last executing test programs: 3.732886506s ago: executing program 3 (id=740): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4300, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0x0, 0xd0}, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.373332759s ago: executing program 3 (id=743): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000080), 0x10) listen(r1, 0x0) accept4$llc(r1, 0x0, 0x0, 0x0) 3.36221687s ago: executing program 1 (id=744): r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x103) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x21) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x1000000d) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a) fallocate(r1, 0x0, 0x0, 0x9000f3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeed, 0x80010, r1, 0x5000) 2.672753156s ago: executing program 4 (id=748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}], 0x10) shutdown(r1, 0x2) 2.528601936s ago: executing program 4 (id=749): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={r2, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000540)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0}) 2.260980723s ago: executing program 4 (id=751): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.158445652s ago: executing program 3 (id=752): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.138432217s ago: executing program 4 (id=753): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) kexec_load(0x0, 0x0, 0x0, 0x0) 2.052655328s ago: executing program 1 (id=754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(0x4) ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xeeee8000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x0, 0x303000, 0x8}) 1.930740587s ago: executing program 3 (id=756): syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69000000001406fffe800000000000000000000000000039fe8084"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000080), 0x0, 0x0, 0x2) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.811821932s ago: executing program 4 (id=757): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = dup2(r2, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) 1.741743272s ago: executing program 2 (id=758): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r0], 0x1c}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) 1.674987438s ago: executing program 2 (id=759): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x300000d, 0x12, r2, 0x1000) 1.596810529s ago: executing program 0 (id=760): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x1, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x7, 0x0, 0x24, 0xa5, 0x5c}) 1.564296831s ago: executing program 3 (id=761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x1, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.457475281s ago: executing program 4 (id=762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x2}}}}}]}}]}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="3e0f1bd8d32767f30f0936650f35f30f30c74424007af36e1bc74424022cd1366cc7442406000000000f0114240f01c966f2d365000fac520041f2f20f009ef6ef8ed5", 0x43}], 0x1, 0x63, &(0x7f00000001c0)=[@cr4={0x1, 0x200900}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.432901942s ago: executing program 2 (id=763): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r3}) 1.197959107s ago: executing program 2 (id=764): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006280)={0x2020, 0x0, 0x0}, 0x2067) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x81, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x130, 0x0, 0x8, {0x8, 0x2, 0x0, '\x00', {0x1, 0x1, 0x2, 0xffffffff, 0x0, 0x0, 0x8000, '\x00', 0xffffffffffffffff, 0x29, 0xfff7fffffffffffa, 0x4, {0x100000000, 0x1fffffe}, {0x1f94, 0x6}, {0x5, 0x7}, {0x6, 0xff}, 0x200008, 0xe19, 0x5, 0x2}}}}) statx(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x100, 0x801, 0x0) 1.175300748s ago: executing program 0 (id=765): syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001080), 0xffffffffffffffff) socket$kcm(0x2, 0xd, 0x2) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.011497488s ago: executing program 1 (id=766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7, 0x3, 0x1c, 0x5, 0x2, 0x4d, 0x3, 0xf9, 0x1, 0x80, 0xc, 0x8000200000000000}, {0x6, 0x80, 0x8, 0xc4, 0x4, 0x7, 0x6, 0x3, 0x7, 0xff, 0x40, 0x7d}, {0xe2a5, 0x401, 0x1, 0x9, 0x2, 0x6, 0x8, 0xb, 0xff, 0x6, 0x56, 0x3, 0x100}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xffffffffffffffff, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x100000000004, 0x0, 0x0, 0x2, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 893.723412ms ago: executing program 2 (id=767): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x1008c66) r3 = eventfd(0xfffffff0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0xffff1000, 0x1, r3, 0x8}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffffc, 0x0, 0x1, r3, 0x8}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffff001, 0x0, 0x1, r2, 0x9}) 836.934721ms ago: executing program 3 (id=768): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 629.580233ms ago: executing program 0 (id=769): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) symlinkat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000180)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0x9362, 0x0) readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=""/66, 0x42) 492.031708ms ago: executing program 0 (id=770): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="f4", 0x1}], 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000140)=0xffffffff, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 480.857057ms ago: executing program 1 (id=771): r0 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="4000520006"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000003, 0x0, {0xfffe}}) io_uring_enter(r0, 0x5d62, 0x0, 0x0, 0x0, 0x0) 240.914428ms ago: executing program 1 (id=772): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0xffffffff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x3, 0x3, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}]}, 0x38}}, 0x4008cc0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 159.742788ms ago: executing program 0 (id=773): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0x80000300, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x3}}, 0x20) 64.492779ms ago: executing program 1 (id=774): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xce9a, 0x8, 0x3, 0x40004330}, &(0x7f00000006c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x1, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 4.082381ms ago: executing program 0 (id=775): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg$unix(r0, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="411ffa94", 0x4}], 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}}], 0x1, 0x0) accept(r1, 0x0, 0x0) 0s ago: executing program 2 (id=776): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.144' (ED25519) to the list of known hosts. [ 81.599916][ T5821] cgroup: Unknown subsys name 'net' [ 81.842894][ T5821] cgroup: Unknown subsys name 'cpuset' [ 81.896142][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.576965][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.473541][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.510798][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.532046][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.532828][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.533612][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.534606][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.538121][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.538821][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.539927][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.540712][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.547985][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.560342][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.560745][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.563813][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.564065][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.567540][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.568979][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.569340][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.570933][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.571363][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.597253][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.602186][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.615601][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.625910][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.635670][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.855133][ T981] cfg80211: failed to load regulatory.db [ 87.520157][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 87.600779][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 87.769737][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 87.785787][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 87.951916][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 88.548733][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.548900][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.549525][ T5833] bridge_slave_0: entered allmulticast mode [ 88.552490][ T5833] bridge_slave_0: entered promiscuous mode [ 88.607576][ T5843] Bluetooth: hci1: command tx timeout [ 88.607572][ T5153] Bluetooth: hci4: command tx timeout [ 88.607720][ T5153] Bluetooth: hci3: command tx timeout [ 88.685502][ T59] Bluetooth: hci2: command tx timeout [ 88.694075][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.694386][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.694605][ T5833] bridge_slave_1: entered allmulticast mode [ 88.698497][ T5833] bridge_slave_1: entered promiscuous mode [ 88.775538][ T59] Bluetooth: hci0: command tx timeout [ 88.777428][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.777579][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.777822][ T5841] bridge_slave_0: entered allmulticast mode [ 88.780968][ T5841] bridge_slave_0: entered promiscuous mode [ 89.026448][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.026603][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.026782][ T5841] bridge_slave_1: entered allmulticast mode [ 89.028493][ T5841] bridge_slave_1: entered promiscuous mode [ 89.236483][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.236613][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.236788][ T5838] bridge_slave_0: entered allmulticast mode [ 89.238606][ T5838] bridge_slave_0: entered promiscuous mode [ 89.322140][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.322266][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.322419][ T5832] bridge_slave_0: entered allmulticast mode [ 89.323935][ T5832] bridge_slave_0: entered promiscuous mode [ 89.399563][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.399853][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.400029][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.400194][ T5838] bridge_slave_1: entered allmulticast mode [ 89.401930][ T5838] bridge_slave_1: entered promiscuous mode [ 89.486315][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.486443][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.486614][ T5832] bridge_slave_1: entered allmulticast mode [ 89.488562][ T5832] bridge_slave_1: entered promiscuous mode [ 89.571515][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.640507][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.796876][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.797039][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.797345][ T5834] bridge_slave_0: entered allmulticast mode [ 89.799160][ T5834] bridge_slave_0: entered promiscuous mode [ 90.006591][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.087978][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.088194][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.088377][ T5834] bridge_slave_1: entered allmulticast mode [ 90.090884][ T5834] bridge_slave_1: entered promiscuous mode [ 90.166582][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.240374][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.309812][ T5833] team0: Port device team_slave_0 added [ 90.312920][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.382627][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.468010][ T5833] team0: Port device team_slave_1 added [ 90.550072][ T5841] team0: Port device team_slave_0 added [ 90.630184][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.685731][ T5843] Bluetooth: hci1: command tx timeout [ 90.685830][ T5153] Bluetooth: hci4: command tx timeout [ 90.685901][ T59] Bluetooth: hci3: command tx timeout [ 90.765774][ T59] Bluetooth: hci2: command tx timeout [ 90.778798][ T5841] team0: Port device team_slave_1 added [ 90.845590][ T59] Bluetooth: hci0: command tx timeout [ 90.864399][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.174556][ T5838] team0: Port device team_slave_0 added [ 91.247794][ T5832] team0: Port device team_slave_0 added [ 91.318722][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.318738][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.318762][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.322985][ T5838] team0: Port device team_slave_1 added [ 91.439837][ T5832] team0: Port device team_slave_1 added [ 91.533881][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.533897][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.533919][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.618438][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.618459][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.618484][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.711223][ T5834] team0: Port device team_slave_0 added [ 91.792486][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.792501][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.792523][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.878875][ T5834] team0: Port device team_slave_1 added [ 91.883017][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.883041][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.883054][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.895356][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.895371][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.895393][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.004013][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.004029][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.004053][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.011421][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.011436][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.011459][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.259961][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.259971][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.259984][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.410827][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.410839][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.410852][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.418137][ T5833] hsr_slave_0: entered promiscuous mode [ 92.419671][ T5833] hsr_slave_1: entered promiscuous mode [ 92.627435][ T5841] hsr_slave_0: entered promiscuous mode [ 92.628924][ T5841] hsr_slave_1: entered promiscuous mode [ 92.630119][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 92.630235][ T5841] Cannot create hsr debugfs directory [ 92.765547][ T5843] Bluetooth: hci1: command tx timeout [ 92.765646][ T5153] Bluetooth: hci4: command tx timeout [ 92.765730][ T59] Bluetooth: hci3: command tx timeout [ 92.856450][ T59] Bluetooth: hci2: command tx timeout [ 92.925787][ T59] Bluetooth: hci0: command tx timeout [ 92.939213][ T5838] hsr_slave_0: entered promiscuous mode [ 92.940569][ T5838] hsr_slave_1: entered promiscuous mode [ 92.941983][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 92.942005][ T5838] Cannot create hsr debugfs directory [ 92.953605][ T5832] hsr_slave_0: entered promiscuous mode [ 92.954898][ T5832] hsr_slave_1: entered promiscuous mode [ 92.956436][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 92.956458][ T5832] Cannot create hsr debugfs directory [ 93.424238][ T5834] hsr_slave_0: entered promiscuous mode [ 93.425091][ T5834] hsr_slave_1: entered promiscuous mode [ 93.433585][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 93.433611][ T5834] Cannot create hsr debugfs directory [ 94.845536][ T59] Bluetooth: hci3: command tx timeout [ 94.845565][ T59] Bluetooth: hci4: command tx timeout [ 94.845586][ T59] Bluetooth: hci1: command tx timeout [ 94.906029][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.935549][ T5153] Bluetooth: hci2: command tx timeout [ 94.946954][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.972162][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.005838][ T5153] Bluetooth: hci0: command tx timeout [ 95.030924][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.142086][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.187313][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.231407][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.284065][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.449846][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.488519][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.528998][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.574682][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.748149][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.800571][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.864184][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.914623][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.062039][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.093341][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.114124][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.142181][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.164581][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.271699][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.329860][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.330475][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.342158][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.381805][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.381928][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.502865][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.540248][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.570772][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.570898][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.615244][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.622786][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.682002][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.694713][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.728544][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.728741][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.814009][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.814159][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.892156][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.930356][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.943571][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.946041][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.035231][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.035546][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.099727][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.164223][ T2932] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.164476][ T2932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.258793][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.258941][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.341646][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.668601][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.908585][ T5833] veth0_vlan: entered promiscuous mode [ 97.985220][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.046332][ T5833] veth1_vlan: entered promiscuous mode [ 98.128695][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.317808][ T5833] veth0_macvtap: entered promiscuous mode [ 98.355643][ T5832] veth0_vlan: entered promiscuous mode [ 98.357706][ T5833] veth1_macvtap: entered promiscuous mode [ 98.422318][ T5832] veth1_vlan: entered promiscuous mode [ 98.462123][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.463974][ T5838] veth0_vlan: entered promiscuous mode [ 98.481685][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.520494][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.547720][ T5838] veth1_vlan: entered promiscuous mode [ 98.572877][ T77] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.593821][ T77] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.595925][ T5841] veth0_vlan: entered promiscuous mode [ 98.614509][ T77] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.647266][ T77] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.731174][ T5841] veth1_vlan: entered promiscuous mode [ 98.738223][ T5832] veth0_macvtap: entered promiscuous mode [ 98.864358][ T5832] veth1_macvtap: entered promiscuous mode [ 99.014073][ T5834] veth0_vlan: entered promiscuous mode [ 99.015188][ T5838] veth0_macvtap: entered promiscuous mode [ 99.030796][ T1458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.030817][ T1458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.054548][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.061481][ T5838] veth1_macvtap: entered promiscuous mode [ 99.098933][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.149366][ T5841] veth0_macvtap: entered promiscuous mode [ 99.171122][ T5834] veth1_vlan: entered promiscuous mode [ 99.184358][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.193625][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.207446][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.207466][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.213676][ T5841] veth1_macvtap: entered promiscuous mode [ 99.215113][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.249416][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.254843][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.355953][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.519684][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.524062][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.554116][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.561848][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.570888][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.577700][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.676556][ T5834] veth0_macvtap: entered promiscuous mode [ 99.761022][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.764393][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.764979][ T5834] veth1_macvtap: entered promiscuous mode [ 99.815005][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.815024][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.817730][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.852515][ T2932] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.033364][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 100.254456][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.327083][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.327101][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.388789][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.449458][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.449477][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.507572][ T77] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.552425][ T77] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.570821][ T77] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.637806][ T77] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.638104][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.638118][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.901023][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.901042][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.043504][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.043523][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.374823][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.374841][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.567920][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.567939][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.873753][ T5965] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 102.213936][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 102.238563][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 102.800955][ T5987] netlink: 'syz.1.11': attribute type 10 has an invalid length. [ 103.059153][ T5987] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 103.215900][ T5993] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 103.236245][ C0] Illegal XDP return value 16128 on prog (id 3) dev veth0_to_bridge, expect packet loss! [ 104.848030][ T6031] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.399042][ T6036] Bluetooth: MGMT ver 1.23 [ 105.399084][ T6036] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 105.873939][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 106.030843][ T6046] vxlan0: entered promiscuous mode [ 106.112264][ T77] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.128502][ T77] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.128548][ T77] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.128581][ T77] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.480064][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.655416][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 106.728912][ T31] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 106.728941][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.728958][ T31] usb 4-1: Product: syz [ 106.728970][ T31] usb 4-1: Manufacturer: syz [ 106.728982][ T31] usb 4-1: SerialNumber: syz [ 106.799660][ T31] usb 4-1: config 0 descriptor?? [ 107.044488][ T31] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 108.060995][ T31] gspca_sunplus: reg_w_riv err -71 [ 108.061115][ T31] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 108.159793][ T31] usb 4-1: USB disconnect, device number 2 [ 108.636283][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40'. [ 110.225626][ T6096] team0: Port device team_slave_0 removed [ 110.769264][ T6124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.835457][ T6124] bond0: (slave rose0): Enslaving as an active interface with an up link [ 111.262651][ T6143] syz.2.53 (6143): drop_caches: 4 [ 111.751810][ T6152] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl [ 112.608605][ T5823] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.755518][ T5823] usb 5-1: Using ep0 maxpacket: 32 [ 112.759531][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.759560][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.759596][ T5823] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 112.759616][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.841147][ T5823] usb 5-1: config 0 descriptor?? [ 112.862279][ T5823] hub 5-1:0.0: USB hub found [ 112.984961][ T31] libceph: connect (1)[c::]:6789 error -101 [ 113.027800][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 113.036365][ T6171] ceph: No mds server is up or the cluster is laggy [ 113.068928][ T31] libceph: connect (1)[c::]:6789 error -101 [ 113.069155][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 113.107170][ T5823] hub 5-1:0.0: 1 port detected [ 113.509870][ T6181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.675750][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.748523][ T5823] hub 5-1:0.0: activate --> -90 [ 113.830018][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.830046][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 113.830069][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 113.830089][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.830127][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.830149][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.908740][ T31] usb 1-1: config 0 descriptor?? [ 114.186364][ T5823] usb 5-1-port1: cannot disable (err = -71) [ 114.199807][ T5823] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 114.199831][ T5823] usb 5-1-port1: connect-debounce failed [ 114.248800][ T5823] usb 5-1: Failed to suspend device, error -71 [ 114.392921][ T31] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 114.509298][ T31] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 114.612675][ T5926] usb 5-1: USB disconnect, device number 2 [ 115.896181][ T5926] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 116.683996][ T5823] usb 1-1: USB disconnect, device number 2 [ 118.426637][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.590237][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 118.592647][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.592701][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.592723][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 118.592745][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 118.592762][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.594337][ T31] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 118.594363][ T31] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 118.594381][ T31] usb 5-1: Manufacturer: syz [ 118.699584][ T31] usb 5-1: config 0 descriptor?? [ 119.075401][ T31] rc_core: IR keymap rc-hauppauge not found [ 119.075420][ T31] Registered IR keymap rc-empty [ 119.076036][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 119.104416][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 119.120124][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 119.123649][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 119.210194][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 119.235700][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 119.265683][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 119.285438][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 119.305533][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 119.327490][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 119.345664][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 119.375596][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 119.395488][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 119.415830][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 119.464154][ T31] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 119.464178][ T31] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 119.566681][ T31] usb 5-1: USB disconnect, device number 3 [ 120.108982][ T6289] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 120.535669][ T5842] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 120.688282][ T5842] usb 1-1: Using ep0 maxpacket: 32 [ 120.720690][ T5842] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 120.720717][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.720734][ T5842] usb 1-1: Product: syz [ 120.720746][ T5842] usb 1-1: Manufacturer: syz [ 120.720759][ T5842] usb 1-1: SerialNumber: syz [ 120.768493][ T5842] usb 1-1: config 0 descriptor?? [ 121.432889][ T5842] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 121.742415][ T5842] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 121.786120][ T5842] usb 1-1: USB disconnect, device number 3 [ 122.768487][ T6342] input: syz1 as /devices/virtual/input/input6 [ 122.855368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.395945][ T6353] all: renamed from bridge_slave_0 (while UP) [ 124.245337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.690395][ T6372] netlink: 'syz.2.118': attribute type 1 has an invalid length. [ 125.355426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.945366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.270939][ T6405] warning: `syz.2.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 126.532663][ T6409] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.133'. [ 127.175536][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 127.340231][ T6426] : entered promiscuous mode [ 128.181633][ T6450] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.195325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.625339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.625483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.865353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.397665][ T6490] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 130.702363][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 130.773629][ T6499] : entered promiscuous mode [ 131.924370][ T6533] netlink: 112 bytes leftover after parsing attributes in process `syz.1.178'. [ 132.116635][ T5919] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 132.268037][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.268075][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 132.268099][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 132.268122][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.268161][ T5919] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.268181][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.361291][ T5919] usb 3-1: config 0 descriptor?? [ 132.364239][ T6532] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.819703][ T5919] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 132.863695][ T6529] process 'syz.0.176' launched './file0' with NULL argv: empty string added [ 132.910975][ T5919] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 132.957018][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.957123][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.107210][ T6532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.107773][ T6532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.159238][ T31] usb 3-1: USB disconnect, device number 2 [ 133.371968][ T6552] fido_id[6552]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 133.705699][ T5823] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 133.882229][ T5823] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 133.882256][ T5823] usb 5-1: config 0 has no interface number 0 [ 133.882301][ T5823] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 133.882324][ T5823] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.885232][ T5823] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 133.886795][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.886817][ T5823] usb 5-1: Product: syz [ 133.886829][ T5823] usb 5-1: Manufacturer: syz [ 133.886841][ T5823] usb 5-1: SerialNumber: syz [ 133.934747][ T5823] usb 5-1: config 0 descriptor?? [ 133.974885][ T6557] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 133.983681][ T5823] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 134.199449][ T5823] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 134.557639][ T31] usb 5-1: USB disconnect, device number 4 [ 134.589058][ T31] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 134.590008][ T31] cyberjack 5-1:0.69: device disconnected [ 134.931855][ T6571] netlink: 51 bytes leftover after parsing attributes in process `syz.1.196'. [ 135.085509][ T6575] ipvlan2: entered promiscuous mode [ 135.436924][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 135.585352][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 135.587676][ T31] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 135.587702][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.626683][ T31] usb 1-1: config 0 descriptor?? [ 135.840136][ T31] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 136.045469][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 136.205598][ T45] usb 3-1: config index 0 descriptor too short (expected 72, got 10) [ 136.205625][ T45] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 136.205641][ T45] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 136.273586][ T45] usb 3-1: string descriptor 0 read error: -71 [ 136.273843][ T45] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 136.273863][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.343049][ T45] usb 3-1: can't set config #1, error -71 [ 136.388352][ T45] usb 3-1: USB disconnect, device number 3 [ 136.848709][ T31] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 136.848738][ T31] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 136.849284][ T31] asix 1-1:0.0: probe with driver asix failed with error -71 [ 136.902977][ T31] usb 1-1: USB disconnect, device number 4 [ 137.706899][ T5842] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 137.868980][ T5842] usb 5-1: Using ep0 maxpacket: 8 [ 137.874831][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 137.874863][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.874882][ T5842] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.874902][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 137.874921][ T5842] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 137.874956][ T5842] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 137.874977][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.974782][ T5842] usb 5-1: config 0 descriptor?? [ 138.023109][ T5153] Bluetooth: hci5: urb ffff8880268e8700 submission failed (90) [ 138.222458][ T5842] usb 5-1: USB disconnect, device number 5 [ 138.235447][ T5823] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 138.432015][ T5823] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 138.432048][ T5823] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 138.432086][ T5823] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 138.432105][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.494993][ T6628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 138.577844][ T5823] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.860363][ T6643] input: syz1 as /devices/virtual/input/input8 [ 139.027745][ T5823] usb 3-1: USB disconnect, device number 4 [ 139.281095][ T6651] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.828963][ T6667] loop6: detected capacity change from 0 to 7 [ 139.953989][ T6017] Dev loop6: unable to read RDB block 7 [ 139.954042][ T6017] loop6: unable to read partition table [ 139.954313][ T6017] loop6: partition table beyond EOD, truncated [ 139.997190][ T6667] Dev loop6: unable to read RDB block 7 [ 139.997235][ T6667] loop6: unable to read partition table [ 139.997491][ T6667] loop6: partition table beyond EOD, truncated [ 140.015572][ T6667] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 141.324282][ T6706] input: syz0 as /devices/virtual/input/input9 [ 142.926631][ T6731] netlink: 830 bytes leftover after parsing attributes in process `syz.1.254'. [ 143.897860][ T37] audit: type=1326 audit(1756380289.150:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6748 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f642ebe9 code=0x7fc00000 [ 144.425454][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 144.449030][ T37] audit: type=1326 audit(1756380289.710:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6748 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8f642ebe9 code=0x7fc00000 [ 144.575994][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 144.578489][ T31] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 144.578509][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.578525][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.581543][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.581577][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.581594][ T31] usb 1-1: Product: syz [ 144.581606][ T31] usb 1-1: Manufacturer: syz [ 144.581618][ T31] usb 1-1: SerialNumber: syz [ 145.096997][ T31] usb 1-1: 0:2 : does not exist [ 145.615878][ T6775] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 145.957812][ T31] usb 1-1: USB disconnect, device number 5 [ 146.062238][ T6141] udevd[6141]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.131091][ T6786] netlink: 'syz.3.273': attribute type 1 has an invalid length. [ 146.131111][ T6786] netlink: 'syz.3.273': attribute type 10 has an invalid length. [ 146.131123][ T6786] netlink: 236 bytes leftover after parsing attributes in process `syz.3.273'. [ 146.655387][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 146.815456][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 146.818249][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.818276][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.818296][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 146.818335][ T31] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 146.818355][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.917685][ T31] usb 5-1: config 0 descriptor?? [ 147.459636][ T31] input: HID 0955:7214 Haptics as /devices/virtual/input/input10 [ 147.481861][ T37] audit: type=1326 audit(1756380292.670:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11524ebe9 code=0x7ffc0000 [ 147.497117][ T37] audit: type=1326 audit(1756380292.760:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff11524ebe9 code=0x7ffc0000 [ 147.497164][ T37] audit: type=1326 audit(1756380292.760:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11524ebe9 code=0x7ffc0000 [ 147.497200][ T37] audit: type=1326 audit(1756380292.760:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11524ebe9 code=0x7ffc0000 [ 147.497237][ T37] audit: type=1326 audit(1756380292.760:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff11524ebe9 code=0x7ffc0000 [ 147.497273][ T37] audit: type=1326 audit(1756380292.760:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11524ebe9 code=0x7ffc0000 [ 147.497372][ T37] audit: type=1326 audit(1756380292.760:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff11524ebe9 code=0x7ffc0000 [ 147.546785][ T37] audit: type=1326 audit(1756380292.770:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11524ebe9 code=0x7ffc0000 [ 147.933214][ T31] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 147.933604][ T31] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 148.018053][ T5842] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 148.028208][ T5842] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 148.040594][ T5842] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 148.043980][ T5842] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 148.056986][ T31] usb 5-1: USB disconnect, device number 6 [ 149.602194][ T6849] loop2: detected capacity change from 0 to 7 [ 149.714810][ T6849] Dev loop2: unable to read RDB block 7 [ 149.714863][ T6849] loop2: unable to read partition table [ 149.715105][ T6849] loop2: partition table beyond EOD, truncated [ 149.715139][ T6849] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 152.417773][ T6891] block nbd0: NBD_DISCONNECT [ 152.418934][ T6891] block nbd0: Send disconnect failed -22 [ 152.419772][ T6888] block nbd0: Disconnected due to user request. [ 152.419787][ T6888] block nbd0: shutting down sockets [ 153.430650][ T6898] syz.0.320 (6898) used greatest stack depth: 16760 bytes left [ 153.828246][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805df96400: rx timeout, send abort [ 154.329959][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805df96400: abort rx timeout. Force session deactivation [ 154.845513][ T5926] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 154.905295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.905363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.990996][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 154.991013][ T37] audit: type=1326 audit(1756380300.160:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6932 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff5c7f0ade9 code=0x7ffc0000 [ 154.991060][ T37] audit: type=1326 audit(1756380300.160:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6932 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7f6ebe9 code=0x7ffc0000 [ 154.991096][ T37] audit: type=1326 audit(1756380300.160:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6932 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff5c7f0ade9 code=0x7ffc0000 [ 154.991133][ T37] audit: type=1326 audit(1756380300.160:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6932 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff5c7f0ade9 code=0x7ffc0000 [ 154.991170][ T37] audit: type=1326 audit(1756380300.160:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6932 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7f6ebe9 code=0x7ffc0000 [ 154.991207][ T37] audit: type=1326 audit(1756380300.160:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6932 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff5c7f0ade9 code=0x7ffc0000 [ 154.991244][ T37] audit: type=1326 audit(1756380300.160:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6932 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7f6ebe9 code=0x7ffc0000 [ 154.991281][ T37] audit: type=1326 audit(1756380300.160:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6932 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff5c7f0ade9 code=0x7ffc0000 [ 154.991427][ T37] audit: type=1326 audit(1756380300.160:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6932 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7f6ebe9 code=0x7ffc0000 [ 154.991470][ T37] audit: type=1326 audit(1756380300.160:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6932 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff5c7f0ade9 code=0x7ffc0000 [ 155.029508][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.029534][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.029555][ T5926] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 155.029567][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.032932][ T5926] usb 4-1: config 0 descriptor?? [ 155.602860][ T5926] cm6533_jd 0003:0D8C:0022.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 156.455720][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 156.468962][ T5842] usb 4-1: USB disconnect, device number 3 [ 156.583771][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 156.583984][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 156.615200][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 156.615496][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 156.617926][ T45] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 156.617952][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 156.617975][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 156.617994][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 156.618015][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 156.625863][ T45] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 156.625889][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.625906][ T45] usb 5-1: Product: syz [ 156.625917][ T45] usb 5-1: Manufacturer: syz [ 156.625929][ T45] usb 5-1: SerialNumber: syz [ 156.659597][ T45] usb 5-1: config 0 descriptor?? [ 156.674605][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 156.928696][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 156.928917][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 157.133650][ T45] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 157.133724][ T45] input input11: Device does not respond to id packet M [ 157.136017][ T45] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 157.136062][ T45] input input11: Device does not respond to id packet P [ 157.136764][ T45] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 157.136803][ T45] input input11: Device does not respond to id packet B [ 157.137570][ T45] input input11: Device does not respond to id packet N [ 157.338276][ T45] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 157.338752][ T45] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 157.339199][ T45] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 157.339664][ T45] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 157.381861][ T45] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 157.386495][ T6967] ceph: No mds server is up or the cluster is laggy [ 157.436403][ T5823] libceph: connect (1)[c::]:6789 error -101 [ 157.436628][ T5823] libceph: mon0 (1)[c::]:6789 connect error [ 157.467333][ T45] usb 5-1: USB disconnect, device number 7 [ 158.364582][ T6995] netlink: 20 bytes leftover after parsing attributes in process `syz.0.357'. [ 158.752452][ T6995] nbd: nbd64 already in use [ 158.752644][ T6998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.357'. [ 158.752667][ T6998] nbd: nbd64 already in use [ 158.799217][ T7008] netlink: 'syz.3.362': attribute type 1 has an invalid length. [ 158.937522][ T7008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.067205][ T7011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.067745][ T7011] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 159.069819][ T7011] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 159.248564][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 159.248587][ T7013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 159.248611][ T7013] netlink: 'syz.0.364': attribute type 20 has an invalid length. [ 159.316532][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 159.316554][ T7013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 159.316577][ T7013] netlink: 'syz.0.364': attribute type 20 has an invalid length. [ 159.321056][ T3193] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.370474][ T7013] Zero length message leads to an empty skb [ 159.370693][ T3193] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.370735][ T3193] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.799920][ T7030] veth0: entered promiscuous mode [ 159.896291][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 160.254803][ T37] kauditd_printk_skb: 198 callbacks suppressed [ 160.254820][ T37] audit: type=1326 audit(1756380305.510:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f642ebe9 code=0x7fc00000 [ 160.970707][ T37] audit: type=1326 audit(1756380306.220:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8f642ebe9 code=0x7fc00000 [ 161.318448][ T5823] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 161.330214][ T7067] netlink: 'syz.0.385': attribute type 9 has an invalid length. [ 161.330233][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 161.331092][ T7067] netlink: 'syz.0.385': attribute type 9 has an invalid length. [ 161.331105][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 161.505417][ T5926] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 161.523019][ T5823] usb 2-1: Using ep0 maxpacket: 8 [ 161.531574][ T5823] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 161.531635][ T5823] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.531654][ T5823] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.531675][ T5823] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.531696][ T5823] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.531735][ T5823] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.531754][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.682963][ T5926] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 161.683048][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.683066][ T5926] usb 3-1: Product: syz [ 161.683078][ T5926] usb 3-1: Manufacturer: syz [ 161.683090][ T5926] usb 3-1: SerialNumber: syz [ 161.752763][ T5926] usb 3-1: config 0 descriptor?? [ 161.783384][ T5926] gspca_main: sq930x-2.14.0 probing 2770:930c [ 161.832997][ T5823] usb 2-1: GET_CAPABILITIES returned 0 [ 161.833104][ T5823] usbtmc 2-1:16.0: can't read capabilities [ 162.167993][ T7060] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 162.171164][ T5823] usb 2-1: USB disconnect, device number 2 [ 162.215459][ T31] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 162.381283][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.381308][ T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 162.381357][ T31] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 162.381377][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.415499][ T31] usb 1-1: config 0 descriptor?? [ 162.483074][ T31] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 162.483501][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 162.598838][ T31] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 162.619059][ T31] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 162.619166][ T31] usb 1-1: media controller created [ 162.623171][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.800391][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 162.800532][ T31] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 162.809701][ T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 162.834565][ T31] dvb-usb: schedule remote query interval to 150 msecs. [ 162.834587][ T31] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 162.989213][ T45] dvb-usb: bulk message failed: -22 (1/0) [ 162.989260][ T45] dvb-usb: error while querying for an remote control event. [ 163.025416][ T5926] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 163.145382][ T45] dvb-usb: bulk message failed: -22 (1/0) [ 163.145415][ T45] dvb-usb: error while querying for an remote control event. [ 163.245697][ T5926] gspca_sq930x: Sensor ov9630 not yet treated [ 163.245794][ T5926] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 163.249117][ T5926] usb 3-1: USB disconnect, device number 5 [ 163.318932][ T45] dvb-usb: bulk message failed: -22 (1/0) [ 163.318965][ T45] dvb-usb: error while querying for an remote control event. [ 163.390065][ T31] usb 1-1: USB disconnect, device number 6 [ 163.475409][ T981] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 163.568527][ T31] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 163.625569][ T981] usb 5-1: Using ep0 maxpacket: 16 [ 163.626655][ T981] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 163.628202][ T981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.629747][ T981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.631176][ T981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.632592][ T981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.634036][ T981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.641708][ T981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.684452][ T981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.714941][ T981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.734607][ T981] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 163.734633][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 163.734651][ T981] usb 5-1: SerialNumber: syz [ 163.770223][ T981] usb 5-1: config 0 descriptor?? [ 163.830798][ T981] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 164.017823][ T5189] bcm5974 5-1:0.0: could not read from device [ 164.101679][ T981] usb 5-1: USB disconnect, device number 8 [ 166.785406][ T5919] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 166.945403][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 166.947958][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.947987][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.948023][ T5919] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 166.948043][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.965698][ T5919] usb 1-1: config 0 descriptor?? [ 167.447741][ T5919] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 167.696215][ T981] usb 1-1: USB disconnect, device number 7 [ 167.794001][ T7185] fido_id[7185]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 171.513841][ T7273] capability: warning: `syz.0.467' uses deprecated v2 capabilities in a way that may be insecure [ 171.895561][ T5204] udevd[5204]: worker [6017] terminated by signal 33 (Unknown signal 33) [ 171.895611][ T5204] udevd[5204]: worker [6017] failed while handling '/devices/virtual/block/loop3' [ 171.935603][ T5204] udevd[5204]: worker [6141] terminated by signal 33 (Unknown signal 33) [ 171.935650][ T5204] udevd[5204]: worker [6141] failed while handling '/devices/virtual/block/loop1' [ 172.843173][ T5926] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 172.899586][ T5926] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 173.151760][ T7306] ptrace attach of "./syz-executor exec"[7308] was attempted by "./syz-executor exec"[7306] [ 173.256632][ T7310] veth1_to_bond: entered allmulticast mode [ 173.262338][ T7310] veth1_to_bond: entered promiscuous mode [ 173.263424][ T7309] veth1_to_bond: left promiscuous mode [ 173.263745][ T7309] veth1_to_bond: left allmulticast mode [ 173.895633][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 173.905512][ T5926] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 174.065397][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 174.082475][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.082504][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.082532][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 174.082909][ T5926] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 174.082932][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.083850][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.083875][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.083895][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.083941][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.083961][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.194810][ T10] usb 1-1: config 0 descriptor?? [ 174.304112][ T5926] usb 4-1: config 0 descriptor?? [ 174.763424][ T10] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 174.833000][ T5926] HID 045e:07da: Invalid code 65791 type 1 [ 174.860380][ T5926] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0008/input/input14 [ 174.888555][ T5926] microsoft 0003:045E:07DA.0008: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 175.137490][ T10] usb 4-1: USB disconnect, device number 4 [ 175.436221][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 175.532078][ T5823] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 175.685427][ T5823] usb 3-1: Using ep0 maxpacket: 32 [ 175.688260][ T5823] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 175.688289][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 175.688312][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 175.688332][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 175.688355][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 175.691753][ T5823] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 175.691780][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.691798][ T5823] usb 3-1: Product: syz [ 175.691811][ T5823] usb 3-1: Manufacturer: syz [ 175.691823][ T5823] usb 3-1: SerialNumber: syz [ 175.787365][ T5823] usb 3-1: config 0 descriptor?? [ 176.254990][ T5823] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 176.255040][ T5823] input input15: Device does not respond to id packet M [ 176.268471][ T5823] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 176.268520][ T5823] input input15: Device does not respond to id packet P [ 176.269172][ T5823] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 176.269213][ T5823] input input15: Device does not respond to id packet B [ 176.477184][ T5823] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 176.477659][ T5823] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 176.478204][ T5823] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 176.478728][ T5823] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 176.485058][ T5823] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 176.525501][ T5823] usb 3-1: USB disconnect, device number 6 [ 176.729418][ T10] usb 1-1: USB disconnect, device number 8 [ 176.865474][ T981] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 177.037119][ T981] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 177.037146][ T981] usb 4-1: config 0 has no interface number 0 [ 177.113163][ T981] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 177.113190][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.113207][ T981] usb 4-1: Product: syz [ 177.113220][ T981] usb 4-1: Manufacturer: syz [ 177.113232][ T981] usb 4-1: SerialNumber: syz [ 177.168245][ T981] usb 4-1: config 0 descriptor?? [ 177.457021][ T981] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 177.486752][ T981] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 177.486845][ T981] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 177.486928][ T981] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 177.508108][ T981] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 177.587443][ T981] usb 4-1: USB disconnect, device number 5 [ 177.651273][ T981] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 177.652215][ T981] keyspan 4-1:0.133: device disconnected [ 178.049171][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.135958][ T981] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 179.288457][ T981] usb 3-1: Using ep0 maxpacket: 8 [ 179.291386][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.291432][ T981] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 179.291453][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.298919][ T981] usb 3-1: config 0 descriptor?? [ 179.502038][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 179.556246][ T981] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 179.648065][ T7379] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 179.668217][ T31] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 179.668243][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.668260][ T31] usb 2-1: Product: syz [ 179.668273][ T31] usb 2-1: Manufacturer: syz [ 179.668285][ T31] usb 2-1: SerialNumber: syz [ 179.709938][ T31] usb 2-1: config 0 descriptor?? [ 180.005472][ T10] usb 3-1: USB disconnect, device number 7 [ 180.973691][ T31] usb 2-1: f81604_read: reg: 100e failed: -EPROTO [ 181.028717][ T31] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 181.045701][ T31] usb 2-1: USB disconnect, device number 3 [ 181.137636][ T31] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 181.165426][ T59] Bluetooth: hci0: command 0x0000 tx timeout [ 181.681353][ T31] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 182.088505][ T7421] evm: overlay not supported [ 182.640364][ T37] audit: type=1326 audit(1756380327.900:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7430 comm="syz.0.530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed1a6febe9 code=0x0 [ 183.205432][ T5823] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 183.355404][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 183.357902][ T5823] usb 4-1: config 6 has an invalid interface number: 43 but max is 0 [ 183.357925][ T5823] usb 4-1: config 6 has no interface number 0 [ 183.357973][ T5823] usb 4-1: config 6 interface 43 altsetting 170 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 183.358005][ T5823] usb 4-1: config 6 interface 43 has no altsetting 0 [ 183.406829][ T981] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 183.407046][ T5823] usb 4-1: string descriptor 0 read error: -71 [ 183.407213][ T5823] usb 4-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 183.407233][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.413593][ T5823] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 183.413617][ T5823] usb 4-1: no configuration chosen from 1 choice [ 183.462769][ T5823] usb 4-1: USB disconnect, device number 6 [ 183.555438][ T981] usb 3-1: Using ep0 maxpacket: 16 [ 183.557567][ T981] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 183.557589][ T981] usb 3-1: config 0 has no interface number 0 [ 183.557634][ T981] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 183.557655][ T981] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 183.557675][ T981] usb 3-1: config 0 interface 41 has no altsetting 0 [ 183.560252][ T981] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 183.560276][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.560292][ T981] usb 3-1: Product: syz [ 183.560304][ T981] usb 3-1: Manufacturer: syz [ 183.560316][ T981] usb 3-1: SerialNumber: syz [ 183.648516][ T981] usb 3-1: config 0 descriptor?? [ 183.649664][ T7446] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 183.649850][ T7446] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 183.906025][ T7446] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 183.906166][ T7446] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 184.318297][ T981] Error reading MAC address [ 184.335164][ T7446] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 184.336351][ T7446] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 185.055860][ T981] sr9700 3-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet, c6:fa:c2:89:84:a0 [ 185.079367][ T981] usb 3-1: USB disconnect, device number 8 [ 185.082651][ T981] sr9700 3-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet [ 187.266565][ T7503] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 187.266593][ T7503] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 187.266605][ T7503] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 189.357332][ T7542] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 189.359245][ T7542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.574'. [ 189.359420][ T7542] macvlan1: entered allmulticast mode [ 189.359434][ T7542] veth1_vlan: entered allmulticast mode [ 191.939646][ T7587] netlink: 'syz.4.590': attribute type 1 has an invalid length. [ 192.066480][ T7587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.223978][ T7589] bond1: (slave gretap1): making interface the new active one [ 192.234629][ T7589] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 192.361759][ T7593] binder: 7592:7593 ioctl c0306201 200000000640 returned -22 [ 193.423729][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 193.911408][ T7619] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 193.911434][ T7619] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 194.051921][ T7631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.606'. [ 194.051955][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 194.109287][ T7632] netlink: 'syz.2.606': attribute type 10 has an invalid length. [ 194.334237][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.335829][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.373298][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.373372][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.508863][ T7632] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.509054][ T7632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.513586][ T7632] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.513777][ T7632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.597657][ T7632] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 194.937578][ T7641] pimreg: entered allmulticast mode [ 195.132526][ T7641] pimreg: left allmulticast mode [ 195.881516][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.615'. [ 195.935539][ T7656] Invalid ELF header magic: != ELF [ 196.950829][ T7654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.220434][ T7654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.417060][ T7676] input: syz1 as /devices/virtual/input/input16 [ 198.812726][ T7705] netlink: 240 bytes leftover after parsing attributes in process `syz.4.633'. [ 199.457111][ T5823] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 199.607945][ T5823] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 199.607972][ T5823] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.607988][ T5823] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 199.608041][ T5823] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.677606][ T5823] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 199.677635][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 199.677654][ T5823] usb 4-1: Product: syz [ 199.677666][ T5823] usb 4-1: Manufacturer: syz [ 199.811903][ T5823] cdc_wdm 4-1:1.0: skipping garbage [ 199.811915][ T5823] cdc_wdm 4-1:1.0: skipping garbage [ 199.861423][ T5823] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 199.861520][ T5823] cdc_wdm 4-1:1.0: Unknown control protocol [ 200.064967][ T981] usb 4-1: USB disconnect, device number 7 [ 200.635376][ T981] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 200.802908][ T981] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 200.802934][ T981] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.802951][ T981] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 200.803000][ T981] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.865421][ T981] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 200.865454][ T981] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 200.865471][ T981] usb 4-1: Product: syz [ 200.865483][ T981] usb 4-1: Manufacturer: syz [ 200.924202][ T7728] trusted_key: syz.0.643 sent an empty control message without MSG_MORE. [ 200.959806][ T981] cdc_wdm 4-1:1.0: skipping garbage [ 200.959826][ T981] cdc_wdm 4-1:1.0: skipping garbage [ 200.988421][ T981] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 200.988440][ T981] cdc_wdm 4-1:1.0: Unknown control protocol [ 201.972787][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 201.972920][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 201.973233][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 201.973251][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 201.973479][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 201.973498][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 201.973728][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 201.973746][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 201.973981][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 201.973999][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 201.975394][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 201.975416][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 201.975669][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 201.975688][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 201.975928][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 201.975946][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 201.976184][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 201.976202][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 201.976433][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 201.976451][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 202.130505][ T5919] usb 4-1: USB disconnect, device number 8 [ 202.130597][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 204.055382][ T5919] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 204.215373][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 204.217800][ T5919] usb 2-1: config 0 has no interfaces? [ 204.222423][ T5919] usb 2-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 204.222448][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.222465][ T5919] usb 2-1: Product: syz [ 204.222477][ T5919] usb 2-1: Manufacturer: syz [ 204.222489][ T5919] usb 2-1: SerialNumber: syz [ 204.325741][ T5919] usb 2-1: config 0 descriptor?? [ 204.609479][ T5919] usb 2-1: USB disconnect, device number 4 [ 205.035403][ T5919] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 205.185353][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 205.187838][ T5919] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 205.187860][ T5919] usb 3-1: config 179 has no interface number 0 [ 205.187922][ T5919] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 205.187944][ T5919] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 205.187966][ T5919] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 205.187986][ T5919] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 205.188020][ T5919] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 205.188037][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.305938][ T7777] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 205.533299][ T37] audit: type=1326 audit(1756380350.750:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7785 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed1a6febe9 code=0x7fc00000 [ 205.715878][ T45] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input17 [ 205.799144][ T5926] usb 3-1: USB disconnect, device number 9 [ 205.799150][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 205.799683][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 206.645391][ T5919] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 206.812676][ T5919] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 206.812707][ T5919] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 206.812743][ T5919] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 206.812763][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.945635][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 206.958800][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.672'. [ 207.155351][ T37] audit: type=1326 audit(1756380352.400:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7785 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed1a69ade9 code=0x7fc00000 [ 207.155404][ T37] audit: type=1326 audit(1756380352.410:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7785 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fed1a69aeaf code=0x7fc00000 [ 207.155450][ T37] audit: type=1326 audit(1756380352.410:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7785 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fed1a6febe9 code=0x7fc00000 [ 207.827579][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 207.921639][ T5919] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 207.938485][ T5919] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input18 [ 208.017816][ T5919] input: failed to attach handler kbd to device input18, error: -5 [ 208.096775][ T5919] usb 4-1: USB disconnect, device number 9 [ 210.013466][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.696'. [ 210.175381][ T5823] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 210.328113][ T5823] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.332235][ T5823] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.332262][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.332278][ T5823] usb 1-1: Product: syz [ 210.332290][ T5823] usb 1-1: Manufacturer: syz [ 210.332302][ T5823] usb 1-1: SerialNumber: syz [ 210.803628][ T7888] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 211.004146][ T5823] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 211.004390][ T5823] cdc_ncm 1-1:1.0: bind() failure [ 211.079471][ T5823] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 211.079517][ T5823] cdc_ncm 1-1:1.1: bind() failure [ 211.139522][ T5823] usb 1-1: USB disconnect, device number 9 [ 211.819417][ T5854] Bluetooth: hci0: command 0x0000 tx timeout [ 211.819457][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 211.819480][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 211.819503][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 211.819525][ T5854] Bluetooth: hci4: command 0x0406 tx timeout [ 215.472193][ T7966] capability: warning: `syz.2.724' uses 32-bit capabilities (legacy support in use) [ 215.959600][ T7972] input: syz0 as /devices/virtual/input/input19 [ 216.357910][ T7980] sg_read: process 380 (syz.3.729) changed security contexts after opening file descriptor, this is not allowed. [ 217.605466][ T981] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 217.755400][ T981] usb 1-1: Using ep0 maxpacket: 16 [ 217.761750][ T981] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 217.761775][ T981] usb 1-1: config 0 has no interface number 0 [ 217.761821][ T981] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 217.761842][ T981] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 217.761863][ T981] usb 1-1: config 0 interface 41 has no altsetting 0 [ 217.765103][ T981] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 217.765129][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.765145][ T981] usb 1-1: Product: syz [ 217.765157][ T981] usb 1-1: Manufacturer: syz [ 217.765170][ T981] usb 1-1: SerialNumber: syz [ 217.831491][ T981] usb 1-1: config 0 descriptor?? [ 217.832742][ T7995] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 217.832927][ T7995] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.072759][ T7995] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.073210][ T7995] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.688953][ T981] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 219.105017][ T981] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 219.105044][ T981] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 219.105597][ T981] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 219.150344][ T981] usb 1-1: USB disconnect, device number 10 [ 219.523867][ T37] audit: type=1326 audit(1756380364.780:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8039 comm="syz.4.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f642ebe9 code=0x7ffc0000 [ 219.523979][ T37] audit: type=1326 audit(1756380364.780:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8039 comm="syz.4.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f642ebe9 code=0x7ffc0000 [ 219.582374][ T37] audit: type=1326 audit(1756380364.840:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8039 comm="syz.4.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f642ebe9 code=0x7ffc0000 [ 219.582425][ T37] audit: type=1326 audit(1756380364.840:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8039 comm="syz.4.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f642ebe9 code=0x7ffc0000 [ 219.582464][ T37] audit: type=1326 audit(1756380364.840:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8039 comm="syz.4.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fe8f642ebe9 code=0x7ffc0000 [ 219.582497][ T37] audit: type=1326 audit(1756380364.840:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8039 comm="syz.4.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f642ebe9 code=0x7ffc0000 [ 219.775579][ T5823] IPVS: starting estimator thread 0... [ 219.865728][ T8046] IPVS: using max 8 ests per chain, 19200 per kthread [ 220.251243][ T8063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.268847][ T8063] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 220.272299][ T8063] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 220.434247][ T8067] netlink: 'syz.0.765': attribute type 10 has an invalid length. [ 220.526137][ T8067] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.527459][ T8067] bridge_slave_1: left allmulticast mode [ 220.527485][ T8067] bridge_slave_1: left promiscuous mode [ 220.527733][ T8067] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.535497][ T981] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 220.639349][ T8067] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 220.698013][ T981] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.698041][ T981] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.698071][ T981] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 220.698091][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.703659][ T981] usb 5-1: config 0 descriptor?? [ 220.985346][ T5919] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 221.115527][ T981] usbhid 5-1:0.0: can't add hid device: -71 [ 221.115648][ T981] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 221.127942][ T981] usb 5-1: USB disconnect, device number 9 [ 221.156790][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.156839][ T5919] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 221.156859][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.197492][ T5919] usb 4-1: config 0 descriptor?? [ 221.203312][ T5919] pwc: Askey VC010 type 2 USB webcam detected. [ 221.576205][ C1] ------------[ cut here ]------------ [ 221.576229][ C1] WARNING: CPU: 1 PID: 29 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 221.576267][ C1] Modules linked in: [ 221.576305][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 221.576330][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 221.576347][ C1] RIP: 0010:est_timer+0x6dc/0x9f0 [ 221.576369][ C1] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 35 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 fd e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 221.576386][ C1] RSP: 0018:ffffc90000a3f7a0 EFLAGS: 00010246 [ 221.576404][ C1] RAX: ffffffff88dc5ebb RBX: 0000000000000001 RCX: ffff88801caf1dc0 [ 221.576420][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 221.576434][ C1] RBP: ffffc90000a3f8b0 R08: 0000000000000000 R09: 0000000000000100 [ 221.576448][ C1] R10: dffffc0000000000 R11: fffff52000147f0a R12: 0000000000000008 [ 221.576462][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880271d5068 [ 221.576476][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 221.576493][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.576508][ C1] CR2: 00007fdddba746b3 CR3: 000000005a154000 CR4: 00000000003526f0 [ 221.576526][ C1] Call Trace: [ 221.576534][ C1] [ 221.576561][ C1] ? __pfx_est_timer+0x10/0x10 [ 221.576597][ C1] call_timer_fn+0x17b/0x5f0 [ 221.576625][ C1] ? __pfx_est_timer+0x10/0x10 [ 221.576646][ C1] ? call_timer_fn+0xbe/0x5f0 [ 221.576671][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 221.576709][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 221.576736][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.576760][ C1] ? __pfx_est_timer+0x10/0x10 [ 221.576785][ C1] __run_timer_base+0x648/0x970 [ 221.576828][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 221.576874][ C1] run_timer_softirq+0xb7/0x180 [ 221.576900][ C1] handle_softirqs+0x22c/0x710 [ 221.576939][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 221.576987][ C1] run_ktimerd+0xcf/0x190 [ 221.577013][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 221.577038][ C1] ? schedule+0x91/0x360 [ 221.577072][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 221.577096][ C1] smpboot_thread_fn+0x542/0xa60 [ 221.577124][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 221.577160][ C1] kthread+0x711/0x8a0 [ 221.577195][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 221.577218][ C1] ? __pfx_kthread+0x10/0x10 [ 221.577254][ C1] ? __pfx_kthread+0x10/0x10 [ 221.577285][ C1] ret_from_fork+0x3fc/0x770 [ 221.577315][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 221.577349][ C1] ? __switch_to_asm+0x39/0x70 [ 221.577369][ C1] ? __switch_to_asm+0x33/0x70 [ 221.577387][ C1] ? __pfx_kthread+0x10/0x10 [ 221.577418][ C1] ret_from_fork_asm+0x1a/0x30 [ 221.577456][ C1] [ 221.577466][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 221.577481][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 221.577503][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 221.577515][ C1] Call Trace: [ 221.577523][ C1] [ 221.577531][ C1] dump_stack_lvl+0x99/0x250 [ 221.577561][ C1] ? __asan_memcpy+0x40/0x70 [ 221.577584][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.577613][ C1] ? __pfx__printk+0x10/0x10 [ 221.577652][ C1] vpanic+0x281/0x750 [ 221.577682][ C1] ? __pfx__printk+0x10/0x10 [ 221.577704][ C1] ? __pfx_vpanic+0x10/0x10 [ 221.577733][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 221.577775][ C1] panic+0xb9/0xc0 [ 221.577803][ C1] ? __pfx_panic+0x10/0x10 [ 221.577851][ C1] __warn+0x31b/0x4b0 [ 221.577878][ C1] ? est_timer+0x6dc/0x9f0 [ 221.577902][ C1] ? est_timer+0x6dc/0x9f0 [ 221.577923][ C1] report_bug+0x2be/0x4f0 [ 221.577948][ C1] ? est_timer+0x6dc/0x9f0 [ 221.577977][ C1] ? est_timer+0x6dc/0x9f0 [ 221.577999][ C1] ? est_timer+0x6de/0x9f0 [ 221.578020][ C1] handle_bug+0x84/0x160 [ 221.578051][ C1] exc_invalid_op+0x1a/0x50 [ 221.578080][ C1] asm_exc_invalid_op+0x1a/0x20 [ 221.578100][ C1] RIP: 0010:est_timer+0x6dc/0x9f0 [ 221.578122][ C1] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 35 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 fd e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 221.578139][ C1] RSP: 0018:ffffc90000a3f7a0 EFLAGS: 00010246 [ 221.578156][ C1] RAX: ffffffff88dc5ebb RBX: 0000000000000001 RCX: ffff88801caf1dc0 [ 221.578172][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 221.578185][ C1] RBP: ffffc90000a3f8b0 R08: 0000000000000000 R09: 0000000000000100 [ 221.578199][ C1] R10: dffffc0000000000 R11: fffff52000147f0a R12: 0000000000000008 [ 221.578213][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880271d5068 [ 221.578237][ C1] ? est_timer+0x6db/0x9f0 [ 221.578285][ C1] ? __pfx_est_timer+0x10/0x10 [ 221.578322][ C1] call_timer_fn+0x17b/0x5f0 [ 221.578348][ C1] ? __pfx_est_timer+0x10/0x10 [ 221.578369][ C1] ? call_timer_fn+0xbe/0x5f0 [ 221.578395][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 221.578434][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 221.578459][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.578482][ C1] ? __pfx_est_timer+0x10/0x10 [ 221.578507][ C1] __run_timer_base+0x648/0x970 [ 221.578552][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 221.578598][ C1] run_timer_softirq+0xb7/0x180 [ 221.578624][ C1] handle_softirqs+0x22c/0x710 [ 221.578661][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 221.578701][ C1] run_ktimerd+0xcf/0x190 [ 221.578728][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 221.578762][ C1] ? schedule+0x91/0x360 [ 221.578796][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 221.578818][ C1] smpboot_thread_fn+0x542/0xa60 [ 221.578845][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 221.578880][ C1] kthread+0x711/0x8a0 [ 221.578913][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 221.578938][ C1] ? __pfx_kthread+0x10/0x10 [ 221.578981][ C1] ? __pfx_kthread+0x10/0x10 [ 221.579013][ C1] ret_from_fork+0x3fc/0x770 [ 221.579037][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 221.579064][ C1] ? __switch_to_asm+0x39/0x70 [ 221.579078][ C1] ? __switch_to_asm+0x33/0x70 [ 221.579093][ C1] ? __pfx_kthread+0x10/0x10 [ 221.579122][ C1] ret_from_fork_asm+0x1a/0x30 [ 221.579158][ C1] [ 221.579428][ C1] Kernel Offset: disabled