last executing test programs: 2m14.284966142s ago: executing program 1 (id=171): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x4102, &(0x7f0000000140)=[{&(0x7f0000000080)="a9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)='9', 0x1}], 0x1}}], 0x2, 0x4008440) 2m14.062540568s ago: executing program 1 (id=173): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 2m13.029275336s ago: executing program 1 (id=179): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x157}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2000}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m12.081396952s ago: executing program 1 (id=188): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) 2m11.700539892s ago: executing program 1 (id=191): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x7f, 0xab, 0x7, 0x7fe, 0x8, 0x40009, 0x6, 0x4000000000000000, 0x2c, 0x1f}) 2m10.766543428s ago: executing program 1 (id=193): chdir(0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2m10.035178242s ago: executing program 32 (id=193): chdir(0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1m58.255715803s ago: executing program 0 (id=260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x48b, 0x0, 0x3}]}) 1m57.751670875s ago: executing program 0 (id=261): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2, r1}) 1m57.451871446s ago: executing program 0 (id=262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x106, 0x40, 0x40, 0x41}, 0x50) 1m57.139883529s ago: executing program 0 (id=265): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) 1m56.812983252s ago: executing program 0 (id=268): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x1ab801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m49.657835941s ago: executing program 0 (id=289): setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e24, 0xfdffffb1, @private0, 0x5}, {0xa, 0x4e23, 0x7, @mcast2, 0x56504}, 0xfffe, {[0x5447, 0x3, 0x7, 0xc4, 0x3, 0xffffffff, 0x9, 0xfffffffa]}}, 0x5c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701"], 0x28, 0x2000c000}}], 0x2, 0x88) 1m49.147743163s ago: executing program 33 (id=289): setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e24, 0xfdffffb1, @private0, 0x5}, {0xa, 0x4e23, 0x7, @mcast2, 0x56504}, 0xfffe, {[0x5447, 0x3, 0x7, 0xc4, 0x3, 0xffffffff, 0x9, 0xfffffffa]}}, 0x5c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701"], 0x28, 0x2000c000}}], 0x2, 0x88) 18.042594057s ago: executing program 5 (id=891): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 17.639872169s ago: executing program 5 (id=895): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee38", 0x14}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000200)=""/82, 0x52}], 0x2}, 0x10042) 17.548006343s ago: executing program 5 (id=899): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d", 0x1f}], 0x2, 0x0, 0x0, 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x2}, 0xc3}, {{0x0, 0x0, &(0x7f0000007940)=[{&(0x7f0000000880)=""/139, 0x8b}], 0x1}, 0xd}], 0x2, 0x12001, 0x0) 17.350489466s ago: executing program 5 (id=901): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb3b0000ce220000000004000000e3"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 16.695660094s ago: executing program 5 (id=909): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x14048841) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14.821996704s ago: executing program 5 (id=920): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 10.390081698s ago: executing program 6 (id=952): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x8, "afacd2119ca94c6b377526aeb5ab2a81fc0e3d99f20900"}) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) close(0x3) 10.169721782s ago: executing program 6 (id=954): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) 10.030576526s ago: executing program 6 (id=955): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 6.964124331s ago: executing program 4 (id=965): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x8044) 6.900780843s ago: executing program 4 (id=966): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x0, 0x0, 0x1d}, &(0x7f0000000840)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2000, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.261725593s ago: executing program 6 (id=968): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x100a, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="61f245cafab21e55697298a0ae35e18d14dd4b6592fa14c0489b858840d12654fb8ddbd1563e581b6a29f56e6127a48c40b95af04e135572e6084e5706e88f02b4440c32e93c31603beb0bc2616de2e7f2a3936b7862df4bc4178710a61eb2e0e7b4ac16cde4477d10653b0d6afde80c950848626b7296ec902f7dc875cbb34a73638a2a48eec75667340826ad84022664c0039de213dc5054b5ecc2ea3c385fe8cdeb814e4eb6262fb39fb637c13a6c1b401f1eafc7a09d49980e60e5caca3520ffeeaf9b20a67d680c7ade66ff7398725ab5bfeed67b48888284c03f6c5331b33f5bd12b10f2c9f8a82549939fbf23caba0dfe1cd962f5e97d9a7dbfed7b25dfcd025cafb3c3b34bde13e2cf3684db786b56929bd381fa5e178b268005224cf7d79103524ec32d22509292501062fd2a907f9eb1a564bcb58da00933f9fb49af10ce55617b9edfad6ca5f9060623e0d6fb73aa68c9b5190dc671968ecbf752962f6e3f0ef6b3ff918603cd511ec00dc67ba004c6469380f5c5390226ccd5ebb934a63c103e4fb6b69c42a6e8e8aa434fd0c787de018fc1e25189ba81be91c80d5e3c9d021baa3cb3abaf755b79e41a8604392c68a018e1750ab6d54608969f3c9273b1a08c3b8d7d9b6f03f4bd3a6c64790617d72a891556cba509f21f992c59db9f78853421fb9ec4ddb2fe782f5da26c038626f26d1e4fda289cea520d44630b041e18ea2ecf56852c25f1ddf3bbaed2c17ba898575431134ee7c27fbf8548dfd63364b8beae267085bfa964786745134ae2b64c4a263f885c198952e795c17e04f0d9e4360de13ae3f2481e6d234bb5c54e03d5e0cb27e5b610ea2c0d85d21bc66e5c861f1e8ba66620cb6f590b2fe294013923b7fc9b170f449e7873bb9aa14cf7421e61feaaeb349a2acb5816a51325f45065b035be05f4498e77eb5e875c03b0c41061caadee14eb2764a5846ba0cab400e1676f533abc56930e5acccf331b0611af1e2947b11820d32e142ca885f4df233678ccbcfa63e5cfa708adcfefa34f059f81f14a5ef2538ef446feec5c78828c618576b18b86c7ee37d8182a8dee51d5dd199cd2ee915f5e25be2885822ab3e5b988786764e611f0bb1214bb9d825c9c4e15c061acf2b4e7361831e0fe9fc409e0004631ab31c42bfd962ba7a0e475f3a91643ce65d2efb94976b14fcf7d21c93bd9208b7bb7a3dfc4444cf14d127401c6892ba93ac786476e0885f028ae6141de817d3517cce625eebb50e2c1e5e64ffc50da4d2eaa605501769e4c1a40fd9da7da178b4bf468942514082773698770ef455ea263fefa4fb258c15afb076c7979296f901e84a2b71eb63cb3d9dfd9abb3e1f8f657070d75541c20476f37e14ca43014ef80b33eeca91ace604ec2051d73ec2f69ffa14bcd79ea577e9676825094606343d31874111fbc535d28fa7a9e379d38226001e241d3515e1d63ba56f1eebe8ea788c4d768f4c4fbbaf834ca3f21460613d768dacf2a27778dc2b4598726646b8c06b6e4d38162720c807724f92bdc9f0b0f5d303d5a5a3998aa270a6760c7651df601bc42c78dd9bd53ee960cf80a30a6b7a1a880d37ff31fb2c9bb0c591bba3ef8228a0506f45065c65b131aff8da8eebbd6754b9e5601632da39c329a229062a94833b23c97371d510a19e2d3b5bc516e3d3c8601495fbeecc16c5c50ba6c435974e8275d372add206964f29997b515f63f50121029e61f47db19fc63b07d0f059ca686e80fb6c294667affaea2daff241bdd0945bfbfe28643136bcea9aa345d482fc3b9d872b482463b92b25f0e5157be3fd8b7a328f327ddfa5c05a6f172deb795f19b9f2091386acb060f170540bfa898057c206d81afd85701b8ee030076bc3782d7d8f6673111baf80818aeca7e5944d91a7f4fce840303867ea18d2b92d74c67157284c787fcfde780fc9a53ae5560e101ef125ce707d34f957072958dc9916492e73a90a10f660a221a7c6730ac0ac01e37d54f058b64f41a46be5320800172e2c9fda248a2964548ddf1f53599027c29ede6079a72d454bcf4403808111d00cb4e3aadd060c333e57c64a70bdfbb572fe228538c82ab427416cdcce1dd643ece610ca7042e2a164d3dfdabb966f1a8fc875cd002920321dac62e25f38cb0031e4de6324b0db402b12c4b0e335898e21b7b326ebbeec0b4bc21ef2dd6f9755e8ff35602d30189ae3efe9c487aec2ce90dbbe790c919b77036240786f3fe9441204b81bc43b5f5cbede75702a1c28ab16d2f578dddb3624f596b5b82e2f26b63966ddc78c8ffa13a23b6c4ee2c741820b9738fe881ddeeeba60fa4221885be55a6fdaa0b90b246f5959b844afd6898bc8c0a75fc45fb968d6e8ea6831d15808b23904355c62a8590d1ba51cdb051bd5ccc1b62a8ca520af60daefae7f7f1dcc90a02ab3af5307fcd5fed9af7d9b192f080be6ded768c6d1d4ea0ba5cc996e5c24b8048eeaea09cabcf1c0488a357280395cfc5394ba160c439dda0a7f4ed182d3f33a4addb1c74d7d797179c633013b24c7e0cd2f4b86904bd1d70a4821c7ff619455953d820e1594c7136e66c260c868776129eddedfdec5ebb0da2e5207215f9c47d7bf74319661311232ca1d108da00df2d07ff5720c474981cb54bd185448ae0e3d9d3194614ae67bdb24122cb2207be610456c35ba6e11429a3a6c266b4bfd905c7534de4fe03ac5063cbb08b3a75137e59e3e8b3fee3989bfb0735ea6f948371a60efff49ea51d5825dd61ef9a0b735fc859c9b003325fe6e3a5fdb8d2cf51e2e9a4c73a8af3a702a83d57d3ddb81d5e9342c97f143ed28228c16a1625d8ba4f0ffddc968f37cb07ea09d35703f920cf4e7a1394b7f18e6f2508a4c90acc92710ddce1e7a9a22ad2d540f669411b263b3e20b07131cc17cf20ae8030de00862bdc33b7eb4f8122c47c833e73aed84199e5d584625570193e18c3d165dae7941d17cc07034a2a5c67c708d6c96f9c5595800dfb65f42c413716b952d42727e7117915b359d1f1c0a64f0ee4b4a0bfbc4e9fc794cd02369e9594acb7805a155ec03505df719aa47e5da38fd3ab736fa76acee10abd1b220b32436260f2ab86f7d0c20fd9b3a1e63b9b3dbd91e7579fec104f5a714f4d0a00a03a1848c58508e8ec27c7fa04d3baf64e1258bd1d72465f3a64c793b3e09a97ca1a2efbac7adb6228ef4588be15afc21c80905a26a22f4db7940b9369051dde4e24008a5f7b943d769578ffa46572435c2076c60096252f3b3b5fe6d8f4579d11c9c71cbf7444c661306fa07dd01e670fa8d24071b09d6e74a268a0d43aef3b7f8e126900bf2e21304785712f327275a2e16febd4faaaacce68b92dcc3c27ca035bb4210408a34103719c82d33c8b43dd9a46cc0420a533b906317fb817ef6164286b8ddacee6191027bfa9ed19746c8401bab93d08d028fd9e2203cccf56b22042c402e8a438ed226112fa71d02c4537d4156a3af28ab4ffcf19309d283902f1e70f42d6713782c5e468a086fdb5c8b3e15de36acc4469ec42ea23a1e5e8e399f4d4be71dd4b4c268db2ab91b68ceafb95cbba36228e59bc0cd7f987a2ad4bbd23b67acabb26a0f4c694ff320f2275042c85ef256aeef306cf5e2803d6c55827011e2f98d0e80819e0039a71cc9c59464f209afa7891a359a3f9efb4bba2a18fd013e8664a6bec7e717ffe2f0c06f7268862696cfae0fe6fab5b1a2921c0e29aaa8638f6a18d1cbaaa4aa0d76f66fa9f44511e631f2fde8024210eb39f545a648c1b77ab04a7d110edbd1dce3939b4dee867df3cb3107fffe5ab22fe5e32b38447d32094259cee40c9a5254df72cbd7a29188d7285facd6e2f5c78ee9d11645cf026e99162da9c2d148373018fe8e052ffccc4e3952e86228d7835a3bc9b4a5c6099dd3e802b059ef2225cbe4664458729c78032e184b61a089870c6b3c2bf2e5df6bd65bc195e1ccbe58b9a6dde49897ab59dd269a737f04e37e34d3d10c3b01c744a742d52da1bceca63fcbecc136a80bf3ca1df2f226de073b67a0b646674744acd14d5dab9929f2cb804637ebf211f2b3a8b959723808904e9044deb551b2613c1e501385693e7abff809b641c02107187cf1bd1c9571a9023942f0c78c467611193a7e6900eefc49fded206630336cd8d2849731b73798d9258be75b843f051679e6bd541c78457db5470d3d494f333a81b3ed26b57f9f7726275c12f192f4b1d9615c7fe3e0bb22fb47ae1effea3bd2a0a379593a25f933c8af1f14d08bd8ca692c9af3eaee136664e1829204c171ad6e50fa928a3c1f5ee2c14f984884c2cb0256acfa6172d030940f3f9f99443c730b0f070192d36fb83b3d470cf3098bd8b0f09eb6d1b58efbde00305c3a50e00df17b9963f1c06f26b48e4a166073f3f3119ed2b56af1f8c056c07f65ffc3f2e81efa22f97c66998b35bb2af3ce2d89af5f5b1368ce9148937f826c3ef81a116382bd3f53e26f210aed545f38c1e21400957b824eaa95bb401ef308852c7e5015b89244a403308de785a81739634161e33d79435f18cf378bd9f5eb59b40a55abe627f6944ec239f80fc15526e7f1b2c2949a85b8c15a299cee1c86f61746a4eae3dc5f347225f1965cf09d4457b1a1b692fb108a681607d6276c4a6cf35709dc95aa249ae245a0435c481cbae672037aefc82fee9f249e643e658d173aea1d99e361f383dd674a5f2a6525755eaba2d59928a8d9e2eb1aafd129cb4c2cefd5da0213d900efa938e937a7c4e62243eeb3f5f43be35323f63b0b1ac2a298fcfbf71129da3465e488f52b82ec725bdf2fd943e09004c62abf5332139fb38b797756c5e9de926da21f8d77408ea740cf5ec8a657eae110df0550c6ca2585e0cdd5de1e986da91ca1d112f0d5397fdc612b2163164dedddf60c1e3dcd94195b65f50a9c86fb7b67b91dc7c0b8ab3d1c254663fc09ad5fd2c97221f1c6032557ff0a2fc441b71b3a6a6c52efded4133c8d57ce15523550237e7fef838d66cd77c48a743b2a2cc7c1f0ef3d520eb7ce9c086d73c352fe311337b3558a6985660a19ac852edceed56e3e9bb49b8a788eaa3f9be70b3fd1e764888a35a6c874256f9a8e53790281e30fdc1ed35ef03e9bd805ba3ef6ad07c3eef31fadcaba39c9b793e15d04f096c62f6282e8fc4aa31b275bc7fe5dce144ba736151d046b1285b698422ae84ae222e835e2ea80791082cd1742385764a0b047fcadfd8da7acc8f820dd50444fbbecb18ff5c9df10e08609d4b0f76ce14dc8ab056227e3604b3933df593a1b961fba44678131c958b15246e5054465bfffba1cb05c8d4a3ce7a3473d88c9213b5d8fcef3c46f8650fec5077bffaf9b469051b0e5aa7b55f863f0919ca310505a063890b1560597aac6ca1ed9a7c7ed8e894597098cc9333d687bd8e1b4539bb9f74d034d2fc316ef806d67bcec412fb485a03f87cb89d122809fc55f1a7fb35a74440d661ee736340cdbe70141214e899cf9f907a2463f995d21e2d1d25fe92b47ea198f467bf5e775104bbb0ed11534ef25eabdd6b14e8961ee0534f5ab504151f1b2f1853f7229e07131696deb538114d51df2d5c4145bb53d7292e1544c3075806980d5d595528dcf1ce6d4d35470331f00a7bb00e4a1b38982f5dbd2114715a3bd23fa9dbadfe2970853a89d1abb9ae5d4f3bab355691c3ccbbe4bcb2e44425d6c2c3dc3ddd8d43872a6063f111c1c7e6ed4449b39bbd6df92ed4a0e4808ffad0391f89b509f683061bcbe06369e47d43e9", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000000)={r2, 0x1000, &(0x7f0000002a80)=""/4096}) 5.896035203s ago: executing program 6 (id=969): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x25, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xd38b0b234b18037d}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) 5.644302186s ago: executing program 3 (id=970): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902"], 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5aa}], 0x1) 5.638986955s ago: executing program 6 (id=971): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 5.016512362s ago: executing program 4 (id=974): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) listen(r0, 0x0) 4.378084094s ago: executing program 3 (id=976): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x3, 0xffffeffc, 0x2, 0x100000}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) 4.285087757s ago: executing program 3 (id=977): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 4.216911541s ago: executing program 3 (id=978): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f0000000bc0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x48) 4.147855832s ago: executing program 3 (id=979): r0 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) flock(r0, 0x5) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000002c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r2, &(0x7f0000001240)=[{&(0x7f0000000040)=""/5, 0x5}], 0x1, 0x0, 0x3) 4.065608327s ago: executing program 3 (id=980): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x16, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x18}}}}}, 0x36) 3.985706434s ago: executing program 4 (id=981): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xb8, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @remote, 0xff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {0xff}, 0x11, 0x0, 0x10}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xffffff00, 'veth1_macvtap\x00', 'rose0\x00', {}, {}, 0xa, 0x1}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) 3.889167121s ago: executing program 2 (id=982): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000280), 0x1, 0x1) umount2(&(0x7f0000001540)='./file0\x00', 0x2) dup3(r0, r1, 0x0) 3.618621634s ago: executing program 2 (id=983): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3.569985842s ago: executing program 2 (id=984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 3.515032119s ago: executing program 2 (id=985): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_clone(0x80300511, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 1.76930431s ago: executing program 2 (id=986): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f00000000c0)="d4", &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) 66.332326ms ago: executing program 4 (id=987): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 64.203419ms ago: executing program 2 (id=988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) close(0x3) 0s ago: executing program 4 (id=989): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x3) kernel console output (not intermixed with test programs): 0: entered allmulticast mode [ 84.265025][ T5822] bridge_slave_0: entered promiscuous mode [ 84.271710][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.433123][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.433253][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.433426][ T5821] bridge_slave_1: entered allmulticast mode [ 84.436090][ T5821] bridge_slave_1: entered promiscuous mode [ 84.534250][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.534407][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.534578][ T5822] bridge_slave_1: entered allmulticast mode [ 84.537280][ T5822] bridge_slave_1: entered promiscuous mode [ 84.543347][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.553898][ T5811] team0: Port device team_slave_0 added [ 84.644946][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.645055][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.645164][ T5819] bridge_slave_0: entered allmulticast mode [ 84.646599][ T5819] bridge_slave_0: entered promiscuous mode [ 84.827014][ T5811] team0: Port device team_slave_1 added [ 84.882862][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.882963][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.883105][ T5819] bridge_slave_1: entered allmulticast mode [ 84.885749][ T5819] bridge_slave_1: entered promiscuous mode [ 85.105353][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.175201][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.177201][ T5810] team0: Port device team_slave_0 added [ 85.242858][ T5816] Bluetooth: hci1: command tx timeout [ 85.286013][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.346508][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.349282][ T5810] team0: Port device team_slave_1 added [ 85.350480][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.350488][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.350500][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.401012][ T5825] Bluetooth: hci0: command tx timeout [ 85.401097][ T5816] Bluetooth: hci3: command tx timeout [ 85.480880][ T5825] Bluetooth: hci4: command tx timeout [ 85.480970][ T5816] Bluetooth: hci2: command tx timeout [ 85.784411][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.952160][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.952170][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.952183][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.065871][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.220167][ T5821] team0: Port device team_slave_0 added [ 86.304287][ T5822] team0: Port device team_slave_0 added [ 86.306187][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.306200][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.306222][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.313446][ T5821] team0: Port device team_slave_1 added [ 86.396454][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.396468][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.396489][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.398846][ T5822] team0: Port device team_slave_1 added [ 86.478031][ T5819] team0: Port device team_slave_0 added [ 86.705073][ T5819] team0: Port device team_slave_1 added [ 86.964284][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.964299][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.964322][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.064086][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.064101][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.064124][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.072352][ T5811] hsr_slave_0: entered promiscuous mode [ 87.073979][ T5811] hsr_slave_1: entered promiscuous mode [ 87.075944][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.075955][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.075977][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.242260][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.242270][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.242283][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.249660][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.249674][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.249694][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.321740][ T5816] Bluetooth: hci1: command tx timeout [ 87.354890][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.354903][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.354925][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.363113][ T5810] hsr_slave_0: entered promiscuous mode [ 87.364264][ T5810] hsr_slave_1: entered promiscuous mode [ 87.365172][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 87.365287][ T5810] Cannot create hsr debugfs directory [ 87.480941][ T5825] Bluetooth: hci0: command tx timeout [ 87.481027][ T5816] Bluetooth: hci3: command tx timeout [ 87.560794][ T5816] Bluetooth: hci2: command tx timeout [ 87.560807][ T5825] Bluetooth: hci4: command tx timeout [ 87.901008][ T5821] hsr_slave_0: entered promiscuous mode [ 87.901748][ T5821] hsr_slave_1: entered promiscuous mode [ 87.902280][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 87.902297][ T5821] Cannot create hsr debugfs directory [ 88.087627][ T5822] hsr_slave_0: entered promiscuous mode [ 88.088435][ T5822] hsr_slave_1: entered promiscuous mode [ 88.088931][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 88.088949][ T5822] Cannot create hsr debugfs directory [ 88.288062][ T5819] hsr_slave_0: entered promiscuous mode [ 88.288773][ T5819] hsr_slave_1: entered promiscuous mode [ 88.289367][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 88.289385][ T5819] Cannot create hsr debugfs directory [ 89.400801][ T5825] Bluetooth: hci1: command tx timeout [ 89.560843][ T5825] Bluetooth: hci3: command tx timeout [ 89.560872][ T5825] Bluetooth: hci0: command tx timeout [ 89.620220][ T5811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.641342][ T5825] Bluetooth: hci2: command tx timeout [ 89.641384][ T5816] Bluetooth: hci4: command tx timeout [ 89.690149][ T5811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.708848][ T5811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.750903][ T5811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.842923][ T5810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.878630][ T5810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.929882][ T5810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.963003][ T5810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.070069][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.114991][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.149491][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.182505][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.320536][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.354957][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.390243][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.425929][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.583498][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.629482][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.663674][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.699617][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.745365][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.849459][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.883861][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.899341][ T3792] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.905261][ T3792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.938955][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.939139][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.004335][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.008294][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.049615][ T3792] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.049729][ T3792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.092411][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.092525][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.131666][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.153698][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.174123][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.174311][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.227719][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.227814][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.298256][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.349539][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.359468][ T3792] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.360197][ T3792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.422877][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.423811][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.487493][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.573040][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.573232][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.623627][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.623879][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.777187][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.939460][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.085517][ T5811] veth0_vlan: entered promiscuous mode [ 92.162285][ T5811] veth1_vlan: entered promiscuous mode [ 92.215947][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.325993][ T5810] veth0_vlan: entered promiscuous mode [ 92.403339][ T5810] veth1_vlan: entered promiscuous mode [ 92.419212][ T5811] veth0_macvtap: entered promiscuous mode [ 92.447252][ T5811] veth1_macvtap: entered promiscuous mode [ 92.458407][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.473418][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.549324][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.618143][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.648919][ T5810] veth0_macvtap: entered promiscuous mode [ 92.678510][ T3792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.703022][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.705429][ T5810] veth1_macvtap: entered promiscuous mode [ 92.707602][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.723984][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.863841][ T5821] veth0_vlan: entered promiscuous mode [ 92.883549][ T5819] veth0_vlan: entered promiscuous mode [ 92.889972][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.984354][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.003144][ T5821] veth1_vlan: entered promiscuous mode [ 93.013448][ T5819] veth1_vlan: entered promiscuous mode [ 93.047471][ T84] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.074114][ T84] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.092350][ T84] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.109720][ T84] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.115280][ T3792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.115301][ T3792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.157940][ T5822] veth0_vlan: entered promiscuous mode [ 93.273823][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.273841][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.302592][ T5822] veth1_vlan: entered promiscuous mode [ 93.462953][ T5821] veth0_macvtap: entered promiscuous mode [ 93.514355][ T5819] veth0_macvtap: entered promiscuous mode [ 93.536703][ T3792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.536722][ T3792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.538249][ T5821] veth1_macvtap: entered promiscuous mode [ 93.547455][ T5819] veth1_macvtap: entered promiscuous mode [ 93.749913][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.764663][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.769750][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.784495][ T5822] veth0_macvtap: entered promiscuous mode [ 93.802799][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.811315][ T5822] veth1_macvtap: entered promiscuous mode [ 93.823971][ T4720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.834677][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.853659][ T4720] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.869772][ T4720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.870444][ T4720] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.967657][ T4720] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.987528][ T4720] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.011630][ T4720] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.734973][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.533197][ T4720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.533215][ T4720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.537871][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.723216][ T4720] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.760757][ T4720] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.767862][ T1015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.818652][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.031947][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.031966][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.223938][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.223955][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.280813][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.280830][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.389137][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.389153][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.471424][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.561358][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.561376][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.645036][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 96.665647][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.665678][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.665700][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 96.665742][ T9] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 96.665773][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.735721][ T4720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.735738][ T4720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.782370][ T9] usb 4-1: config 0 descriptor?? [ 96.963959][ T5956] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.363623][ T5960] capability: warning: `syz.2.12' uses deprecated v2 capabilities in a way that may be insecure [ 97.399629][ T9] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 97.399666][ T9] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 97.399692][ T9] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 97.399717][ T9] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 97.399742][ T9] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 97.429373][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input5 [ 97.525095][ T5948] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 97.525175][ T5948] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4'. [ 97.573952][ T37] audit: type=1326 audit(1759293611.165:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5961 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c149eec9 code=0x7ffc0000 [ 97.573998][ T37] audit: type=1326 audit(1759293611.165:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5961 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c149eec9 code=0x7ffc0000 [ 97.580207][ T37] audit: type=1326 audit(1759293611.165:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5961 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7c149eec9 code=0x7ffc0000 [ 97.580248][ T37] audit: type=1326 audit(1759293611.165:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5961 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c149eec9 code=0x7ffc0000 [ 97.580285][ T37] audit: type=1326 audit(1759293611.165:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5961 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c149eec9 code=0x7ffc0000 [ 97.580319][ T37] audit: type=1326 audit(1759293611.165:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5961 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc7c149eec9 code=0x7ffc0000 [ 97.580357][ T37] audit: type=1326 audit(1759293611.165:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5961 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c149eec9 code=0x7ffc0000 [ 97.580394][ T37] audit: type=1326 audit(1759293611.165:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5961 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c149eec9 code=0x7ffc0000 [ 97.629668][ T37] audit: type=1326 audit(1759293611.205:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5961 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fc7c149eec9 code=0x7ffc0000 [ 97.629716][ T37] audit: type=1326 audit(1759293611.205:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5961 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c149eec9 code=0x7ffc0000 [ 97.630781][ T5814] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.772277][ T9] shield 0003:0955:7214.0001: Registered Thunderstrike controller [ 97.801378][ T9] shield 0003:0955:7214.0001: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 97.830837][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 97.849030][ T5814] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 97.849057][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.849075][ T5814] usb 3-1: Product: syz [ 97.849088][ T5814] usb 3-1: Manufacturer: syz [ 97.849101][ T5814] usb 3-1: SerialNumber: syz [ 97.892442][ T5967] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 97.893240][ T5967] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 97.912623][ T5967] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 97.936296][ T5967] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 97.971221][ T5814] usb 3-1: config 0 descriptor?? [ 98.005487][ T5814] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 98.107686][ T9] usb 4-1: USB disconnect, device number 2 [ 98.646903][ T5814] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 98.647412][ T5814] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 98.704085][ T5814] usb 3-1: USB disconnect, device number 2 [ 99.780930][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.819308][ T5814] IPVS: starting estimator thread 0... [ 99.931823][ T6003] IPVS: using max 8 ests per chain, 19200 per kthread [ 99.934938][ T31] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 99.934963][ T31] usb 3-1: config 0 has no interface number 0 [ 99.934994][ T31] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 99.935032][ T31] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 99.935059][ T31] usb 3-1: config 0 interface 255 has no altsetting 0 [ 99.935091][ T31] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 99.935112][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.000012][ T6011] capability: warning: `syz.3.30' uses 32-bit capabilities (legacy support in use) [ 100.044805][ T31] usb 3-1: config 0 descriptor?? [ 100.049270][ T31] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 100.307475][ T31] usb 3-1: USB disconnect, device number 3 [ 101.680907][ T6026] syz.2.35 (6026) used greatest stack depth: 17680 bytes left [ 102.426980][ T6057] syz.4.45 uses obsolete (PF_INET,SOCK_PACKET) [ 104.278845][ T6103] netlink: 28 bytes leftover after parsing attributes in process `syz.4.60'. [ 104.278926][ T6103] netlink: 28 bytes leftover after parsing attributes in process `syz.4.60'. [ 105.634730][ T6092] syz.3.56 (6092): drop_caches: 2 [ 105.884893][ T6136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.71'. [ 105.884913][ T6136] netlink: 64 bytes leftover after parsing attributes in process `syz.1.71'. [ 105.885281][ T6136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.71'. [ 107.198675][ T6169] process 'syz.0.84' launched './file1' with NULL argv: empty string added [ 107.312197][ T6171] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.785455][ T6220] Zero length message leads to an empty skb [ 110.520868][ T5816] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.521117][ T6191] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 111.138579][ T6191] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.201197][ T6191] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.267077][ T6191] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.267182][ T6191] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.332432][ T6191] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.395281][ T6191] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.395414][ T6191] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.463183][ T6191] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.524067][ T6191] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.524192][ T6191] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.583753][ T6191] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.663994][ T6191] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 111.664208][ T6191] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 111.726142][ T6191] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 111.998823][ T6237] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 112.040920][ T5892] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 112.194991][ T5892] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 112.195018][ T5892] usb 1-1: config 5 has no interface number 0 [ 112.195049][ T5892] usb 1-1: config 5 interface 123 has no altsetting 0 [ 112.232202][ T5892] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 112.232229][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.232246][ T5892] usb 1-1: Product: syz [ 112.232257][ T5892] usb 1-1: Manufacturer: syz [ 112.232269][ T5892] usb 1-1: SerialNumber: syz [ 112.257169][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 112.257202][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 112.257226][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 112.257249][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 112.257272][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 112.257295][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 112.257318][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 112.257341][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 112.257364][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 112.257487][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 112.489991][ T9] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 112.600835][ T5816] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.687935][ T5892] comedi comedi5: Wrong number of endpoints [ 112.687959][ T5892] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 112.751233][ T5892] usb 1-1: USB disconnect, device number 2 [ 113.321136][ T5816] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.360774][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.402038][ T5816] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.537296][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 113.537341][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.537365][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.537386][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 113.542316][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 113.542341][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 113.542360][ T9] usb 4-1: Manufacturer: syz [ 113.564573][ T5816] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.584383][ T9] usb 4-1: config 0 descriptor?? [ 113.720873][ T5816] Bluetooth: hci4: command 0x0405 tx timeout [ 114.125266][ T9] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 114.333952][ T9] usb 4-1: USB disconnect, device number 3 [ 114.681336][ T5816] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.029443][ T6302] loop5: detected capacity change from 0 to 2199 [ 115.082995][ T6302] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 115.245063][ T5182] udevd[5182]: worker [5968] terminated by signal 33 (Unknown signal 33) [ 115.245112][ T5182] udevd[5182]: worker [5968] failed while handling '/devices/virtual/block/loop5' [ 115.344343][ T5182] udevd[5182]: worker [5953] terminated by signal 33 (Unknown signal 33) [ 115.344391][ T5182] udevd[5182]: worker [5953] failed while handling '/devices/virtual/block/loop5' [ 115.400718][ T5816] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.480824][ T5816] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.585918][ T6314] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 115.585955][ T6314] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 115.617935][ T6314] netlink: 'syz.3.141': attribute type 10 has an invalid length. [ 115.640757][ T5816] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.805147][ T5816] Bluetooth: hci4: command 0x0405 tx timeout [ 115.927631][ T6314] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 115.927661][ T6314] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 116.072116][ T6314] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 117.195587][ T6342] lo speed is unknown, defaulting to 1000 [ 117.197791][ T6342] lo speed is unknown, defaulting to 1000 [ 117.223380][ T6342] lo speed is unknown, defaulting to 1000 [ 117.276114][ T6342] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.298804][ T6342] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 117.463734][ T6346] tc_dump_action: action bad kind [ 117.480832][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.502296][ T6342] lo speed is unknown, defaulting to 1000 [ 117.541533][ T6342] lo speed is unknown, defaulting to 1000 [ 117.561108][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.581113][ T6342] lo speed is unknown, defaulting to 1000 [ 117.599468][ T6342] lo speed is unknown, defaulting to 1000 [ 117.603647][ T6342] lo speed is unknown, defaulting to 1000 [ 117.720934][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.880809][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 118.480780][ T5892] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.634463][ T5892] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 118.634488][ T5892] usb 2-1: config 1 has no interface number 0 [ 118.634531][ T5892] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 118.634556][ T5892] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 118.634579][ T5892] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 118.634602][ T5892] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.637575][ T5892] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 118.637601][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.637619][ T5892] usb 2-1: Product: syz [ 118.637632][ T5892] usb 2-1: Manufacturer: syz [ 118.637644][ T5892] usb 2-1: SerialNumber: syz [ 118.746719][ T6374] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.746867][ T6374] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.961265][ T6374] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.961372][ T6374] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.070882][ T5832] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 119.207781][ T5892] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 119.340359][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 119.342821][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.342852][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 119.342891][ T5832] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 119.342913][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.500753][ T5816] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 119.536462][ T5832] usb 4-1: config 0 descriptor?? [ 119.933341][ T5892] usb 2-1: USB disconnect, device number 2 [ 119.938048][ T5892] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 120.096422][ T6383] raw-gadget.1 gadget.3: fail, usb_ep_set_halt returned -11 [ 120.112240][ T5832] usbhid 4-1:0.0: can't add hid device: -71 [ 120.112357][ T5832] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 120.139898][ T5832] usb 4-1: USB disconnect, device number 4 [ 120.540432][ T6389] kexec: Could not allocate control_code_buffer [ 120.788944][ T5892] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 121.258410][ T6402] netlink: 'syz.1.173': attribute type 39 has an invalid length. [ 122.484919][ T6422] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 122.484956][ T6422] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 122.506710][ T6422] netlink: 'syz.2.181': attribute type 10 has an invalid length. [ 122.643341][ T6425] netlink: 'syz.0.182': attribute type 4 has an invalid length. [ 122.643362][ T6425] netlink: 17 bytes leftover after parsing attributes in process `syz.0.182'. [ 122.722074][ T6422] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 122.722104][ T6422] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 122.753871][ T6422] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 123.271443][ T6437] ======================================================= [ 123.271443][ T6437] WARNING: The mand mount option has been deprecated and [ 123.271443][ T6437] and is ignored by this kernel. Remove the mand [ 123.271443][ T6437] option from the mount to silence this warning. [ 123.271443][ T6437] ======================================================= [ 125.124249][ T1150] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.504708][ T6453] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.795780][ T1150] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.878113][ T6453] netlink: 'syz.2.196': attribute type 25 has an invalid length. [ 125.878134][ T6453] netlink: 'syz.2.196': attribute type 7 has an invalid length. [ 125.888318][ T6454] netlink: 'syz.2.196': attribute type 25 has an invalid length. [ 125.888335][ T6454] netlink: 'syz.2.196': attribute type 7 has an invalid length. [ 126.171614][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.177865][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.179365][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.203694][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.205917][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 126.635760][ T1150] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.672942][ T6463] input: syz1 as /devices/virtual/input/input6 [ 126.814687][ T6460] lo speed is unknown, defaulting to 1000 [ 127.606134][ T1150] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.983766][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.110730][ T5889] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 128.273078][ T5889] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.273108][ T5889] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.273150][ T5889] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.273172][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.303704][ T5825] Bluetooth: hci1: command tx timeout [ 128.556260][ T6483] tipc: Started in network mode [ 128.556292][ T6483] tipc: Node identity ac141441, cluster identity 4711 [ 128.557158][ T6483] tipc: Enabling of bearer rejected, failed to enable media [ 128.620816][ T5889] usb 5-1: usb_control_msg returned -32 [ 128.620859][ T5889] usbtmc 5-1:16.0: can't read capabilities [ 128.957540][ T6460] chnl_net:caif_netlink_parms(): no params data found [ 129.185181][ T1150] bridge_slave_1: left allmulticast mode [ 129.185284][ T1150] bridge_slave_1: left promiscuous mode [ 129.187347][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.323260][ T1150] bridge_slave_0: left allmulticast mode [ 129.323287][ T1150] bridge_slave_0: left promiscuous mode [ 129.327558][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.370899][ T5825] Bluetooth: hci1: command tx timeout [ 130.718360][ T9] usb 5-1: USB disconnect, device number 2 [ 131.943931][ T6529] input: syz1 as /devices/virtual/input/input7 [ 132.450810][ T5825] Bluetooth: hci1: command tx timeout [ 132.609571][ T6544] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 132.774969][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.775066][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.010713][ T5892] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 133.171299][ T5892] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 133.171332][ T5892] usb 3-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 133.171351][ T5892] usb 3-1: Product: syz [ 133.171365][ T5892] usb 3-1: Manufacturer: syz [ 133.171378][ T5892] usb 3-1: SerialNumber: syz [ 133.178180][ T5892] usb 3-1: config 0 descriptor?? [ 133.219458][ T5892] ch341 3-1:0.0: ch341-uart converter detected [ 133.439625][ T6558] Bluetooth: MGMT ver 1.23 [ 133.510471][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.581836][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.624918][ T1150] bond0 (unregistering): Released all slaves [ 133.739751][ T6545] pim6reg1: entered promiscuous mode [ 133.739776][ T6545] pim6reg1: entered allmulticast mode [ 133.907925][ T6562] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.218148][ T5892] ch341-uart ttyUSB0: failed to read break control: -71 [ 134.218202][ T5892] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 134.242469][ T5892] usb 3-1: USB disconnect, device number 4 [ 134.248695][ T5892] ch341 3-1:0.0: device disconnected [ 134.357367][ T6564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.357679][ T6564] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 134.358891][ T6564] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 134.520713][ T5825] Bluetooth: hci1: command tx timeout [ 135.507524][ T6599] 9pnet_fd: p9_fd_create_unix (6599): problem connecting socket: ./file0: -5 [ 136.012841][ T6460] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.012982][ T6460] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.013197][ T6460] bridge_slave_0: entered allmulticast mode [ 136.058545][ T6460] bridge_slave_0: entered promiscuous mode [ 136.072486][ T6460] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.074581][ T6460] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.074773][ T6460] bridge_slave_1: entered allmulticast mode [ 136.090448][ T6460] bridge_slave_1: entered promiscuous mode [ 136.440900][ T5949] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 136.591074][ T6460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.595865][ T6460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.597263][ T5949] usb 3-1: config 0 has no interfaces? [ 136.599521][ T5949] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 136.599545][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 136.599562][ T5949] usb 3-1: Product: syz [ 136.599570][ T5949] usb 3-1: Manufacturer: syz [ 136.599577][ T5949] usb 3-1: SerialNumber: syz [ 136.620855][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 136.686076][ T5949] usb 3-1: config 0 descriptor?? [ 136.791052][ T1150] hsr_slave_0: left promiscuous mode [ 136.814234][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.814258][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 136.814307][ T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 136.814329][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.820457][ T9] usb 5-1: config 0 descriptor?? [ 136.861605][ T5814] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.883723][ T1150] hsr_slave_1: left promiscuous mode [ 136.897240][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.897320][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.916649][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 136.917004][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 136.955509][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.955535][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.971006][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 136.975267][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 136.975350][ T9] usb 5-1: media controller created [ 136.992758][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.030015][ T5814] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.030042][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 137.030067][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 137.030087][ T5814] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.030127][ T5814] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.030149][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.084461][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 137.084584][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 137.109841][ T6614] dvb-usb: bulk message failed: -22 (2/0) [ 137.140520][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 137.196494][ T5814] usb 4-1: config 0 descriptor?? [ 137.266299][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 137.266320][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 137.275266][ T1150] veth1_macvtap: left promiscuous mode [ 137.275511][ T1150] veth0_macvtap: left promiscuous mode [ 137.276604][ T1150] veth1_vlan: left promiscuous mode [ 137.276975][ T1150] veth0_vlan: left promiscuous mode [ 137.314521][ T9] usb 5-1: USB disconnect, device number 3 [ 137.569747][ T5832] usb 3-1: USB disconnect, device number 5 [ 137.605963][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 137.633132][ T5814] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 137.685564][ T5814] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 138.145695][ T6631] loop2: detected capacity change from 0 to 7 [ 138.174433][ T6631] Dev loop2: unable to read RDB block 7 [ 138.174476][ T6631] loop2: AHDI p1 p2 p3 [ 138.174505][ T6631] loop2: partition table partially beyond EOD, truncated [ 138.174759][ T6631] loop2: p1 start 1601398130 is beyond EOD, truncated [ 138.174779][ T6631] loop2: p2 start 1702059890 is beyond EOD, truncated [ 140.031176][ T5814] usb 4-1: reset high-speed USB device number 5 using dummy_hcd [ 140.211572][ T5814] usb 4-1: device firmware changed [ 140.226448][ T9] usb 4-1: USB disconnect, device number 5 [ 140.420784][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 140.607709][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.607740][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.607776][ T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 140.607798][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.664012][ T9] usb 4-1: config 0 descriptor?? [ 141.271452][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 141.517699][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 141.922177][ T9] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #100: -71 [ 141.922238][ T9] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 141.922255][ T9] uclogic 0003:256C:006D.0005: failed probing pen v1 parameters: -71 [ 141.922306][ T9] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 141.922418][ T9] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 141.990125][ T9] usb 4-1: USB disconnect, device number 6 [ 143.870790][ T5949] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 144.051065][ T5949] usb 4-1: Using ep0 maxpacket: 16 [ 144.057493][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.057522][ T5949] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.057562][ T5949] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 144.057584][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.111016][ T5949] usb 4-1: config 0 descriptor?? [ 144.536633][ T5832] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 144.579573][ T5949] HID 045e:07da: Invalid code 65791 type 1 [ 144.618170][ T5949] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0006/input/input9 [ 144.710761][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 144.718811][ T5949] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 144.763388][ T5832] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 144.763412][ T5832] usb 3-1: config 0 has no interface number 0 [ 144.764704][ T5832] usb 3-1: config 0 interface 184 has no altsetting 0 [ 144.768957][ T5832] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 144.768983][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.769055][ T5832] usb 3-1: Product: syz [ 144.769068][ T5832] usb 3-1: Manufacturer: syz [ 144.769082][ T5832] usb 3-1: SerialNumber: syz [ 144.927106][ T5832] usb 3-1: config 0 descriptor?? [ 144.968660][ T5832] smsc75xx v1.0.0 [ 145.445019][ T5814] usb 4-1: USB disconnect, device number 7 [ 145.592538][ T5832] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 145.592567][ T5832] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 145.629841][ T6460] team0: Port device team_slave_0 added [ 145.660287][ T6460] team0: Port device team_slave_1 added [ 145.807292][ T5832] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 145.807335][ T5832] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 145.807354][ T5832] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 145.807873][ T5832] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 145.876639][ T5832] usb 3-1: USB disconnect, device number 6 [ 145.881022][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 146.001118][ T6460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.001133][ T6460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.001156][ T6460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.006279][ T6460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.006291][ T6460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.006314][ T6460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.036016][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 146.036041][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.036059][ T31] usb 5-1: Product: syz [ 146.036072][ T31] usb 5-1: Manufacturer: syz [ 146.036084][ T31] usb 5-1: SerialNumber: syz [ 146.513989][ T6691] veth1_to_bond: entered allmulticast mode [ 146.514719][ T6692] veth1_to_bond: entered promiscuous mode [ 146.550311][ T6690] veth1_to_bond: left promiscuous mode [ 146.554445][ T6690] veth1_to_bond: left allmulticast mode [ 146.642515][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.651261][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.667068][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.684296][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.686436][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.697166][ T6460] hsr_slave_0: entered promiscuous mode [ 146.709204][ T6460] hsr_slave_1: entered promiscuous mode [ 147.015763][ T6703] Driver unsupported XDP return value 0 on prog (id 42) dev N/A, expect packet loss! [ 147.156248][ T31] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 147.156298][ T31] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 147.159070][ T31] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 147.239499][ T31] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 147.325333][ T31] usb 5-1: USB disconnect, device number 4 [ 148.118037][ T1150] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.211572][ T6696] lo speed is unknown, defaulting to 1000 [ 148.340803][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 148.424179][ T1150] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.492290][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 148.498498][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.498521][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 148.528130][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 148.528159][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.528178][ T10] usb 4-1: Product: syz [ 148.528192][ T10] usb 4-1: Manufacturer: syz [ 148.528206][ T10] usb 4-1: SerialNumber: syz [ 148.559672][ T6731] vivid-004: disconnect [ 148.561941][ T6731] vivid-004: reconnect [ 148.586366][ T10] usb 4-1: config 0 descriptor?? [ 148.760887][ T5816] Bluetooth: hci2: command tx timeout [ 148.917061][ T1150] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.157522][ T9] usb 4-1: USB disconnect, device number 8 [ 149.199455][ T6738] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 149.199469][ T6738] syzkaller1: Linktype set failed because interface is up [ 149.251035][ T5814] syzkaller1: tun_net_xmit 90 [ 149.368332][ T1150] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.024812][ T988] Bluetooth: (null): Invalid header checksum [ 150.024929][ T988] Bluetooth: (null): Invalid header checksum [ 150.137854][ T1015] Bluetooth: (null): Invalid header checksum [ 150.241700][ T4720] Bluetooth: (null): Invalid header checksum [ 150.369949][ T3792] Bluetooth: (null): Invalid header checksum [ 150.440090][ T6460] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.461993][ T3792] Bluetooth: (null): Invalid header checksum [ 150.585142][ T13] Bluetooth: (null): Invalid header checksum [ 150.627103][ T6460] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.688302][ T13] Bluetooth: (null): Invalid header checksum [ 150.692367][ T1150] bridge_slave_1: left allmulticast mode [ 150.692389][ T1150] bridge_slave_1: left promiscuous mode [ 150.692618][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.780737][ T5814] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 150.799196][ T13] Bluetooth: (null): Invalid header checksum [ 150.832230][ T1150] bridge_slave_0: left allmulticast mode [ 150.832253][ T1150] bridge_slave_0: left promiscuous mode [ 150.832513][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.840958][ T5816] Bluetooth: hci2: command tx timeout [ 150.912276][ T3715] Bluetooth: (null): Invalid header checksum [ 150.947960][ T5814] usb 3-1: config 0 has no interfaces? [ 150.947995][ T5814] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 150.948016][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.983351][ T5814] usb 3-1: config 0 descriptor?? [ 151.014194][ T4720] Bluetooth: (null): Invalid header checksum [ 151.131379][ T3792] Bluetooth: (null): Invalid header checksum [ 151.231103][ T84] Bluetooth: (null): Invalid header checksum [ 151.345958][ T3715] Bluetooth: (null): Invalid header checksum [ 151.574212][ T5814] usb 3-1: USB disconnect, device number 7 [ 151.822452][ T5949] libceph: connect (1)[c::]:6789 error -101 [ 151.823077][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 151.829594][ T5949] libceph: connect (1)[c::]:6789 error -101 [ 151.829776][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 151.835324][ T6762] ceph: No mds server is up or the cluster is laggy [ 152.318213][ T10] kernel read not supported for file /admmidi2 (pid: 10 comm: kworker/0:1) [ 152.921095][ T5816] Bluetooth: hci2: command tx timeout [ 154.112950][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.188362][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.232637][ T1150] bond0 (unregistering): Released all slaves [ 154.307961][ T6460] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.480745][ T6460] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 154.535971][ T1150] tipc: Left network mode [ 154.536581][ T6696] chnl_net:caif_netlink_parms(): no params data found [ 154.715073][ T6806] binder: 6805:6806 ioctl c0306201 0 returned -14 [ 154.715401][ T6806] binder: 6805:6806 ioctl c018620c 200000000280 returned -1 [ 155.000680][ T5816] Bluetooth: hci2: command tx timeout [ 155.450426][ T6820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.120783][ T5814] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 156.181665][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 156.181681][ T37] audit: type=1326 audit(1759293669.775:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6839 comm="syz.2.341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a06f0eec9 code=0x0 [ 156.280985][ T5814] usb 4-1: Using ep0 maxpacket: 8 [ 156.285550][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.285594][ T5814] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 156.285617][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.323937][ T5814] usb 4-1: config 0 descriptor?? [ 156.352424][ T6696] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.352543][ T6696] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.352770][ T6696] bridge_slave_0: entered allmulticast mode [ 156.358931][ T6696] bridge_slave_0: entered promiscuous mode [ 156.416419][ T6696] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.416553][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.416721][ T6696] bridge_slave_1: entered allmulticast mode [ 156.449087][ T6696] bridge_slave_1: entered promiscuous mode [ 156.534553][ T5814] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 156.703999][ T1150] hsr_slave_0: left promiscuous mode [ 156.743503][ T1150] hsr_slave_1: left promiscuous mode [ 156.758526][ T5832] usb 4-1: USB disconnect, device number 9 [ 156.764836][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.764859][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.812640][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.812664][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.935877][ T1150] veth1_macvtap: left promiscuous mode [ 156.935986][ T1150] veth0_macvtap: left promiscuous mode [ 156.936248][ T1150] veth1_vlan: left promiscuous mode [ 156.936425][ T1150] veth0_vlan: left promiscuous mode [ 158.330744][ T5889] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 158.500918][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 158.509798][ T5889] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 158.509821][ T5889] usb 5-1: config 0 has no interface number 0 [ 158.509853][ T5889] usb 5-1: config 0 interface 85 has no altsetting 0 [ 158.512688][ T5889] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 158.512715][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.512741][ T5889] usb 5-1: Product: syz [ 158.512755][ T5889] usb 5-1: Manufacturer: syz [ 158.512769][ T5889] usb 5-1: SerialNumber: syz [ 158.580195][ T5889] usb 5-1: config 0 descriptor?? [ 158.587698][ T5889] appletouch 5-1:0.85: Could not find int-in endpoint [ 158.587721][ T5889] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 158.588552][ T5889] usbhid 5-1:0.85: couldn't find an input interrupt endpoint [ 158.798191][ T5949] usb 5-1: USB disconnect, device number 5 [ 159.391162][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 159.632822][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 161.655837][ T5832] lo speed is unknown, defaulting to 1000 [ 161.655865][ T5832] infiniband syz2: ib_query_port failed (-19) [ 161.659846][ T6876] warning: `syz.2.353' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 161.969267][ T6696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.986998][ T6696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.080780][ T5949] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 162.235054][ T5949] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 162.235083][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 162.235096][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 162.235107][ T5949] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.235131][ T5949] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.235142][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.238131][ T5949] usb 4-1: config 0 descriptor?? [ 162.533451][ T6696] team0: Port device team_slave_0 added [ 162.550005][ T6696] team0: Port device team_slave_1 added [ 162.706785][ T5949] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 164.063625][ T6696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.063641][ T6696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.063664][ T6696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.136387][ T6696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.136402][ T6696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.136426][ T6696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.444163][ T6696] hsr_slave_0: entered promiscuous mode [ 164.445396][ T6696] hsr_slave_1: entered promiscuous mode [ 164.446253][ T6696] debugfs: 'hsr0' already exists in 'hsr' [ 164.446275][ T6696] Cannot create hsr debugfs directory [ 164.559895][ T37] audit: type=1326 audit(1759293678.145:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6920 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f53deec9 code=0x7ffc0000 [ 164.559945][ T37] audit: type=1326 audit(1759293678.145:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6920 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f53deec9 code=0x7ffc0000 [ 164.559984][ T37] audit: type=1326 audit(1759293678.145:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6920 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f62f53deec9 code=0x7ffc0000 [ 164.560023][ T37] audit: type=1326 audit(1759293678.145:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6920 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f53deec9 code=0x7ffc0000 [ 164.560062][ T37] audit: type=1326 audit(1759293678.145:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6920 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f62f53deec9 code=0x7ffc0000 [ 164.560100][ T37] audit: type=1326 audit(1759293678.145:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6920 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f53deec9 code=0x7ffc0000 [ 164.748546][ T5814] usb 4-1: USB disconnect, device number 10 [ 164.852244][ T6923] atomic_op ffff888031c6ba18 conn xmit_atomic 0000000000000000 [ 165.047215][ T6460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.674726][ T6460] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.708032][ T988] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.708216][ T988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.744219][ T988] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.744376][ T988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.067320][ T6696] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 166.104249][ T6696] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 166.169892][ T6696] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 166.209215][ T6696] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 166.936297][ T6696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.032267][ T6696] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.042590][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.050786][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.100012][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.100148][ T4720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.178369][ T6460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.916576][ T6965] syz.2.383 (6965) used greatest stack depth: 15792 bytes left [ 168.115722][ T6696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.266608][ T6460] veth0_vlan: entered promiscuous mode [ 168.303976][ T6460] veth1_vlan: entered promiscuous mode [ 168.425479][ T6460] veth0_macvtap: entered promiscuous mode [ 168.458570][ T6460] veth1_macvtap: entered promiscuous mode [ 168.517304][ T6460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.562715][ T6460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.607335][ T988] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.610505][ T988] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.630929][ T988] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.643670][ T988] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.757969][ T13] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 169.274450][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.274468][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.405139][ T3792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.405157][ T3792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.528746][ T6696] veth0_vlan: entered promiscuous mode [ 169.563310][ T6696] veth1_vlan: entered promiscuous mode [ 169.629558][ T6696] veth0_macvtap: entered promiscuous mode [ 169.654180][ T6696] veth1_macvtap: entered promiscuous mode [ 169.755454][ T6696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.802811][ T6696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.842559][ T1150] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.846247][ T1150] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.846639][ T1150] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.847211][ T1150] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.142653][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.142672][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.229101][ T3792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.229120][ T3792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.527384][ T7040] input: syz1 as /devices/virtual/input/input11 [ 170.887224][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.408'. [ 170.989495][ T7048] netlink: 'syz.2.408': attribute type 1 has an invalid length. [ 170.989515][ T7048] netlink: 'syz.2.408': attribute type 2 has an invalid length. [ 171.281166][ T7056] macvlan0: entered allmulticast mode [ 171.317258][ T7056] veth1_vlan: entered allmulticast mode [ 171.336958][ T7056] team0: Port device macvlan0 added [ 171.452997][ T5814] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 171.620755][ T5814] usb 5-1: Using ep0 maxpacket: 32 [ 171.632332][ T5814] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 171.632362][ T5814] usb 5-1: config 0 has no interface number 0 [ 171.632405][ T5814] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.632430][ T5814] usb 5-1: config 0 interface 85 has no altsetting 0 [ 171.652553][ T5814] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 171.652578][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.652595][ T5814] usb 5-1: Product: syz [ 171.652607][ T5814] usb 5-1: Manufacturer: syz [ 171.652620][ T5814] usb 5-1: SerialNumber: syz [ 171.708684][ T5814] usb 5-1: config 0 descriptor?? [ 172.424354][ T5814] appletouch 5-1:0.85: Geyser mode initialized. [ 172.432805][ T5814] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input12 [ 172.669703][ C1] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 172.710481][ T5814] usb 5-1: USB disconnect, device number 6 [ 172.830274][ T5814] appletouch 5-1:0.85: input: appletouch disconnected [ 173.787545][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 173.946439][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 173.949911][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.949955][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 173.950452][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.010223][ T10] usb 3-1: config 0 descriptor?? [ 174.507576][ T10] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 174.573506][ T37] audit: type=1326 audit(1759293688.165:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7117 comm="syz.4.433" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9bd8eeec9 code=0x0 [ 174.696293][ T5903] usb 3-1: USB disconnect, device number 8 [ 175.680719][ T5903] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 175.746279][ T5814] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 175.843106][ T5903] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 175.843139][ T5903] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 175.843179][ T5903] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 175.843204][ T5903] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 175.845580][ T5903] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.845599][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.845608][ T5903] usb 3-1: Product: syz [ 175.845616][ T5903] usb 3-1: Manufacturer: syz [ 175.845623][ T5903] usb 3-1: SerialNumber: syz [ 175.849354][ T7133] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 175.854877][ T5903] cdc_mbim 3-1:1.0: skipping garbage [ 175.913958][ T5814] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 175.913985][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.945041][ T5814] usb 6-1: config 0 descriptor?? [ 176.120640][ T7133] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 176.122669][ T7133] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 176.736557][ T7133] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 176.737013][ T7133] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 176.737715][ T5903] cdc_mbim 3-1:1.0: dwNtbInMaxSize=170 is too small. Using 2048 [ 176.737735][ T5903] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 176.947828][ T5903] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 176.983808][ T5903] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 177.068339][ T5903] wwan wwan0: port wwan0mbim0 attached [ 177.171573][ T5814] usb 6-1: Cannot set autoneg [ 177.171823][ T5814] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 177.193234][ T5903] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 0a:a1:3d:1c:a2:f8 [ 177.205213][ T5814] usb 6-1: USB disconnect, device number 2 [ 177.247474][ T5903] usb 3-1: USB disconnect, device number 9 [ 177.249751][ T5903] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 177.413417][ T5903] wwan wwan0: port wwan0mbim0 disconnected [ 178.160354][ T7184] genirq: Flags mismatch irq 10. 00202000 (aio_iiro_16) vs. 00202080 (virtio2) [ 178.920887][ T7195] netlink: 'syz.4.464': attribute type 1 has an invalid length. [ 178.971809][ T7195] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.029084][ T7195] bond2: (slave ip6gretap1): making interface the new active one [ 179.030382][ T7195] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 179.060940][ T7201] tipc: Started in network mode [ 179.060956][ T7201] tipc: Node identity 4, cluster identity 4711 [ 179.060968][ T7201] tipc: Node number set to 4 [ 179.281980][ T37] audit: type=1326 audit(1759293692.865:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7210 comm="syz.4.471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9bd8eeec9 code=0x0 [ 180.406954][ T5814] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 180.507962][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.482'. [ 180.561613][ T5814] usb 3-1: Using ep0 maxpacket: 16 [ 180.564518][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 180.569612][ T5814] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 180.569637][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.569656][ T5814] usb 3-1: Product: syz [ 180.569669][ T5814] usb 3-1: Manufacturer: syz [ 180.569682][ T5814] usb 3-1: SerialNumber: syz [ 180.605047][ T5814] usb 3-1: config 0 descriptor?? [ 180.646176][ T5814] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 180.646212][ T5814] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 180.669112][ T7238] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.679702][ T7238] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.926903][ T7242] netlink: 'syz.3.484': attribute type 12 has an invalid length. [ 180.926923][ T7242] netlink: 'syz.3.484': attribute type 29 has an invalid length. [ 180.926935][ T7242] netlink: 148 bytes leftover after parsing attributes in process `syz.3.484'. [ 180.928590][ T7242] netlink: 51 bytes leftover after parsing attributes in process `syz.3.484'. [ 181.248865][ T5814] em28xx 3-1:0.0: chip ID is em2710/2820 [ 181.249099][ T7247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.249111][ T7247] IPv6: NLM_F_CREATE should be set when creating new route [ 181.885728][ T5814] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 181.885756][ T5814] em28xx 3-1:0.0: board has no eeprom [ 182.030652][ T5814] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 182.030692][ T5814] em28xx 3-1:0.0: dvb set to bulk mode. [ 182.038317][ T5904] em28xx 3-1:0.0: Binding DVB extension [ 182.055923][ T5814] usb 3-1: USB disconnect, device number 10 [ 182.058112][ T5814] em28xx 3-1:0.0: Disconnecting em28xx [ 182.605496][ T5904] em28xx 3-1:0.0: Registering input extension [ 182.619975][ T5814] em28xx 3-1:0.0: Closing input extension [ 182.807680][ T5814] em28xx 3-1:0.0: Freeing device [ 183.677255][ T37] audit: type=1326 audit(1759293697.265:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7275 comm="syz.5.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dfceeec9 code=0x7ffc0000 [ 183.679260][ T37] audit: type=1326 audit(1759293697.265:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7275 comm="syz.5.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dfceeec9 code=0x7ffc0000 [ 183.746248][ T37] audit: type=1326 audit(1759293697.265:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7275 comm="syz.5.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f53dfceeec9 code=0x7ffc0000 [ 183.746553][ T37] audit: type=1326 audit(1759293697.335:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7275 comm="syz.5.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dfceeec9 code=0x7ffc0000 [ 183.746810][ T37] audit: type=1326 audit(1759293697.335:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7275 comm="syz.5.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53dfceeec9 code=0x7ffc0000 [ 183.886670][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.501'. [ 184.302072][ T5892] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 184.471413][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.471445][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.471467][ T5892] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.471507][ T5892] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.471528][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.512966][ T5892] usb 6-1: config 0 descriptor?? [ 184.740877][ T5904] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 184.918981][ T5904] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 184.919008][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.968313][ T5904] usb 5-1: config 0 descriptor?? [ 185.027761][ T5892] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 185.201039][ T5904] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 185.431401][ T5904] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 185.431424][ T5904] [drm] Initialized udl on minor 2 [ 185.503476][ T7310] netlink: 116 bytes leftover after parsing attributes in process `syz.2.515'. [ 185.613203][ T10] usb 6-1: USB disconnect, device number 3 [ 185.626907][ T5904] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 185.628888][ T5904] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 185.860797][ T5949] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 185.873294][ T5814] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 185.887721][ T5814] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 185.888685][ T5814] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 185.897385][ T5814] usb 5-1: USB disconnect, device number 7 [ 186.014429][ T5949] usb 7-1: config 0 has no interfaces? [ 186.014466][ T5949] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.014488][ T5949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.048239][ T5949] usb 7-1: config 0 descriptor?? [ 187.184826][ T7336] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 187.522864][ T7339] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.621005][ T5814] usb 7-1: USB disconnect, device number 2 [ 187.673306][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'. [ 187.808745][ T7344] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.821877][ T7344] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.423058][ T7359] loop6: detected capacity change from 0 to 524287999 [ 189.260686][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 189.438616][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 189.438941][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.518433][ T10] usb 5-1: config 0 descriptor?? [ 189.519730][ T7386] Invalid ELF header len 8 [ 189.535677][ T10] cp210x 5-1:0.0: cp210x converter detected [ 189.939740][ T10] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 189.965173][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 190.144333][ T10] usb 5-1: USB disconnect, device number 8 [ 190.183691][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 190.302264][ T10] cp210x 5-1:0.0: device disconnected [ 190.999048][ T7403] Bluetooth: hci0: too big key_count value 39401 [ 191.130689][ T5832] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 191.280757][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 191.284786][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.284815][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.284852][ T5832] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 191.284875][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.290015][ T5832] usb 5-1: config 0 descriptor?? [ 191.751222][ T5832] hid_parser_main: 9 callbacks suppressed [ 191.751245][ T5832] ft260 0003:0403:6030.000A: unknown main item tag 0x7 [ 191.936487][ T5832] ft260 0003:0403:6030.000A: chip code: 6424 8183 [ 192.138462][ T5832] ft260 0003:0403:6030.000A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 192.558112][ T5832] ft260 0003:0403:6030.000A: failed to retrieve status: -71 [ 192.558831][ T5832] ft260 0003:0403:6030.000A: failed to reset I2C controller: -71 [ 192.571676][ T5892] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 192.626609][ T7427] loop2: detected capacity change from 0 to 7 [ 192.639700][ T7427] Dev loop2: unable to read RDB block 7 [ 192.639745][ T7427] loop2: unable to read partition table [ 192.639984][ T7427] loop2: partition table beyond EOD, truncated [ 192.640001][ T7427] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 192.673425][ T5832] usb 5-1: USB disconnect, device number 9 [ 192.753523][ T5892] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 192.753551][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.804946][ T5892] usb 3-1: config 0 descriptor?? [ 193.016682][ T5892] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 193.230317][ T5892] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 193.230341][ T5892] [drm] Initialized udl on minor 2 [ 193.342968][ T7441] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.387668][ T7440] loop2: detected capacity change from 0 to 7 [ 193.440817][ T5892] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 193.441167][ T5892] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 193.646522][ T5814] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 193.647207][ T5832] usb 3-1: USB disconnect, device number 11 [ 193.647944][ T5814] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 193.648117][ T5814] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 193.840798][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 193.990801][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 193.995122][ T9] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.995151][ T9] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.031971][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 194.031996][ T9] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 194.032015][ T9] usb 6-1: Product: syz [ 194.032029][ T9] usb 6-1: Manufacturer: syz [ 194.053343][ T9] hub 6-1:4.0: USB hub found [ 194.206659][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.206729][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.296511][ T9] hub 6-1:4.0: 2 ports detected [ 194.709277][ T9] hub 6-1:4.0: set hub depth failed [ 194.716597][ T9] usb 6-1: USB disconnect, device number 4 [ 195.106035][ T9] IPVS: starting estimator thread 0... [ 195.190797][ T7470] IPVS: using max 14 ests per chain, 33600 per kthread [ 195.503796][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.582'. [ 195.790890][ T5832] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 195.950772][ T5832] usb 6-1: Using ep0 maxpacket: 16 [ 195.957873][ T5832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.957909][ T5832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.957945][ T5832] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 195.957967][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.964018][ T5832] usb 6-1: config 0 descriptor?? [ 196.848462][ T5832] letsketch 0003:6161:4D15.000B: Device info: ఁ [ 196.853784][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.593'. [ 197.023709][ T7511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.036526][ T5832] letsketch 0003:6161:4D15.000B: Device info: 擃 [ 197.269164][ T5832] usb 6-1: Max retries (5) exceeded reading string descriptor 202 [ 197.269249][ T5832] letsketch 0003:6161:4D15.000B: probe with driver letsketch failed with error -71 [ 197.290784][ T5949] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 197.298165][ T5832] usb 6-1: USB disconnect, device number 5 [ 197.340845][ T5814] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 197.440732][ T5949] usb 7-1: Using ep0 maxpacket: 32 [ 197.443104][ T5949] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 197.443128][ T5949] usb 7-1: config 0 has no interface number 0 [ 197.443175][ T5949] usb 7-1: config 0 interface 184 has no altsetting 0 [ 197.446118][ T5949] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 197.446315][ T5949] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.446335][ T5949] usb 7-1: Product: syz [ 197.446349][ T5949] usb 7-1: Manufacturer: syz [ 197.446411][ T5949] usb 7-1: SerialNumber: syz [ 197.455560][ T5949] usb 7-1: config 0 descriptor?? [ 197.466616][ T5949] smsc75xx v1.0.0 [ 197.510784][ T5814] usb 3-1: Using ep0 maxpacket: 16 [ 197.524723][ T5814] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 197.524743][ T5814] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.524759][ T5814] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.527454][ T5814] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.527477][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.527502][ T5814] usb 3-1: Product: syz [ 197.527514][ T5814] usb 3-1: Manufacturer: syz [ 197.527527][ T5814] usb 3-1: SerialNumber: syz [ 197.699750][ T7524] mmap: syz.3.599 (7524) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 197.990874][ T5814] usb 3-1: 0:2 : does not exist [ 198.749665][ T5949] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 198.749693][ T5949] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 198.750187][ T5949] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 198.750211][ T5949] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 198.750229][ T5949] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 198.750246][ T5949] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 198.750532][ T5949] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 198.790747][ T5949] usb 7-1: USB disconnect, device number 3 [ 198.864504][ T5814] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 198.922819][ T5814] usb 3-1: USB disconnect, device number 12 [ 199.635894][ T7565] kvm: kvm [7564]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 200.112524][ T7583] netlink: 9 bytes leftover after parsing attributes in process `syz.3.628'. [ 200.207563][ T7585] netlink: 5 bytes leftover after parsing attributes in process `syz.3.628'. [ 201.162834][ T7583] gretap0: entered promiscuous mode [ 201.183037][ T7585] 0{X: renamed from gretap0 [ 201.249463][ T7585] 0{X: left promiscuous mode [ 201.249487][ T7585] 0{X: entered allmulticast mode [ 201.253040][ T7585] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 201.612113][ T3792] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.714424][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 201.720281][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 201.723313][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 201.724396][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 201.725162][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 201.947839][ T7606] binder: 7605:7606 ioctl c0306201 2000000003c0 returned -14 [ 202.081758][ T7609] vivid-004: disconnect [ 202.101396][ T7611] netlink: 'syz.6.638': attribute type 1 has an invalid length. [ 202.165181][ T3792] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.389218][ T7608] vivid-004: reconnect [ 202.402672][ T7611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.546002][ T7612] bond1: (slave gretap1): making interface the new active one [ 202.550539][ T7612] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 202.770527][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 202.858904][ T3792] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.170021][ T7639] netlink: 212264 bytes leftover after parsing attributes in process `syz.4.650'. [ 203.543192][ T5889] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 203.693498][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.693529][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.693554][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 203.693575][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.693615][ T5889] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.693637][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.795923][ T5889] usb 4-1: config 0 descriptor?? [ 203.811022][ T5825] Bluetooth: hci3: command tx timeout [ 203.826378][ T7603] chnl_net:caif_netlink_parms(): no params data found [ 204.244393][ T5889] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max [ 204.270943][ T5889] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 204.418398][ T3792] bridge_slave_1: left allmulticast mode [ 204.418424][ T3792] bridge_slave_1: left promiscuous mode [ 204.418645][ T3792] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.183855][ T3792] bridge_slave_0: left allmulticast mode [ 205.183883][ T3792] bridge_slave_0: left promiscuous mode [ 205.184130][ T3792] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.420343][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.662'. [ 205.481389][ T31] usb 4-1: USB disconnect, device number 11 [ 205.774186][ T7687] netlink: set zone limit has 4 unknown bytes [ 205.850645][ T5904] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 205.890813][ T5825] Bluetooth: hci3: command tx timeout [ 206.000745][ T5904] usb 6-1: Using ep0 maxpacket: 16 [ 206.003285][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.003315][ T5904] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 206.003356][ T5904] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 206.003378][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.059637][ T5904] usb 6-1: config 0 descriptor?? [ 206.320274][ T5832] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 206.480091][ T5904] HID 045e:07da: Invalid code 65791 type 1 [ 206.480698][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 206.497777][ T5904] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000D/input/input15 [ 206.503256][ T5832] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 206.503282][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.503300][ T5832] usb 4-1: Product: syz [ 206.503313][ T5832] usb 4-1: Manufacturer: syz [ 206.503326][ T5832] usb 4-1: SerialNumber: syz [ 206.518528][ T5832] usb 4-1: config 0 descriptor?? [ 206.528122][ T5832] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 206.557173][ T5904] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 206.755754][ T5892] usb 4-1: USB disconnect, device number 12 [ 207.317589][ T5892] usb 6-1: USB disconnect, device number 6 [ 207.672142][ T7704] netlink: 156 bytes leftover after parsing attributes in process `syz.3.673'. [ 207.723361][ T3792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.782166][ T3792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.843434][ T3792] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 207.971123][ T5825] Bluetooth: hci3: command tx timeout [ 208.013879][ T3792] bond0 (unregistering): Released all slaves [ 208.283359][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'. [ 208.283879][ T3792] tipc: Left network mode [ 208.288631][ T7603] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.288780][ T7603] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.288997][ T7603] bridge_slave_0: entered allmulticast mode [ 208.294848][ T7603] bridge_slave_0: entered promiscuous mode [ 208.399607][ T7603] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.399729][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.400057][ T7603] bridge_slave_1: entered allmulticast mode [ 208.415376][ T7603] bridge_slave_1: entered promiscuous mode [ 208.572072][ T7718] netlink: 28 bytes leftover after parsing attributes in process `syz.6.679'. [ 208.572093][ T7718] netlink: 'syz.6.679': attribute type 7 has an invalid length. [ 208.572100][ T7718] netlink: 'syz.6.679': attribute type 8 has an invalid length. [ 208.572107][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.679'. [ 208.921628][ T7718] gretap0: entered promiscuous mode [ 208.926721][ T7718] batadv_slave_1: entered promiscuous mode [ 208.927664][ T7718] erspan0: entered promiscuous mode [ 209.046097][ T7603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.097761][ T7603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.032373][ T7758] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 210.032413][ T7758] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 210.040263][ T7758] overlayfs: overlapping lowerdir path [ 210.042695][ T5825] Bluetooth: hci3: command tx timeout [ 210.123661][ T7603] team0: Port device team_slave_0 added [ 210.192705][ T7760] sctp: [Deprecated]: syz.3.696 (pid 7760) Use of int in maxseg socket option. [ 210.192705][ T7760] Use struct sctp_assoc_value instead [ 210.202067][ T5892] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 210.322915][ T3792] hsr_slave_0: left promiscuous mode [ 210.353981][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 210.356463][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.356515][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.356542][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 210.356562][ T5892] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 210.356584][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.369269][ T5892] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 210.369294][ T5892] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 210.369312][ T5892] usb 5-1: Manufacturer: syz [ 210.384316][ T5892] usb 5-1: config 0 descriptor?? [ 210.480751][ T3792] hsr_slave_1: left promiscuous mode [ 210.482049][ T3792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.482122][ T3792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.534385][ T3792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.534457][ T3792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.750669][ T5892] rc_core: IR keymap rc-hauppauge not found [ 210.750694][ T5892] Registered IR keymap rc-empty [ 210.751400][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.770832][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.792841][ T5892] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 210.795827][ T5892] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input16 [ 210.805966][ T3792] veth1_macvtap: left promiscuous mode [ 210.806063][ T3792] veth0_macvtap: left promiscuous mode [ 210.806310][ T3792] veth1_vlan: left promiscuous mode [ 210.806474][ T3792] veth0_vlan: left promiscuous mode [ 210.807575][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.820803][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.842015][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.860831][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.880954][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.900763][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.921375][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.940835][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.961094][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.980738][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 211.010302][ T5892] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 211.010326][ T5892] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 211.072799][ T5949] usb 5-1: USB disconnect, device number 10 [ 212.760996][ T5832] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 212.943784][ T5832] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 212.943813][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.949482][ T5832] usb 5-1: config 0 descriptor?? [ 212.979324][ T5832] cp210x 5-1:0.0: cp210x converter detected [ 213.392670][ T37] audit: type=1326 audit(1759293726.985:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7808 comm="syz.4.715" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9bd8eeec9 code=0x0 [ 213.459852][ T5832] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 213.742966][ T3792] team0 (unregistering): Port device team_slave_1 removed [ 214.012246][ T3792] team0 (unregistering): Port device team_slave_0 removed [ 215.502195][ T5832] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 215.502223][ T5832] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 215.515365][ T5832] usb 5-1: cp210x converter now attached to ttyUSB0 [ 215.540983][ T5832] usb 5-1: USB disconnect, device number 11 [ 215.546885][ T5832] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 215.547343][ T5832] cp210x 5-1:0.0: device disconnected [ 216.376034][ T7603] team0: Port device team_slave_1 added [ 216.415659][ T7772] netlink: 'syz.3.700': attribute type 4 has an invalid length. [ 217.178703][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.178718][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.178740][ T7603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.234191][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.234205][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.234228][ T7603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.399977][ T7832] hub 1-0:1.0: USB hub found [ 217.401179][ T7832] hub 1-0:1.0: 1 port detected [ 217.676882][ T7603] hsr_slave_0: entered promiscuous mode [ 217.678069][ T7603] hsr_slave_1: entered promiscuous mode [ 217.678903][ T7603] debugfs: 'hsr0' already exists in 'hsr' [ 217.678924][ T7603] Cannot create hsr debugfs directory [ 218.159802][ T7852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.511904][ T5949] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 220.683073][ T5949] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 220.683101][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.683119][ T5949] usb 5-1: Product: syz [ 220.683132][ T5949] usb 5-1: Manufacturer: syz [ 220.683145][ T5949] usb 5-1: SerialNumber: syz [ 220.704615][ T5949] usb 5-1: config 0 descriptor?? [ 220.942705][ T5949] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 221.357680][ T7603] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 221.417483][ T7603] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 221.544710][ T7603] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 221.569063][ T5949] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 221.586223][ T5949] usb 5-1: USB disconnect, device number 12 [ 221.605055][ T7603] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 221.916432][ T7603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.968345][ T7603] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.983971][ T3715] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.984108][ T3715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.027748][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.028476][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.065645][ T7929] netlink: 'syz.5.759': attribute type 2 has an invalid length. [ 222.065662][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.759'. [ 222.066439][ T7929] netlink: 'syz.5.759': attribute type 2 has an invalid length. [ 222.066454][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.759'. [ 222.500820][ T5889] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 222.663327][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.663346][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.663357][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.663380][ T5889] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 222.663391][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.728662][ T5889] usb 5-1: config 0 descriptor?? [ 222.804082][ T7603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.104378][ T7603] veth0_vlan: entered promiscuous mode [ 223.126535][ T7603] veth1_vlan: entered promiscuous mode [ 223.307307][ T5889] usbhid 5-1:0.0: can't add hid device: -71 [ 223.307432][ T5889] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 223.327352][ T5889] usb 5-1: USB disconnect, device number 13 [ 223.342665][ T7954] geneve2: entered promiscuous mode [ 223.342687][ T7954] geneve2: entered allmulticast mode [ 223.455022][ T7603] veth0_macvtap: entered promiscuous mode [ 223.475721][ T7603] veth1_macvtap: entered promiscuous mode [ 223.557828][ T7603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.585672][ T7603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.609832][ T4720] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.623803][ T4720] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.625259][ T4720] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.625433][ T4720] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.214097][ T3715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.214112][ T3715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.425887][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.425905][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.673225][ T7979] netlink: 'syz.6.778': attribute type 1 has an invalid length. [ 224.758188][ T7979] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.906030][ T7982] bond2: (slave geneve2): making interface the new active one [ 224.911419][ T7982] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 225.495086][ T8003] netlink: 'syz.6.787': attribute type 21 has an invalid length. [ 225.495107][ T8003] netlink: 'syz.6.787': attribute type 22 has an invalid length. [ 225.495119][ T8003] netlink: 'syz.6.787': attribute type 23 has an invalid length. [ 225.495131][ T8003] netlink: 'syz.6.787': attribute type 25 has an invalid length. [ 225.495143][ T8003] netlink: 'syz.6.787': attribute type 26 has an invalid length. [ 225.495155][ T8003] netlink: 16 bytes leftover after parsing attributes in process `syz.6.787'. [ 225.830782][ T5892] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 225.989673][ T5892] usb 6-1: Using ep0 maxpacket: 8 [ 226.006672][ T5892] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 226.006700][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.006719][ T5892] usb 6-1: Product: syz [ 226.006733][ T5892] usb 6-1: Manufacturer: syz [ 226.006746][ T5892] usb 6-1: SerialNumber: syz [ 226.048294][ T5892] usb 6-1: config 0 descriptor?? [ 226.288931][ T5892] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 227.103958][ T5892] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 227.130418][ T5892] usb 6-1: USB disconnect, device number 7 [ 227.267069][ T8040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.480674][ T5889] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 228.633266][ T5889] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 228.633294][ T5889] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 228.633312][ T5889] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 228.633361][ T5889] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 228.633387][ T5889] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 228.635611][ T5889] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 228.635636][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 228.635654][ T5889] usb 7-1: Product: syz [ 228.635666][ T5889] usb 7-1: Manufacturer: syz [ 228.719985][ T5889] cdc_wdm 7-1:1.0: skipping garbage [ 228.720003][ T5889] cdc_wdm 7-1:1.0: skipping garbage [ 228.744851][ T5889] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 228.744871][ T5889] cdc_wdm 7-1:1.0: Unknown control protocol [ 229.134394][ T8053] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 229.145899][ T5889] usb 7-1: USB disconnect, device number 4 [ 229.634135][ T8073] input: syz0 as /devices/virtual/input/input17 [ 230.809208][ T8110] loop6: detected capacity change from 0 to 1 [ 230.820740][ T8110] Dev loop6: unable to read RDB block 1 [ 230.820784][ T8110] loop6: unable to read partition table [ 230.821003][ T8110] loop6: partition table beyond EOD, truncated [ 230.821020][ T8110] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 232.625507][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.853'. [ 232.656063][ T8166] netlink: 'syz.5.854': attribute type 1 has an invalid length. [ 232.795583][ T8171] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 232.900698][ T5889] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 232.926569][ T8166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.998195][ T8169] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.998644][ T8169] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 232.999854][ T8169] bond1: (slave vcan1): Error -95 calling set_mac_address [ 233.064218][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.064266][ T5889] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 233.064283][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.067921][ T5889] usb 3-1: config 0 descriptor?? [ 233.297979][ T5889] usbhid 3-1:0.0: can't add hid device: -71 [ 233.298111][ T5889] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 233.321099][ T5889] usb 3-1: USB disconnect, device number 13 [ 233.610820][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 233.770827][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 233.771365][ T5832] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 233.789192][ T9] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 233.789219][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.819818][ T9] usb 6-1: config 0 descriptor?? [ 233.843817][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 233.953816][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 233.957454][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.957499][ T5832] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 233.957571][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.006774][ T5832] usb 3-1: config 0 descriptor?? [ 234.048093][ T5832] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 234.097501][ T5832] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 234.452452][ T5814] usb 3-1: USB disconnect, device number 14 [ 234.484339][ T5814] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 234.917576][ T9] gspca_sunplus: reg_w_riv err -71 [ 234.917741][ T9] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 234.947245][ T9] usb 6-1: USB disconnect, device number 8 [ 235.657915][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 235.703350][ T8196] syz.4.866 (8196): drop_caches: 2 [ 235.760450][ T8215] openvswitch: netlink: Multiple metadata blocks provided [ 235.815759][ T9] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 235.815789][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.815808][ T9] usb 7-1: Product: syz [ 235.815821][ T9] usb 7-1: Manufacturer: syz [ 235.815835][ T9] usb 7-1: SerialNumber: syz [ 235.824782][ T9] usb 7-1: config 0 descriptor?? [ 237.083343][ T9] usb 7-1: f81604_read: reg: 100e failed: -EPROTO [ 237.119895][ T9] usb 7-1: f81604_read: reg: 200f failed: -EPROTO [ 237.143916][ T9] usb 7-1: USB disconnect, device number 5 [ 237.182283][ T9] usb 7-1: f81604_read: reg: 100f failed: -ENODEV [ 237.412038][ T9] usb 7-1: f81604_read: reg: 200f failed: -ENODEV [ 237.806281][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.900'. [ 237.820670][ T5903] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 237.973296][ T5903] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.973330][ T5903] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 237.973368][ T5903] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 237.973396][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.048498][ T8264] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 238.068183][ T5903] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 238.186945][ T8285] input: syz0 as /devices/virtual/input/input19 [ 238.291341][ T5889] usb 4-1: USB disconnect, device number 13 [ 238.587084][ T8298] netlink: 'syz.5.909': attribute type 19 has an invalid length. [ 238.587104][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.909'. [ 238.663384][ T988] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.663494][ T8298] netlink: 'syz.5.909': attribute type 19 has an invalid length. [ 238.663507][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.909'. [ 238.665345][ T988] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.666986][ T988] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.667023][ T988] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.790855][ T5903] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 238.821607][ T8303] netlink: 'syz.6.911': attribute type 1 has an invalid length. [ 238.821627][ T8303] netlink: 'syz.6.911': attribute type 2 has an invalid length. [ 238.821639][ T8303] netlink: 'syz.6.911': attribute type 3 has an invalid length. [ 238.821652][ T8303] netlink: 228 bytes leftover after parsing attributes in process `syz.6.911'. [ 238.955145][ T5903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.955213][ T5903] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.957579][ T5903] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.957604][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.957623][ T5903] usb 3-1: Product: syz [ 238.957636][ T5903] usb 3-1: Manufacturer: syz [ 238.957650][ T5903] usb 3-1: SerialNumber: syz [ 239.881325][ T5832] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 239.905882][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.6.919'. [ 240.033419][ T5832] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 240.033445][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.044567][ T5832] usb 4-1: config 0 descriptor?? [ 240.269793][ T5903] cdc_ncm 3-1:1.0: bind() failure [ 240.301775][ T5903] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 240.302597][ T5903] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 240.304152][ T5903] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 240.316504][ T5903] usb 3-1: USB disconnect, device number 15 [ 240.580816][ T8332] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 240.581045][ T8332] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 241.096798][ T43] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.096829][ T43] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.330870][ T5832] pegasus 4-1:0.0: can't reset MAC [ 241.331219][ T5832] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 241.347187][ T5832] usb 4-1: USB disconnect, device number 14 [ 241.603347][ T8352] netlink: 'syz.4.928': attribute type 4 has an invalid length. [ 241.603367][ T8352] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.928'. [ 241.636170][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 241.640428][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 241.642874][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.646227][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.652316][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 241.689430][ T43] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.689460][ T43] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.945538][ T8356] netlink: 36 bytes leftover after parsing attributes in process `syz.4.929'. [ 241.985310][ T43] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.985342][ T43] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.394124][ T43] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.394154][ T43] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.334698][ T8353] chnl_net:caif_netlink_parms(): no params data found [ 243.702107][ T43] bridge_slave_1: left allmulticast mode [ 243.702134][ T43] bridge_slave_1: left promiscuous mode [ 243.702386][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.720731][ T5825] Bluetooth: hci1: command tx timeout [ 243.737731][ T8398] sctp: [Deprecated]: syz.4.945 (pid 8398) Use of int in max_burst socket option. [ 243.737731][ T8398] Use struct sctp_assoc_value instead [ 243.822497][ T43] bridge_slave_0: left allmulticast mode [ 243.822522][ T43] bridge_slave_0: left promiscuous mode [ 243.822764][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.440936][ T5814] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 244.595811][ T5814] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 244.595847][ T5814] usb 3-1: config 0 has no interface number 0 [ 244.595879][ T5814] usb 3-1: config 0 interface 255 has no altsetting 0 [ 244.596046][ T5814] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 244.596069][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.619265][ T5814] usb 3-1: config 0 descriptor?? [ 244.629971][ T5814] cp210x 3-1:0.255: cp210x converter detected [ 245.048104][ T5814] cp210x 3-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 245.171583][ T8424] autofs4:pid:8424:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 245.181494][ T8424] netlink: 'syz.6.955': attribute type 39 has an invalid length. [ 245.250086][ T5814] cp210x 3-1:0.255: GPIO initialisation failed: -19 [ 245.253730][ T5814] usb 3-1: cp210x converter now attached to ttyUSB0 [ 245.454649][ T5814] usb 3-1: USB disconnect, device number 16 [ 245.458723][ T5814] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 245.459004][ T5814] cp210x 3-1:0.255: device disconnected [ 245.800950][ T5825] Bluetooth: hci1: command tx timeout [ 246.016399][ T8426] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.956'. [ 246.054786][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.575781][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.651485][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.673068][ T43] bond0 (unregistering): Released all slaves [ 247.333140][ T43] bond1 (unregistering): Released all slaves [ 247.880687][ T5825] Bluetooth: hci1: command tx timeout [ 248.980601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 249.370818][ T8353] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.370923][ T8353] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.371080][ T8353] bridge_slave_0: entered allmulticast mode [ 249.428152][ T8353] bridge_slave_0: entered promiscuous mode [ 249.499353][ T8353] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.499568][ T8353] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.499804][ T8353] bridge_slave_1: entered allmulticast mode [ 249.522665][ T8353] bridge_slave_1: entered promiscuous mode [ 249.960649][ T5825] Bluetooth: hci1: command tx timeout [ 250.040806][ T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 250.155874][ T43] hsr_slave_0: left promiscuous mode [ 250.211403][ T43] hsr_slave_1: left promiscuous mode [ 250.212335][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.212358][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.281253][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 250.283312][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 250.283346][ T9] usb 4-1: can't read configurations, error -71 [ 250.321797][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.321823][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.485902][ T43] veth1_macvtap: left promiscuous mode [ 250.485968][ T43] veth0_macvtap: left promiscuous mode [ 250.486115][ T43] veth1_vlan: left promiscuous mode [ 250.486216][ T43] veth0_vlan: left promiscuous mode [ 250.946506][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.977'. [ 251.966944][ T5889] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 252.155672][ T5889] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 252.155699][ T5889] usb 3-1: config 0 has no interface number 0 [ 252.155744][ T5889] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.155757][ T5889] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.155779][ T5889] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 252.155791][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.158640][ T5889] usb 3-1: config 0 descriptor?? [ 252.444230][ T5816] Bluetooth: hci1: command 0x0405 tx timeout [ 252.588695][ T5889] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.000E/input/input20 [ 252.804279][ T5889] holtek_kbd 0003:04D9:A055.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 252.831920][ T43] team0 (unregistering): Port device team_slave_1 removed [ 252.884127][ T10] usb 3-1: USB disconnect, device number 17 [ 253.053687][ T43] team0 (unregistering): Port device team_slave_0 removed [ 255.028043][ T8353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.288886][ T8517] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 255.288911][ T8517] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 255.321228][ T8517] vhci_hcd vhci_hcd.0: Device attached [ 255.329065][ T8517] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 255.329088][ T8517] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 255.329136][ T8517] vhci_hcd vhci_hcd.0: Device attached [ 255.329149][ T8521] ================================================================== [ 255.329160][ T8521] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 255.329188][ T8521] Read of size 8 at addr ffffc9001b6f5008 by task vhci_rx/8521 [ 255.329203][ T8521] [ 255.329227][ T8521] CPU: 1 UID: 0 PID: 8521 Comm: vhci_rx Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 255.329248][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 255.329262][ T8521] Call Trace: [ 255.329272][ T8521] [ 255.329280][ T8521] dump_stack_lvl+0x189/0x250 [ 255.329298][ T8521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.329312][ T8521] ? __pfx__printk+0x10/0x10 [ 255.329329][ T8521] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 255.329353][ T8521] ? __virt_addr_valid+0xdc/0x5c0 [ 255.329370][ T8521] ? __virt_addr_valid+0xdc/0x5c0 [ 255.329387][ T8521] print_report+0xca/0x240 [ 255.329407][ T8521] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 255.329427][ T8521] kasan_report+0x118/0x150 [ 255.329448][ T8521] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 255.329472][ T8521] __list_del_entry_valid_or_report+0xb5/0x190 [ 255.329494][ T8521] kcov_remote_start+0x2b0/0x6f0 [ 255.329519][ T8521] vhci_rx_loop+0x186/0x940 [ 255.329549][ T8521] ? __pfx_vhci_rx_loop+0x10/0x10 [ 255.329573][ T8521] ? __kthread_parkme+0x7b/0x200 [ 255.329594][ T8521] ? __kthread_parkme+0x1a1/0x200 [ 255.329626][ T8521] kthread+0x711/0x8a0 [ 255.329643][ T8521] ? __pfx_vhci_rx_loop+0x10/0x10 [ 255.329665][ T8521] ? __pfx_kthread+0x10/0x10 [ 255.329679][ T8521] ? rt_spin_unlock+0x150/0x200 [ 255.329700][ T8521] ? rt_spin_unlock+0x161/0x200 [ 255.329719][ T8521] ? __pfx_kthread+0x10/0x10 [ 255.329735][ T8521] ret_from_fork+0x439/0x7d0 [ 255.329760][ T8521] ? __pfx_ret_from_fork+0x10/0x10 [ 255.329783][ T8521] ? __switch_to_asm+0x39/0x70 [ 255.329799][ T8521] ? __switch_to_asm+0x33/0x70 [ 255.329814][ T8521] ? __pfx_kthread+0x10/0x10 [ 255.329834][ T8521] ret_from_fork_asm+0x1a/0x30 [ 255.329856][ T8521] [ 255.329862][ T8521] [ 255.329866][ T8521] The buggy address belongs to a vmalloc virtual mapping [ 255.329882][ T8521] Memory state around the buggy address: [ 255.329892][ T8521] ffffc9001b6f4f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 255.329903][ T8521] ffffc9001b6f4f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 255.329914][ T8521] >ffffc9001b6f5000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 255.329922][ T8521] ^ [ 255.329931][ T8521] ffffc9001b6f5080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 255.329942][ T8521] ffffc9001b6f5100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 255.329951][ T8521] ================================================================== [ 255.330016][ T8521] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 255.330035][ T8521] CPU: 1 UID: 0 PID: 8521 Comm: vhci_rx Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 255.330056][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 255.330067][ T8521] Call Trace: [ 255.330073][ T8521] [ 255.330080][ T8521] dump_stack_lvl+0x99/0x250 [ 255.330096][ T8521] ? __asan_memcpy+0x40/0x70 [ 255.330112][ T8521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.330127][ T8521] ? __pfx__printk+0x10/0x10 [ 255.330151][ T8521] vpanic+0x281/0x750 [ 255.330167][ T8521] ? preempt_schedule+0xae/0xc0 [ 255.330189][ T8521] ? __pfx_vpanic+0x10/0x10 [ 255.330204][ T8521] ? preempt_schedule_common+0x83/0xd0 [ 255.330225][ T8521] ? preempt_schedule+0xae/0xc0 [ 255.330245][ T8521] ? __pfx_preempt_schedule+0x10/0x10 [ 255.330269][ T8521] panic+0xb9/0xc0 [ 255.330284][ T8521] ? __pfx_panic+0x10/0x10 [ 255.330301][ T8521] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 255.330325][ T8521] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 255.330345][ T8521] check_panic_on_warn+0x89/0xb0 [ 255.330363][ T8521] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 255.330382][ T8521] end_report+0x78/0x160 [ 255.330400][ T8521] kasan_report+0x129/0x150 [ 255.330420][ T8521] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 255.330443][ T8521] __list_del_entry_valid_or_report+0xb5/0x190 [ 255.330465][ T8521] kcov_remote_start+0x2b0/0x6f0 [ 255.330488][ T8521] vhci_rx_loop+0x186/0x940 [ 255.330515][ T8521] ? __pfx_vhci_rx_loop+0x10/0x10 [ 255.330542][ T8521] ? __kthread_parkme+0x7b/0x200 [ 255.330562][ T8521] ? __kthread_parkme+0x1a1/0x200 [ 255.330585][ T8521] kthread+0x711/0x8a0 [ 255.330601][ T8521] ? __pfx_vhci_rx_loop+0x10/0x10 [ 255.330630][ T8521] ? __pfx_kthread+0x10/0x10 [ 255.330644][ T8521] ? rt_spin_unlock+0x150/0x200 [ 255.330665][ T8521] ? rt_spin_unlock+0x161/0x200 [ 255.330683][ T8521] ? __pfx_kthread+0x10/0x10 [ 255.330699][ T8521] ret_from_fork+0x439/0x7d0 [ 255.330720][ T8521] ? __pfx_ret_from_fork+0x10/0x10 [ 255.330743][ T8521] ? __switch_to_asm+0x39/0x70 [ 255.330760][ T8521] ? __switch_to_asm+0x33/0x70 [ 255.330776][ T8521] ? __pfx_kthread+0x10/0x10 [ 255.330793][ T8521] ret_from_fork_asm+0x1a/0x30 [ 255.330817][ T8521] [ 255.331077][ T8521] Kernel Offset: disabled