] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 139.862813][ T8851] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 139.925382][ T8851] net veth1_virt_wifi virt_wifi0 (unregistering): left allmulticast mode [ 139.934525][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 139.954030][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.974565][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.994519][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 140.024724][ T5878] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 140.054557][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.086110][ T5878] usb 2-1: config 0 descriptor?? [ 140.125180][ T980] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 140.339938][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.371291][ T980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.426649][ T980] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 140.448777][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 140.486996][ T980] usb 5-1: SerialNumber: syz [ 140.527807][ T5878] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 140.765001][ T980] usb 5-1: 0:2 : does not exist [ 140.880504][ T980] usb 5-1: USB disconnect, device number 6 [ 141.010968][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.036772][ T5878] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input10 [ 141.105565][ T8866] Invalid ELF header magic: != ELF [ 141.126725][ T5878] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 141.205679][ T5878] usb 2-1: USB disconnect, device number 7 [ 141.374344][ T8867] fido_id[8867]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 141.705064][ T8883] ================================================================== [ 141.713204][ T8883] BUG: KASAN: use-after-free in __crypto_shash_import+0x26a/0x2a0 [ 141.721061][ T8883] Write of size 1 at addr ffff888157fe1347 by task syz.2.390/8883 [ 141.728891][ T8883] [ 141.731255][ T8883] CPU: 0 UID: 0 PID: 8883 Comm: syz.2.390 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 141.731281][ T8883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.731292][ T8883] Call Trace: [ 141.731301][ T8883] [ 141.731310][ T8883] dump_stack_lvl+0x189/0x250 [ 141.731342][ T8883] ? __virt_addr_valid+0x1c8/0x5c0 [ 141.731371][ T8883] ? rcu_is_watching+0x15/0xb0 [ 141.731395][ T8883] ? __kasan_check_byte+0x12/0x40 [ 141.731423][ T8883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.731451][ T8883] ? rcu_is_watching+0x15/0xb0 [ 141.731474][ T8883] ? lock_release+0x4b/0x3e0 [ 141.731498][ T8883] ? __virt_addr_valid+0x1c8/0x5c0 [ 141.731525][ T8883] ? __virt_addr_valid+0x4a5/0x5c0 [ 141.731552][ T8883] print_report+0xd2/0x2b0 [ 141.731574][ T8883] ? __crypto_shash_import+0x26a/0x2a0 [ 141.731605][ T8883] kasan_report+0x118/0x150 [ 141.731629][ T8883] ? __local_bh_enable_ip+0x12d/0x1c0 [ 141.731654][ T8883] ? __crypto_shash_import+0x26a/0x2a0 [ 141.731688][ T8883] __crypto_shash_import+0x26a/0x2a0 [ 141.731724][ T8883] crypto_shash_import+0x84/0x230 [ 141.731757][ T8883] hash_accept+0x1fb/0x280 [ 141.731784][ T8883] do_accept+0x48c/0x680 [ 141.731808][ T8883] ? __pfx_do_accept+0x10/0x10 [ 141.731847][ T8883] __sys_accept4+0x11c/0x1c0 [ 141.731869][ T8883] ? __pfx___sys_accept4+0x10/0x10 [ 141.731897][ T8883] __x64_sys_accept4+0x9a/0xb0 [ 141.731919][ T8883] do_syscall_64+0xf6/0x220 [ 141.731942][ T8883] ? clear_bhb_loop+0x60/0xb0 [ 141.731965][ T8883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.731986][ T8883] RIP: 0033:0x7fa64958e969 [ 141.732005][ T8883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.732022][ T8883] RSP: 002b:00007fa64a3a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 141.732043][ T8883] RAX: ffffffffffffffda RBX: 00007fa6497b5fa0 RCX: 00007fa64958e969 [ 141.732059][ T8883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 141.732071][ T8883] RBP: 00007fa649610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 141.732083][ T8883] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 141.732096][ T8883] R13: 0000000000000000 R14: 00007fa6497b5fa0 R15: 00007fff3e1313e8 [ 141.732119][ T8883] [ 141.732126][ T8883] [ 141.960037][ T8883] The buggy address belongs to the physical page: [ 141.966458][ T8883] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x157fe1 [ 141.975312][ T8883] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 141.982516][ T8883] raw: 057ff00000000000 ffffea00055ff848 ffffea00055ff848 0000000000000000 [ 141.991104][ T8883] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 141.999683][ T8883] page dumped because: kasan: bad access detected [ 142.006099][ T8883] page_owner info is not present (never set?) [ 142.012155][ T8883] [ 142.014489][ T8883] Memory state around the buggy address: [ 142.020117][ T8883] ffff888157fe1200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 142.028186][ T8883] ffff888157fe1280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 142.036247][ T8883] >ffff888157fe1300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 142.044301][ T8883] ^ [ 142.050447][ T8883] ffff888157fe1380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 142.058516][ T8883] ffff888157fe1400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 142.066668][ T8883] ================================================================== [ 142.114343][ T8886] binder: 8885:8886 ioctl c0306201 200000000480 returned -14 [ 142.126410][ T8883] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 142.133675][ T8883] CPU: 1 UID: 0 PID: 8883 Comm: syz.2.390 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 142.145249][ T8883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.155334][ T8883] Call Trace: [ 142.158647][ T8883] [ 142.161610][ T8883] dump_stack_lvl+0x99/0x250 [ 142.166231][ T8883] ? __asan_memcpy+0x40/0x70 [ 142.170825][ T8883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.176045][ T8883] ? __pfx__printk+0x10/0x10 [ 142.180690][ T8883] panic+0x2db/0x790 [ 142.184627][ T8883] ? __pfx_panic+0x10/0x10 [ 142.189093][ T8883] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 142.195017][ T8883] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 142.201373][ T8883] ? print_memory_metadata+0x314/0x400 [ 142.206870][ T8883] ? __crypto_shash_import+0x26a/0x2a0 [ 142.212375][ T8883] check_panic_on_warn+0x89/0xb0 [ 142.217348][ T8883] ? __crypto_shash_import+0x26a/0x2a0 [ 142.222855][ T8883] end_report+0x78/0x160 [ 142.227221][ T8883] kasan_report+0x129/0x150 [ 142.231751][ T8883] ? __local_bh_enable_ip+0x12d/0x1c0 [ 142.237150][ T8883] ? __crypto_shash_import+0x26a/0x2a0 [ 142.242644][ T8883] __crypto_shash_import+0x26a/0x2a0 [ 142.247969][ T8883] crypto_shash_import+0x84/0x230 [ 142.253040][ T8883] hash_accept+0x1fb/0x280 [ 142.257493][ T8883] do_accept+0x48c/0x680 [ 142.261779][ T8883] ? __pfx_do_accept+0x10/0x10 [ 142.266582][ T8883] __sys_accept4+0x11c/0x1c0 [ 142.271204][ T8883] ? __pfx___sys_accept4+0x10/0x10 [ 142.276345][ T8883] __x64_sys_accept4+0x9a/0xb0 [ 142.281133][ T8883] do_syscall_64+0xf6/0x220 [ 142.285677][ T8883] ? clear_bhb_loop+0x60/0xb0 [ 142.290381][ T8883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.296386][ T8883] RIP: 0033:0x7fa64958e969 [ 142.300828][ T8883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.320470][ T8883] RSP: 002b:00007fa64a3a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 142.328934][ T8883] RAX: ffffffffffffffda RBX: 00007fa6497b5fa0 RCX: 00007fa64958e969 [ 142.336943][ T8883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 142.345040][ T8883] RBP: 00007fa649610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 142.353241][ T8883] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 142.361343][ T8883] R13: 0000000000000000 R14: 00007fa6497b5fa0 R15: 00007fff3e1313e8 [ 142.369364][ T8883] [ 142.372770][ T8883] Kernel Offset: disabled [ 142.377102][ T8883] Rebooting in 86400 seconds..