last executing test programs: 2.852296903s ago: executing program 1 (id=1551): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) 2.764644471s ago: executing program 1 (id=1553): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x9c) 2.135081475s ago: executing program 0 (id=1567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x38}}, 0x0) 1.984969317s ago: executing program 0 (id=1570): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x0, @rand_addr=0x64010100}], 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r2, 0x1, 0x20}, 0xc) 1.824570982s ago: executing program 2 (id=1575): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = io_uring_setup(0x2ad5, &(0x7f00000001c0)) ioctl$TCXONC(r0, 0x540a, 0x3) close(r1) ioctl$TCSETSW2(r0, 0x5425, 0x0) 1.806663824s ago: executing program 1 (id=1576): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x23, @string={0x23, 0x3, "5d95b5db2648b4c56db3094885239e187f30232fb4711d740fabfa519a43621ba8"}}, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x541b, 0x0) 1.43346773s ago: executing program 2 (id=1583): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08002600b409000008009f0009"], 0x2c}}, 0x0) 1.394823253s ago: executing program 4 (id=1584): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8000000000000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="4af190cd3a8e994aeb49549a67881dbc9904529968779df5092f4deba3d31bd110a0e5e62012e06046cbb2b024decf86021d0883ecc7f116606c01d34f7e27bde3503612c26399a96e71a9b253a2734f353cab5d990e9afebd9dbe3331"], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.30164781s ago: executing program 2 (id=1585): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fspick(r1, &(0x7f0000000100)='.\x00', 0x0) 1.232112132s ago: executing program 2 (id=1587): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000040)={0x2, 0x0, @private}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x156, @time={0x48}}) 1.11846967s ago: executing program 4 (id=1588): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0xffffffff, 0x1000}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc040aed5, &(0x7f0000000040)=ANY=[]) 1.046017629s ago: executing program 2 (id=1590): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1.030141402s ago: executing program 0 (id=1591): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) syz_clone(0x1000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) setresgid(0x0, r1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0xff05, 0x0) 891.957268ms ago: executing program 2 (id=1593): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x10, 0x3c, 0xd6, 0x8, 0x6, 0xff7f}}}, 0x0) 840.045522ms ago: executing program 0 (id=1594): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}}, 0x20}}, 0x0) syz_io_uring_setup(0x6cd8, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 799.667836ms ago: executing program 4 (id=1595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 779.98777ms ago: executing program 0 (id=1596): unshare(0x2000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}], 0x20}, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) 763.122373ms ago: executing program 3 (id=1597): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r3, 0x1, 0x0, 0x0, {0x21}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}}, 0x0) 694.134471ms ago: executing program 0 (id=1598): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="c21504239e1dc595f0766418b856f059", 0xfffffe99}], 0x2, &(0x7f0000001a00)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001a40)=""/4106, 0x100a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000240)=""/125, 0x7d}, {&(0x7f0000001340)=""/54, 0x36}, {&(0x7f0000001380)=""/227, 0xe3}], 0x3}, 0xfffffffd}], 0x2, 0x40010000, 0x0) 662.645359ms ago: executing program 3 (id=1599): creat(&(0x7f0000000140)='./bus\x00', 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x8b) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2b00000001"], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 611.905575ms ago: executing program 4 (id=1600): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r1, 0x40204706, 0x20000000) 585.294075ms ago: executing program 3 (id=1601): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r1, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 482.892368ms ago: executing program 3 (id=1602): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b040000000000000000020000003400048030000180080001006e6174002400028008000240000000020800014000000000080005400000000208000740000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 381.745191ms ago: executing program 3 (id=1603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000c00)=ANY=[]}], 0x5, 0x0, 0x0, 0x10}, 0x8000) readv(r0, &(0x7f00000001c0), 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 281.445717ms ago: executing program 1 (id=1604): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0xa101}, @sack_perm={0x4, 0x2}, @generic={0x0, 0x11, "69fbd54ae5c72f55270fb651aa9d2f"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @fastopen={0x22, 0x2}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @mptcp=@ack={0x1e, 0x4}]}}}}}}}}, 0x0) 107.994333ms ago: executing program 4 (id=1605): unshare(0x2000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000300)={0x0, &(0x7f00000002c0), 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x1000, 0x0, 0x0, r2, 0x4}) 107.586242ms ago: executing program 1 (id=1606): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000500)=""/213, 0xd5}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a010200000000000000000100000009000300739c7a320000000014000480080002401a00000008000140000000050900010073797a310000000044000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000180004"], 0xcc}}, 0x0) 62.299192ms ago: executing program 3 (id=1607): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) 481.557µs ago: executing program 1 (id=1608): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=1609): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)="a301", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)="aff2", 0x2}], 0x1}}], 0x2, 0x16de) kernel console output (not intermixed with test programs): It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.278799][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.305523][ T5232] veth1_vlan: entered promiscuous mode [ 68.315080][ T5223] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.324302][ T5223] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.334025][ T5223] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.343074][ T5223] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.353929][ T5231] veth0_vlan: entered promiscuous mode [ 68.368720][ T5221] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.378284][ T5221] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.387073][ T5221] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.395762][ T5221] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.479306][ T5231] veth1_vlan: entered promiscuous mode [ 68.488550][ T5225] Bluetooth: hci1: command tx timeout [ 68.567397][ T5225] Bluetooth: hci0: command tx timeout [ 68.628761][ T747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.637884][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.645727][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.648308][ T747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.660576][ T5225] Bluetooth: hci2: command tx timeout [ 68.682359][ T5232] veth0_macvtap: entered promiscuous mode [ 68.693656][ T5232] veth1_macvtap: entered promiscuous mode [ 68.727693][ T5225] Bluetooth: hci3: command tx timeout [ 68.728542][ T5222] Bluetooth: hci4: command tx timeout [ 68.781946][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.791619][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.801218][ T5231] veth0_macvtap: entered promiscuous mode [ 68.818431][ T5231] veth1_macvtap: entered promiscuous mode [ 68.834541][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.849087][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.850126][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.873610][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.883711][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.895231][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.905464][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.916338][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.930539][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.945045][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.954776][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.985152][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.995937][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.006283][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.022517][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.033112][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.043666][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.055306][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.081927][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.093678][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.104087][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.115234][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.125445][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.137229][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.147276][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.157850][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.174200][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.189049][ T5232] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.198483][ T5232] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.207890][ T5232] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.217410][ T5232] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.260751][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.260999][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.285978][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.288194][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.311379][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.323650][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.340710][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.352236][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.363096][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.374501][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.386281][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.401581][ T5231] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.410925][ T5231] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.420030][ T5231] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.429484][ T5231] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.432662][ T5305] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 69.453962][ T5305] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 69.463714][ T5305] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 69.535799][ T5306] syz.3.6: attempt to access beyond end of device [ 69.535799][ T5306] loop3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 69.543776][ T5305] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 69.604999][ T5306] F2FS-fs (loop3): Unable to read 1th superblock [ 69.636294][ T5306] syz.3.6: attempt to access beyond end of device [ 69.636294][ T5306] loop3: rw=0, sector=8, nr_sectors = 8 limit=0 [ 69.708469][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.716423][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.766028][ T5306] F2FS-fs (loop3): Unable to read 2th superblock [ 69.830719][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.842607][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.939412][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.968278][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.049509][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.104095][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.298039][ T1807] psmouse serio2: Failed to reset mouse on : -5 [ 70.562999][ T5327] hsr0: entered allmulticast mode [ 70.569914][ T5222] Bluetooth: hci1: command tx timeout [ 70.597162][ T5327] hsr_slave_0: entered allmulticast mode [ 70.602873][ T5327] hsr_slave_1: entered allmulticast mode [ 70.648338][ T5222] Bluetooth: hci0: command tx timeout [ 70.727068][ T5222] Bluetooth: hci2: command tx timeout [ 70.807621][ T5222] Bluetooth: hci4: command tx timeout [ 70.809158][ T5225] Bluetooth: hci3: command tx timeout [ 70.875013][ T5337] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.940698][ T5341] netlink: 'syz.1.16': attribute type 4 has an invalid length. [ 71.045996][ T5348] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.163846][ T5352] capability: warning: `syz.2.20' uses deprecated v2 capabilities in a way that may be insecure [ 71.251049][ T5356] hpfs: Bad magic ... probably not HPFS [ 71.611129][ T5368] batadv_slave_1: entered promiscuous mode [ 71.629342][ T5367] batadv_slave_1: left promiscuous mode [ 71.739190][ T5375] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.841712][ T5379] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 71.855787][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.864243][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.921532][ T5384] netlink: 5300 bytes leftover after parsing attributes in process `syz.0.35'. [ 71.950180][ T5384] openvswitch: netlink: IP tunnel dst address not specified [ 73.178688][ T5442] netlink: 4272 bytes leftover after parsing attributes in process `syz.1.59'. [ 73.188188][ T5442] netlink: 'syz.1.59': attribute type 1 has an invalid length. [ 73.195891][ T5442] netlink: 121 bytes leftover after parsing attributes in process `syz.1.59'. [ 73.209267][ T5272] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.277283][ T29] audit: type=1326 audit(1725493516.942:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5443 comm="syz.1.60" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fece3b7cef9 code=0x0 [ 73.426976][ T5272] usb 1-1: Using ep0 maxpacket: 16 [ 73.438966][ T5272] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.454786][ T5272] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.465552][ T5272] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 73.478679][ T5272] usb 1-1: config 0 interface 0 has no altsetting 0 [ 73.485309][ T5272] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 73.494411][ T5272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.507662][ T5272] usb 1-1: config 0 descriptor?? [ 73.906916][ T1807] misc userio: Buffer overflowed, userio client isn't keeping up [ 73.947622][ T5272] hid (null): usage index exceeded [ 73.952999][ T5272] hid (null): usage index exceeded [ 73.965501][ T5272] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 73.973294][ T5272] hid-generic 0003:045E:05DA.0001: ignoring exceeding usage max [ 73.984447][ T5272] hid-generic 0003:045E:05DA.0001: ignoring exceeding usage max [ 73.993827][ T5272] hid-generic 0003:045E:05DA.0001: usage index exceeded [ 74.004695][ T5272] hid-generic 0003:045E:05DA.0001: item 0 1 2 2 parsing failed [ 74.020748][ T5272] hid-generic 0003:045E:05DA.0001: probe with driver hid-generic failed with error -22 [ 74.126793][ T5460] syz.4.66 uses obsolete (PF_INET,SOCK_PACKET) [ 74.242923][ T5272] usb 1-1: USB disconnect, device number 2 [ 74.761793][ T5486] sctp: [Deprecated]: syz.2.78 (pid 5486) Use of struct sctp_assoc_value in delayed_ack socket option. [ 74.761793][ T5486] Use struct sctp_sack_info instead [ 75.011531][ T5496] binder: BINDER_SET_CONTEXT_MGR already set [ 75.020794][ T5496] binder: 5495:5496 ioctl 4018620d 20000100 returned -16 [ 75.078097][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.178368][ T1807] input: PS/2 Generic Mouse as /devices/serio2/input/input5 [ 75.268857][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 75.284086][ T9] usb 5-1: config 0 has no interface number 0 [ 75.301275][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.317094][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.330241][ T9] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 75.340204][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.359743][ T9] usb 5-1: config 0 descriptor?? [ 75.417730][ T1807] psmouse serio2: Failed to enable mouse on [ 75.512880][ T5517] ======================================================= [ 75.512880][ T5517] WARNING: The mand mount option has been deprecated and [ 75.512880][ T5517] and is ignored by this kernel. Remove the mand [ 75.512880][ T5517] option from the mount to silence this warning. [ 75.512880][ T5517] ======================================================= [ 75.814197][ T9] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.0002/input/input6 [ 75.922761][ T9] holtek_kbd 0003:04D9:A055.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 76.042890][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.118583][ T9] usb 5-1: USB disconnect, device number 2 [ 76.192599][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.335917][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.482674][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.669498][ T5543] netlink: 'syz.1.107': attribute type 1 has an invalid length. [ 76.693808][ T5543] netlink: 9328 bytes leftover after parsing attributes in process `syz.1.107'. [ 76.725706][ T5543] netlink: 44 bytes leftover after parsing attributes in process `syz.1.107'. [ 76.764959][ T5543] netlink: 'syz.1.107': attribute type 1 has an invalid length. [ 76.883025][ T52] bridge_slave_1: left allmulticast mode [ 76.899870][ T52] bridge_slave_1: left promiscuous mode [ 76.921741][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.930977][ T5222] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.947167][ T5222] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.957939][ T5222] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.966093][ T5222] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.996618][ T5222] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.006502][ T5222] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.076042][ T52] bridge_slave_0: left allmulticast mode [ 77.101947][ T52] bridge_slave_0: left promiscuous mode [ 77.129607][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.018538][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.036249][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.052581][ T52] bond0 (unregistering): Released all slaves [ 79.047244][ T5225] Bluetooth: hci3: command tx timeout [ 79.108039][ T52] hsr_slave_0: left promiscuous mode [ 79.156914][ T52] hsr_slave_1: left promiscuous mode [ 79.181262][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.197074][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.206041][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.226881][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.226952][ T5608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.131'. [ 79.295446][ T52] veth1_macvtap: left promiscuous mode [ 79.304302][ T52] veth0_macvtap: left promiscuous mode [ 79.311339][ T52] veth1_vlan: left promiscuous mode [ 79.332931][ T52] veth0_vlan: left promiscuous mode [ 79.407191][ T5301] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.609152][ T5301] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 79.623084][ T5301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.645992][ T5301] usb 4-1: config 0 descriptor?? [ 79.913239][ T5631] Bluetooth: MGMT ver 1.23 [ 79.925138][ T5631] Bluetooth: hci3: unsupported parameter 64512 [ 79.931698][ T5631] Bluetooth: hci3: invalid length 0, exp 2 for type 6 [ 80.325831][ T52] team0 (unregistering): Port device team_slave_1 removed [ 80.377085][ T52] team0 (unregistering): Port device team_slave_0 removed [ 80.677908][ T5301] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 80.711694][ T5301] usb 4-1: USB disconnect, device number 2 [ 81.131525][ T5225] Bluetooth: hci3: command tx timeout [ 81.152331][ T5548] chnl_net:caif_netlink_parms(): no params data found [ 81.443580][ T5548] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.465824][ T5548] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.482366][ T5548] bridge_slave_0: entered allmulticast mode [ 81.490051][ T5548] bridge_slave_0: entered promiscuous mode [ 81.505321][ T5548] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.523087][ T5548] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.534145][ T5548] bridge_slave_1: entered allmulticast mode [ 81.542001][ T5548] bridge_slave_1: entered promiscuous mode [ 81.632309][ T5548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.652730][ T5548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.677122][ T5273] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 81.730890][ T5548] team0: Port device team_slave_0 added [ 81.746126][ T5548] team0: Port device team_slave_1 added [ 81.878488][ T5548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.885478][ T5548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.919264][ T5548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.921886][ T5273] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 81.940962][ T5548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.948023][ T5548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.966579][ T5273] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 81.987812][ T5548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.998908][ T5273] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.017311][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 82.025634][ T5273] usb 1-1: SerialNumber: syz [ 82.041040][ T5673] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.065920][ T5673] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.104046][ T942] cfg80211: failed to load regulatory.db [ 82.176198][ T5548] hsr_slave_0: entered promiscuous mode [ 82.188973][ T5548] hsr_slave_1: entered promiscuous mode [ 82.212998][ T5548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.232925][ T5548] Cannot create hsr debugfs directory [ 82.290665][ T5673] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.305290][ T5673] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.745232][ T5273] cdc_ether 1-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.0-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 82.832094][ T5719] loop2: detected capacity change from 0 to 7 [ 82.844357][ T5720] netlink: 'syz.3.180': attribute type 34 has an invalid length. [ 82.844371][ T5719] Dev loop2: unable to read RDB block 7 [ 82.860091][ T5719] loop2: unable to read partition table [ 82.866214][ T5719] loop2: partition table beyond EOD, truncated [ 82.874019][ T5719] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 82.927956][ T1807] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.044613][ T5301] usb 1-1: USB disconnect, device number 3 [ 83.053498][ T5548] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.065343][ T5301] cdc_ether 1-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.0-1, Mobile Broadband Network Device [ 83.113170][ T5548] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.129879][ T1807] usb 5-1: config 0 has an invalid interface number: 138 but max is 0 [ 83.131900][ T5548] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.145908][ T1807] usb 5-1: config 0 has no interface number 0 [ 83.153706][ T1807] usb 5-1: config 0 interface 138 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 83.180155][ T5548] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.188162][ T1807] usb 5-1: config 0 interface 138 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 83.204400][ T1807] usb 5-1: config 0 interface 138 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 83.223201][ T5225] Bluetooth: hci3: command tx timeout [ 83.232241][ T1807] usb 5-1: config 0 interface 138 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 83.251500][ T1807] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01f0, bcdDevice=6d.75 [ 83.262832][ T1807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.280895][ T1807] usb 5-1: Product: syz [ 83.285112][ T1807] usb 5-1: Manufacturer: syz [ 83.290651][ T1807] usb 5-1: SerialNumber: syz [ 83.299156][ T1807] usb 5-1: config 0 descriptor?? [ 83.307021][ T1807] ftdi_sio 5-1:0.138: FTDI USB Serial Device converter detected [ 83.316483][ T1807] ftdi_sio ttyUSB0: unknown device type: 0x6d75 [ 83.422834][ T5548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.468913][ T5548] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.490882][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.498113][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.536191][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.543446][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.549486][ T5301] usb 5-1: USB disconnect, device number 3 [ 83.560225][ T5301] ftdi_sio 5-1:0.138: device disconnected [ 83.904882][ T5548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.980565][ T5548] veth0_vlan: entered promiscuous mode [ 83.994272][ T5753] CUSE: info not properly terminated [ 83.998762][ T5548] veth1_vlan: entered promiscuous mode [ 84.070074][ T5548] veth0_macvtap: entered promiscuous mode [ 84.090405][ T5548] veth1_macvtap: entered promiscuous mode [ 84.135122][ T5548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.146582][ T5548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.176598][ T5548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.196039][ T5548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.210344][ T5548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.221007][ T5548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.232554][ T5548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.243300][ T5548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.255274][ T5548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.265161][ T5759] warning: `syz.4.197' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.285246][ T5548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.304788][ T5548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.314815][ T5548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.333008][ T5548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.345511][ T5548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.360567][ T5548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.382647][ T5548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.397071][ T5548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.412427][ T5548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.438950][ T5548] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.458541][ T5548] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.492127][ T5548] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.506846][ T5548] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.624756][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.633903][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.702461][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.713632][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.820271][ T5770] sctp: [Deprecated]: syz.4.200 (pid 5770) Use of int in max_burst socket option deprecated. [ 84.820271][ T5770] Use struct sctp_assoc_value instead [ 85.047256][ T29] audit: type=1400 audit(1725493528.712:3): lsm=SMACK fn=smack_file_ioctl action=denied subject="I" object="_" requested=w pid=5778 comm="syz.4.202" path="/dev/snd/seq" dev="devtmpfs" ino=1089 [ 85.154347][ T29] audit: type=1326 audit(1725493528.822:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5787 comm="syz.0.206" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37cfd7cef9 code=0x0 [ 85.287368][ T5225] Bluetooth: hci3: command tx timeout [ 85.394086][ T5800] loop2: detected capacity change from 0 to 7 [ 85.404701][ T5800] Dev loop2: unable to read RDB block 7 [ 85.419735][ T5800] loop2: AHDI p1 p3 p4 [ 85.426208][ T5800] loop2: partition table partially beyond EOD, truncated [ 85.443075][ T5800] loop2: p1 start 2048 is beyond EOD, truncated [ 85.458737][ T5800] loop2: p3 size 16779293 extends beyond EOD, truncated [ 85.589048][ T5808] capability: warning: `syz.3.212' uses 32-bit capabilities (legacy support in use) [ 86.196405][ T5842] netlink: 'syz.1.227': attribute type 3 has an invalid length. [ 86.221114][ T5842] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.227'. [ 86.537666][ T1807] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.749805][ T1807] usb 1-1: Using ep0 maxpacket: 8 [ 86.760587][ T1807] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 86.777005][ T1807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.800629][ T1807] usb 1-1: Product: syz [ 86.804862][ T1807] usb 1-1: Manufacturer: syz [ 86.822714][ T1807] usb 1-1: SerialNumber: syz [ 86.842953][ T1807] usb 1-1: config 0 descriptor?? [ 87.093769][ T1807] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 87.508298][ T1807] usb write operation failed. (-71) [ 87.534977][ T1807] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 87.549185][ T1807] dvbdev: DVB: registering new adapter (Terratec H7) [ 87.556260][ T1807] usb 1-1: media controller created [ 87.566984][ T1807] usb read operation failed. (-71) [ 87.578207][ T1807] usb write operation failed. (-71) [ 87.600718][ T1807] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 87.618330][ T1807] usb 1-1: USB disconnect, device number 4 [ 87.647915][ T5273] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.838691][ T5273] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 87.855772][ T5273] usb 2-1: config 1 has no interface number 0 [ 87.873278][ T5273] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.895322][ T5273] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 87.929428][ T5273] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 206 [ 87.962110][ T5273] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.987043][ T5273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.005475][ T5273] usb 2-1: Product: syz [ 88.017359][ T5273] usb 2-1: Manufacturer: syz [ 88.022050][ T5273] usb 2-1: SerialNumber: syz [ 88.274307][ T5883] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 88.738140][ T5922] team0: Port device team_slave_1 removed [ 88.897944][ T5883] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 88.909577][ T5273] cdc_ncm 2-1:1.1: bind() failure [ 89.167206][ T5932] dummy0: entered promiscuous mode [ 89.172986][ T5932] macsec1: entered allmulticast mode [ 89.178852][ T5932] dummy0: entered allmulticast mode [ 89.191124][ T8] usb 2-1: USB disconnect, device number 2 [ 89.243490][ T5932] dummy0: left allmulticast mode [ 89.249162][ T5932] dummy0: left promiscuous mode [ 89.795620][ T29] audit: type=1326 audit(1725493533.462:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5949 comm="syz.4.273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5719d7cef9 code=0x0 [ 90.005303][ T5959] syz_tun: entered promiscuous mode [ 90.019791][ T5959] syz_tun: left promiscuous mode [ 90.115393][ T5964] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.249816][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 90.266381][ T5967] vlan2: entered promiscuous mode [ 90.797595][ T46] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 91.007524][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 91.025627][ T46] usb 1-1: config 0 has no interfaces? [ 91.033268][ T46] usb 1-1: config 0 has no interfaces? [ 91.054794][ T46] usb 1-1: config 0 has no interfaces? [ 91.084323][ T46] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 91.111953][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.126933][ T46] usb 1-1: Product: syz [ 91.131160][ T46] usb 1-1: Manufacturer: syz [ 91.135860][ T46] usb 1-1: SerialNumber: syz [ 91.147371][ T5273] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.157823][ T46] usb 1-1: config 0 descriptor?? [ 91.348645][ T5273] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.376866][ T5273] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.389253][ T5273] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 91.415392][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 91.427291][ T5977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.437534][ T5273] usb 4-1: SerialNumber: syz [ 91.467207][ T5977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.500840][ T5977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.527970][ T5977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.542583][ T46] usb 1-1: USB disconnect, device number 5 [ 91.675167][ T5273] usb 4-1: 0:2 : does not exist [ 91.689150][ T5273] usb 4-1: usbmixer: too many channels (61) in unit 5 [ 91.749805][ T5273] usb 4-1: USB disconnect, device number 3 [ 92.137032][ T46] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 92.347886][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 92.373576][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.429519][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.461400][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.495068][ T46] usb 1-1: New USB device found, idVendor=15c2, idProduct=05d8, bcdDevice= 0.00 [ 92.533839][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.559551][ T46] usb 1-1: config 0 descriptor?? [ 92.805813][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 92.827194][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 92.848593][ T46] usb 1-1: USB disconnect, device number 6 [ 93.270438][ T6068] bond0: (slave bond_slave_0): Releasing backup interface [ 93.386627][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.576939][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 93.592340][ T8] usb 5-1: config 0 has no interfaces? [ 93.603857][ T8] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 93.644005][ T8] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 93.670286][ T8] usb 5-1: Manufacturer: syz [ 93.695527][ T8] usb 5-1: config 0 descriptor?? [ 93.899994][ T6097] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 94.048641][ T9] usb 5-1: USB disconnect, device number 4 [ 94.105157][ T6110] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.477455][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.694917][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 94.718057][ T8] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 94.733767][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.753083][ T8] usb 2-1: Product: syz [ 94.761962][ T8] usb 2-1: Manufacturer: syz [ 94.776178][ T8] usb 2-1: SerialNumber: syz [ 94.789058][ T8] usb 2-1: config 0 descriptor?? [ 94.819681][ T8] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG [ 94.952694][ T29] audit: type=1326 audit(1725493538.622:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6153 comm="syz.3.365" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f622e37cef9 code=0x0 [ 95.094543][ T5301] usb 2-1: USB disconnect, device number 3 [ 95.114880][ T6162] Bluetooth: MGMT ver 1.23 [ 95.176933][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.804730][ T6193] pimreg: entered allmulticast mode [ 95.899397][ T6193] pimreg: left allmulticast mode [ 96.405354][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 96.414949][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.395'. [ 96.429634][ T6222] vlan2: entered promiscuous mode [ 96.452574][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x7 [ 96.463517][ T8] hid-generic 0000:0000:0000.0003: ignoring exceeding usage max [ 96.481868][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.500726][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x6 [ 96.512183][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0xd [ 96.521277][ T29] audit: type=1326 audit(1725493540.192:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6227 comm="syz.4.398" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5719d7cef9 code=0x0 [ 96.526138][ T8] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 97.118921][ T5351] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.207056][ T5222] Bluetooth: hci0: command 0x0401 tx timeout [ 97.213452][ T5225] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 97.317046][ T5351] usb 3-1: Using ep0 maxpacket: 8 [ 97.330223][ T5351] usb 3-1: config 0 has no interfaces? [ 97.337825][ T5273] hid-generic 0000:0000:0000.0004: unknown main item tag 0x7 [ 97.345302][ T5273] hid-generic 0000:0000:0000.0004: ignoring exceeding usage max [ 97.355894][ T5351] usb 3-1: config 0 has no interfaces? [ 97.364360][ T5273] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 97.372024][ T5351] usb 3-1: config 0 has no interfaces? [ 97.377795][ T5273] hid-generic 0000:0000:0000.0004: unknown main item tag 0x6 [ 97.385866][ T5273] hid-generic 0000:0000:0000.0004: unknown main item tag 0xd [ 97.399131][ T5351] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 97.411222][ T5351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.419569][ T5273] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 97.429325][ T5351] usb 3-1: Product: syz [ 97.434335][ T5351] usb 3-1: Manufacturer: syz [ 97.439929][ T5351] usb 3-1: SerialNumber: syz [ 97.468994][ T5351] usb 3-1: config 0 descriptor?? [ 97.616790][ T29] audit: type=1326 audit(1725493541.282:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6269 comm="syz.4.416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5719d7cef9 code=0x0 [ 97.709876][ T6242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.723626][ T6242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.741344][ T6242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.751938][ T6242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.769151][ T9] usb 3-1: USB disconnect, device number 3 [ 98.397035][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.445933][ T6287] netlink: 60 bytes leftover after parsing attributes in process `syz.3.421'. [ 98.457210][ T6287] netlink: 60 bytes leftover after parsing attributes in process `syz.3.421'. [ 98.617145][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 98.627707][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.669959][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.707272][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.748960][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice= 0.00 [ 98.770620][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.790171][ T9] usb 3-1: config 0 descriptor?? [ 98.798603][ T9] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 98.806614][ T9] imon 3-1:0.0: unable to initialize intf0, err -90 [ 98.813924][ T9] imon:imon_probe: failed to initialize context! [ 98.830871][ T9] imon 3-1:0.0: unable to register, err -19 [ 99.063601][ T8] usb 3-1: USB disconnect, device number 4 [ 99.503508][ T5273] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.643988][ T6333] vlan2: entered promiscuous mode [ 99.667767][ T6333] gretap0: entered promiscuous mode [ 99.681009][ T6333] vlan2: entered allmulticast mode [ 99.688078][ T5273] usb 4-1: Using ep0 maxpacket: 8 [ 99.709177][ T6333] gretap0: entered allmulticast mode [ 99.714856][ T5273] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 99.736839][ T5273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.757050][ T5273] usb 4-1: Product: syz [ 99.761296][ T5273] usb 4-1: Manufacturer: syz [ 99.765908][ T5273] usb 4-1: SerialNumber: syz [ 99.784005][ T5273] usb 4-1: config 0 descriptor?? [ 99.798429][ T5273] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 100.381384][ T747] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.502257][ T747] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.556930][ T5301] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 100.621873][ T5273] gspca_vc032x: reg_w err -71 [ 100.632623][ T747] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.636862][ T5273] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 100.699783][ T5273] usb 4-1: USB disconnect, device number 4 [ 100.766863][ T5301] usb 5-1: Using ep0 maxpacket: 32 [ 100.783490][ T5301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.804746][ T747] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.835728][ T5301] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=a4.72 [ 100.845140][ T5301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.857876][ T5301] usb 5-1: Product: syz [ 100.865885][ T5301] usb 5-1: Manufacturer: syz [ 100.873076][ T5301] usb 5-1: SerialNumber: syz [ 100.882722][ T5301] usb 5-1: config 0 descriptor?? [ 100.994694][ T747] bridge_slave_1: left allmulticast mode [ 101.005048][ T747] bridge_slave_1: left promiscuous mode [ 101.011006][ T747] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.027405][ T5222] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.038337][ T747] bridge_slave_0: left allmulticast mode [ 101.044059][ T747] bridge_slave_0: left promiscuous mode [ 101.049577][ T5222] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.051428][ T5222] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.066577][ T5222] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.075667][ T5222] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 101.084099][ T5222] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.092824][ T747] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.118716][ T5301] usb 5-1: unknown interface protocol 0xf, assuming v1 [ 101.167479][ T5301] usb 5-1: USB disconnect, device number 5 [ 101.257585][ T747] gretap0: left allmulticast mode [ 101.262697][ T747] gretap0: left promiscuous mode [ 101.660742][ T6396] mmap: syz.3.466 (6396) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.936178][ T747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.949053][ T747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.963421][ T747] bond0 (unregistering): Released all slaves [ 102.142584][ T6407] netlink: 'syz.4.472': attribute type 1 has an invalid length. [ 102.160063][ T6407] netlink: 9320 bytes leftover after parsing attributes in process `syz.4.472'. [ 102.177334][ T6407] netlink: 44 bytes leftover after parsing attributes in process `syz.4.472'. [ 102.222336][ T6407] netlink: 'syz.4.472': attribute type 1 has an invalid length. [ 102.574898][ T6373] chnl_net:caif_netlink_parms(): no params data found [ 102.720972][ T747] hsr_slave_0: left promiscuous mode [ 102.753883][ T747] hsr_slave_1: left promiscuous mode [ 102.777003][ T747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.784493][ T747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.805007][ T747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.822193][ T747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.870972][ T747] veth1_macvtap: left promiscuous mode [ 102.876562][ T747] veth0_macvtap: left promiscuous mode [ 102.882474][ T747] veth1_vlan: left promiscuous mode [ 102.888043][ T747] veth0_vlan: left promiscuous mode [ 103.126935][ T5222] Bluetooth: hci2: command tx timeout [ 103.367068][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 103.570186][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 103.585219][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 103.597848][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.615747][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 103.630145][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 103.650645][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.659886][ T747] team0 (unregistering): Port device team_slave_1 removed [ 103.676069][ T9] usb 1-1: config 0 descriptor?? [ 103.740289][ T747] team0 (unregistering): Port device team_slave_0 removed [ 104.116516][ T9] hid-rmi 0003:17EF:6085.0005: unknown main item tag 0x0 [ 104.125047][ T9] hid-rmi 0003:17EF:6085.0005: unknown main item tag 0x0 [ 104.132678][ T9] hid-rmi 0003:17EF:6085.0005: unknown main item tag 0x0 [ 104.139954][ T9] hid-rmi 0003:17EF:6085.0005: unknown main item tag 0x0 [ 104.147377][ T9] hid-rmi 0003:17EF:6085.0005: unknown main item tag 0x0 [ 104.160522][ T9] hid-rmi 0003:17EF:6085.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.0-1/input0 [ 104.291551][ T6448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.490'. [ 104.404249][ T5301] usb 1-1: USB disconnect, device number 7 [ 104.432920][ T6373] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.447975][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.466128][ T6373] bridge_slave_0: entered allmulticast mode [ 104.479743][ T6373] bridge_slave_0: entered promiscuous mode [ 104.500977][ T6454] netlink: 59 bytes leftover after parsing attributes in process `syz.3.492'. [ 104.511369][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.528466][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.535882][ T6373] bridge_slave_1: entered allmulticast mode [ 104.548323][ T6373] bridge_slave_1: entered promiscuous mode [ 104.644934][ T6373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.669787][ T6373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.758680][ T6373] team0: Port device team_slave_0 added [ 104.778810][ T6373] team0: Port device team_slave_1 added [ 104.829719][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.845475][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.885823][ T6373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.914972][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.930033][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.959070][ T6373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.088164][ T6373] hsr_slave_0: entered promiscuous mode [ 105.101698][ T6373] hsr_slave_1: entered promiscuous mode [ 105.118145][ T6373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.126334][ T6373] Cannot create hsr debugfs directory [ 105.207074][ T5222] Bluetooth: hci2: command tx timeout [ 105.695554][ T6502] Zero length message leads to an empty skb [ 105.721334][ T6505] Bluetooth: hci3: unsupported parameter 64512 [ 105.758688][ T6505] Bluetooth: hci3: invalid length 0, exp 2 for type 11 [ 105.838796][ T29] audit: type=1326 audit(1725493549.512:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6508 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5719d7cef9 code=0x7ffc0000 [ 105.871755][ T29] audit: type=1326 audit(1725493549.532:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6508 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5719d7cef9 code=0x7ffc0000 [ 105.903434][ T29] audit: type=1326 audit(1725493549.532:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6508 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5719d7cef9 code=0x7ffc0000 [ 105.958776][ T29] audit: type=1326 audit(1725493549.532:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6508 comm="syz.4.512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5719d7cef9 code=0x0 [ 106.031939][ T6518] veth1_macvtap: left promiscuous mode [ 106.243290][ T6373] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.254563][ T6373] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.276099][ T6373] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.291631][ T6373] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.317807][ T6529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.520'. [ 106.348136][ T6532] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 106.437880][ T5301] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.551123][ T6373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.593013][ T6373] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.623539][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.630762][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.638792][ T5301] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 106.648558][ T5301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.651665][ T6541] kernel read not supported for file /eth0 (pid: 6541 comm: syz.2.525) [ 106.675531][ T29] audit: type=1800 audit(1725493550.342:13): pid=6541 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.525" name="eth0" dev="mqueue" ino=13177 res=0 errno=0 [ 106.677973][ T5301] usb 4-1: config 0 descriptor?? [ 106.709307][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.717478][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.771640][ T5301] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 107.130947][ T9] usb 4-1: USB disconnect, device number 5 [ 107.276600][ T6373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.287106][ T5222] Bluetooth: hci2: command tx timeout [ 107.409518][ T6373] veth0_vlan: entered promiscuous mode [ 107.446090][ T6373] veth1_vlan: entered promiscuous mode [ 107.493137][ T6569] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.535'. [ 107.519189][ T6569] openvswitch: netlink: IP tunnel dst address not specified [ 107.543066][ T6373] veth0_macvtap: entered promiscuous mode [ 107.577199][ T6373] veth1_macvtap: entered promiscuous mode [ 107.600902][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.614415][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.646826][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.663910][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.673942][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.684576][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.717958][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.742348][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.774063][ T6373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.803891][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.851031][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.881451][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.912335][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.942942][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.953967][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.963971][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.983635][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.996377][ T6373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.027247][ T6373] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.035995][ T6373] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.060955][ T6373] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.070909][ T6373] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.126994][ T9] psmouse serio5: Failed to reset mouse on : -5 [ 108.238047][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.253351][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.306585][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.316554][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.377113][ T6598] netlink: 'syz.2.548': attribute type 2 has an invalid length. [ 108.575829][ T6607] Illegal XDP return value 1164925196 on prog (id 77) dev syz_tun, expect packet loss! [ 108.815093][ T6618] overlayfs: maximum fs stacking depth exceeded [ 109.052466][ T6629] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 109.367152][ T5222] Bluetooth: hci2: command tx timeout [ 109.603752][ T6659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.575'. [ 109.666344][ T6662] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 109.691314][ T6662] macvlan2: entered allmulticast mode [ 109.701005][ T6662] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 109.714084][ T6662] mac80211_hwsim hwsim14 wlan0: left allmulticast mode [ 109.723827][ T6662] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 109.805429][ T6668] netlink: 'syz.3.580': attribute type 3 has an invalid length. [ 109.816578][ T6668] netlink: 'syz.3.580': attribute type 4 has an invalid length. [ 109.827424][ T6668] netlink: 'syz.3.580': attribute type 7 has an invalid length. [ 109.835195][ T6668] netlink: 'syz.3.580': attribute type 8 has an invalid length. [ 109.854020][ T6668] netlink: 'syz.3.580': attribute type 7 has an invalid length. [ 109.864930][ T6668] netlink: 198180 bytes leftover after parsing attributes in process `syz.3.580'. [ 110.479030][ T5301] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 110.676882][ T5301] usb 1-1: Using ep0 maxpacket: 8 [ 110.684206][ T5301] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.708394][ T5301] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 110.726903][ T5301] usb 1-1: config 1 has no interface number 1 [ 110.733098][ T5301] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 110.766676][ T5301] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.787702][ T5301] usb 1-1: config 1 interface 2 has no altsetting 0 [ 110.802162][ T5301] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.821357][ T5301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.831905][ T5301] usb 1-1: Product: syz [ 110.836272][ T5301] usb 1-1: Manufacturer: syz [ 110.841223][ T5301] usb 1-1: SerialNumber: syz [ 111.093001][ T5301] usb 1-1: 2:1 : invalid UAC_AS_GENERAL desc [ 111.109356][ T5301] usb 1-1: selecting invalid altsetting 0 [ 111.153227][ T5301] usb 1-1: USB disconnect, device number 8 [ 111.201600][ T6732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.609'. [ 111.225365][ T6732] netlink: 'syz.1.609': attribute type 7 has an invalid length. [ 111.256581][ T6732] netlink: 'syz.1.609': attribute type 8 has an invalid length. [ 111.278691][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.609'. [ 111.502990][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'. [ 111.586197][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.617'. [ 111.656980][ T9] misc userio: Buffer overflowed, userio client isn't keeping up [ 111.848020][ T5351] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.869605][ T1807] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.056935][ T5351] usb 4-1: Using ep0 maxpacket: 16 [ 112.062161][ T1807] usb 2-1: Using ep0 maxpacket: 16 [ 112.080461][ T1807] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.091466][ T5351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.102793][ T1807] usb 2-1: config 0 interface 0 has no altsetting 0 [ 112.112193][ T5351] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 112.125443][ T1807] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 112.137752][ T1807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.146703][ T5351] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 112.155879][ T5351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.168979][ T1807] usb 2-1: config 0 descriptor?? [ 112.199571][ T5351] usb 4-1: config 0 descriptor?? [ 112.600098][ T6748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.617151][ T6748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.619518][ T5351] usbhid 4-1:0.0: can't add hid device: -71 [ 112.637682][ T1807] kye 0003:0458:0138.0006: unknown main item tag 0x0 [ 112.644599][ T5351] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 112.653991][ T1807] kye 0003:0458:0138.0006: unknown main item tag 0x0 [ 112.665267][ T5351] usb 4-1: USB disconnect, device number 6 [ 112.671281][ T1807] kye 0003:0458:0138.0006: unexpected long global item [ 112.682844][ T1807] kye 0003:0458:0138.0006: parse failed [ 112.689653][ T1807] kye 0003:0458:0138.0006: probe with driver kye failed with error -22 [ 112.854279][ T1807] usb 2-1: USB disconnect, device number 4 [ 112.949156][ T9] input: PS/2 Generic Mouse as /devices/serio5/input/input11 [ 113.105132][ T6780] mmap: syz.2.630 (6780): VmData 37425152 exceed data ulimit 3626. Update limits or use boot option ignore_rlimit_data. [ 113.176814][ T9] psmouse serio5: Failed to enable mouse on [ 113.867709][ T1807] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 114.074141][ T1807] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.094175][ T1807] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.120714][ T1807] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.152119][ T1807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.162744][ T1807] usb 4-1: Product: syz [ 114.173793][ T1807] usb 4-1: Manufacturer: syz [ 114.179125][ T1807] usb 4-1: SerialNumber: syz [ 114.190007][ T1807] cdc_ncm 4-1:1.0: skipping garbage [ 114.194872][ T6836] netlink: 20 bytes leftover after parsing attributes in process `syz.2.656'. [ 114.245923][ T6838] loop0: detected capacity change from 0 to 7 [ 114.255542][ T6838] Dev loop0: unable to read RDB block 7 [ 114.261372][ T6838] loop0: AHDI p4 [ 114.265251][ T6838] loop0: partition table partially beyond EOD, truncated [ 114.681662][ T6851] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 115.177133][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'. [ 115.223722][ T1807] cdc_ncm 4-1:1.0: bind() failure [ 115.232251][ T1807] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 115.239208][ T1807] cdc_ncm 4-1:1.1: bind() failure [ 115.248233][ T1807] usb 4-1: USB disconnect, device number 7 [ 115.252248][ T6866] macvtap0: entered promiscuous mode [ 115.284468][ T6866] macvtap0: left promiscuous mode [ 115.414781][ T6874] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 115.414781][ T6874] The task syz.4.671 (6874) triggered the difference, watch for misbehavior. [ 115.510295][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 116.224539][ T6912] pimreg: entered allmulticast mode [ 116.260103][ T6912] pimreg: left allmulticast mode [ 116.487403][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.698905][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.731721][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 116.759427][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 116.782720][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.815723][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.825505][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.860018][ T9] usb 3-1: config 0 descriptor?? [ 117.322943][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 117.345331][ T9] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 117.384270][ T9] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 117.432400][ T6958] vlan2: entered allmulticast mode [ 117.458740][ T6958] bond0: entered allmulticast mode [ 117.465915][ T6958] bond_slave_0: entered allmulticast mode [ 117.482368][ T6958] bond_slave_1: entered allmulticast mode [ 117.502546][ T6958] bond0: left allmulticast mode [ 117.508113][ T6958] bond_slave_0: left allmulticast mode [ 117.513786][ T6958] bond_slave_1: left allmulticast mode [ 117.680735][ T5301] usb 3-1: USB disconnect, device number 5 [ 117.826893][ T5351] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 118.027026][ T5351] usb 4-1: Using ep0 maxpacket: 8 [ 118.038636][ T5351] usb 4-1: config 0 has no interfaces? [ 118.063195][ T5351] usb 4-1: config 0 has no interfaces? [ 118.071644][ T5351] usb 4-1: config 0 has no interfaces? [ 118.083589][ T5351] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 118.104920][ T5351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.126806][ T5351] usb 4-1: Product: syz [ 118.131111][ T5351] usb 4-1: Manufacturer: syz [ 118.146085][ T5351] usb 4-1: SerialNumber: syz [ 118.158309][ T5351] usb 4-1: config 0 descriptor?? [ 118.404002][ T6963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.423444][ T6963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.449200][ T6963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.475879][ T6963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.510521][ T9] usb 4-1: USB disconnect, device number 8 [ 118.896999][ T5270] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 118.966314][ T7000] overlayfs: failed to clone upperpath [ 119.088049][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 119.110897][ T5270] usb 3-1: config 0 has an invalid interface number: 65 but max is 0 [ 119.136947][ T5270] usb 3-1: config 0 has no interface number 0 [ 119.148380][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'. [ 119.149320][ T5270] usb 3-1: New USB device found, idVendor=050d, idProduct=0128, bcdDevice=bc.ae [ 119.186895][ T5270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.205931][ T5270] usb 3-1: Product: syz [ 119.212153][ T5270] usb 3-1: Manufacturer: syz [ 119.232158][ T5270] usb 3-1: SerialNumber: syz [ 119.247782][ T5270] usb 3-1: config 0 descriptor?? [ 119.257992][ T5270] ax88179_178a 3-1:0.65: probe with driver ax88179_178a failed with error -22 [ 119.288670][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.732'. [ 119.308425][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 119.316593][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.336855][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.356823][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.396833][ T9] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice= 0.00 [ 119.405955][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.451116][ T9] usb 4-1: config 0 descriptor?? [ 119.474489][ T9] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 119.492297][ T9] imon 4-1:0.0: unable to initialize intf0, err -90 [ 119.508125][ T9] imon:imon_probe: failed to initialize context! [ 119.527873][ T9] imon 4-1:0.0: unable to register, err -19 [ 119.739054][ T9] usb 4-1: USB disconnect, device number 9 [ 120.057444][ T1807] usb 3-1: USB disconnect, device number 6 [ 120.226560][ T7024] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 120.229354][ T7023] IPVS: stopping master sync thread 7024 ... [ 121.521555][ T29] audit: type=1326 audit(1725493565.192:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7068 comm="syz.1.758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f025157cef9 code=0x0 [ 121.609795][ T7049] netlink: 'syz.2.751': attribute type 4 has an invalid length. [ 121.636893][ T7049] netlink: 17 bytes leftover after parsing attributes in process `syz.2.751'. [ 122.507020][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 122.729485][ T9] usb 1-1: config 0 has no interfaces? [ 122.735158][ T9] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 122.763184][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.784629][ T9] usb 1-1: config 0 descriptor?? [ 123.020978][ T5301] usb 1-1: USB disconnect, device number 9 [ 123.110972][ T5351] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 123.197384][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 123.298793][ T5351] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 123.317788][ T5351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.333681][ T5351] usb 2-1: config 0 descriptor?? [ 123.345651][ T5351] cp210x 2-1:0.0: cp210x converter detected [ 123.398835][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.412572][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.425288][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 123.442584][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 123.453059][ T9] usb 4-1: SerialNumber: syz [ 123.556995][ T5301] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 123.699708][ T9] usb 4-1: 0:2 : does not exist [ 123.715580][ T9] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 123.733283][ T9] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 123.757472][ T5301] usb 3-1: Using ep0 maxpacket: 8 [ 123.766434][ T5351] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 123.773594][ T9] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 123.782223][ T5351] usb 2-1: cp210x converter now attached to ttyUSB0 [ 123.792025][ T5301] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 123.833980][ T5301] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 123.845661][ T9] usb 4-1: USB disconnect, device number 10 [ 123.861731][ T5301] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.882361][ T5301] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.907291][ T5301] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.927153][ T5301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.021717][ T1807] usb 2-1: USB disconnect, device number 5 [ 124.041403][ T1807] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 124.080252][ T1807] cp210x 2-1:0.0: device disconnected [ 124.180743][ T5301] usb 3-1: GET_CAPABILITIES returned 0 [ 124.190208][ T5301] usbtmc 3-1:16.0: can't read capabilities [ 124.338594][ T7155] tipc: Started in network mode [ 124.350977][ T7155] tipc: Node identity 7f000001, cluster identity 4711 [ 124.362463][ T7155] tipc: Enabled bearer , priority 10 [ 124.397369][ T7159] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 124.430471][ T5351] usb 3-1: USB disconnect, device number 7 [ 124.826923][ T5272] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 125.026346][ T5272] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 125.056810][ T5272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.064900][ T5272] usb 5-1: Product: syz [ 125.095401][ T5272] usb 5-1: Manufacturer: syz [ 125.103862][ T5272] usb 5-1: SerialNumber: syz [ 125.119579][ T5272] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 125.164470][ T1807] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 125.182278][ T7194] unknown channel width for channel at 909000KHz? [ 125.207286][ T7194] unknown channel width for channel at 909000KHz? [ 125.228046][ T7194] unknown channel width for channel at 909000KHz? [ 125.480183][ T5270] tipc: Node number set to 2130706433 [ 125.544531][ T7212] netlink: 'syz.0.820': attribute type 21 has an invalid length. [ 125.556898][ T7212] netlink: 'syz.0.820': attribute type 16 has an invalid length. [ 125.564769][ T7212] netlink: 152 bytes leftover after parsing attributes in process `syz.0.820'. [ 125.916923][ T5273] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 126.041850][ T5351] usb 5-1: USB disconnect, device number 6 [ 126.047284][ T7231] bond0: entered promiscuous mode [ 126.047311][ T7231] bond_slave_0: entered promiscuous mode [ 126.047502][ T7231] bond_slave_1: entered promiscuous mode [ 126.108335][ T5273] usb 2-1: Using ep0 maxpacket: 16 [ 126.115607][ T5273] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 126.125268][ T5273] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 126.146008][ T5273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.156273][ T5272] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 126.164013][ T5273] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 126.181080][ T5273] usb 2-1: config 0 has no interface number 0 [ 126.187696][ T5273] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 126.200013][ T5273] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 126.216585][ T5273] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 126.237647][ T5273] usb 2-1: config 0 interface 125 has no altsetting 0 [ 126.247285][ T5225] Bluetooth: hci2: command 0x0405 tx timeout [ 126.261837][ T5273] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 126.277543][ T1807] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 126.284545][ T5273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.293146][ T1807] ath9k_htc: Failed to initialize the device [ 126.299235][ T5273] usb 2-1: Product: syz [ 126.303418][ T5273] usb 2-1: Manufacturer: syz [ 126.312009][ T5351] usb 5-1: ath9k_htc: USB layer deinitialized [ 126.320815][ T5273] usb 2-1: SerialNumber: syz [ 126.329397][ T5273] usb 2-1: config 0 descriptor?? [ 126.356857][ T5272] usb 3-1: Using ep0 maxpacket: 8 [ 126.364490][ T5272] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 126.378380][ T5272] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 126.389198][ T5272] usb 3-1: config 135 has no interface number 0 [ 126.395511][ T5272] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.413343][ T5272] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 126.422607][ T5272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.433780][ T5272] usb 3-1: Product: syz [ 126.439601][ T5272] usb 3-1: Manufacturer: syz [ 126.444376][ T5272] usb 3-1: SerialNumber: syz [ 126.455125][ T5272] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 126.462572][ T5272] usb 3-1: No valid video chain found. [ 126.604445][ T5272] usb 2-1: USB disconnect, device number 6 [ 126.709060][ T5351] usb 3-1: USB disconnect, device number 8 [ 127.371848][ T7272] Bluetooth: hci3: unsupported parameter 64512 [ 127.383608][ T7272] Bluetooth: hci3: invalid length 0, exp 2 for type 14 [ 127.568155][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'. [ 128.212780][ T7317] sctp: [Deprecated]: syz.0.879 (pid 7317) Use of int in max_burst socket option deprecated. [ 128.212780][ T7317] Use struct sctp_assoc_value instead [ 128.246908][ T5301] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 128.445678][ T5301] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 128.467343][ T5301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.496792][ T5301] usb 2-1: Product: syz [ 128.501188][ T5301] usb 2-1: Manufacturer: syz [ 128.505795][ T5301] usb 2-1: SerialNumber: syz [ 128.547117][ T5301] usb 2-1: config 0 descriptor?? [ 128.621669][ T7340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.877'. [ 128.966453][ T5301] usb 2-1: Firmware: major: 0, minor: 102, hardware type: UNKNOWN (102) [ 129.178302][ T5301] usb 2-1: failed to fetch extended address, random address set [ 129.186088][ T5301] usb 2-1: atusb_probe: initialization failed, error = -524 [ 129.223495][ T5301] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 129.247328][ T5301] usb 2-1: USB disconnect, device number 7 [ 129.411101][ T7368] loop0: detected capacity change from 0 to 7 [ 129.439357][ T7368] Dev loop0: unable to read RDB block 7 [ 129.451346][ T7368] loop0: unable to read partition table [ 129.466847][ T7368] loop0: partition table beyond EOD, truncated [ 129.474984][ T7368] loop_reread_partitions: partition scan of loop0 (被xd) failed (rc=-5) [ 130.538014][ T5301] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 130.650733][ T7420] input: syz1 as /devices/virtual/input/input13 [ 130.736819][ T5301] usb 2-1: Using ep0 maxpacket: 8 [ 130.754203][ T5301] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 130.764174][ T5301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.779882][ T5301] usb 2-1: Product: syz [ 130.788248][ T5301] usb 2-1: Manufacturer: syz [ 130.792898][ T5301] usb 2-1: SerialNumber: syz [ 130.832387][ T5301] usb 2-1: config 0 descriptor?? [ 131.068911][ T5301] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 131.114251][ T7438] vlan2: entered promiscuous mode [ 131.224344][ T2991] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.399303][ T2991] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.536937][ T2991] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.710134][ T2991] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.881354][ T5301] usb write operation failed. (-71) [ 131.896597][ T7448] ip6gretap0: entered promiscuous mode [ 131.906071][ T5301] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 131.924942][ T5301] dvbdev: DVB: registering new adapter (Terratec H7) [ 131.933602][ T7448] batadv_slave_1: entered promiscuous mode [ 131.940363][ T4614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.945883][ T5301] usb 2-1: media controller created [ 131.950666][ T4614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.953399][ T5301] usb read operation failed. (-71) [ 131.965492][ T4614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.976493][ T4614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.977510][ T5301] usb write operation failed. (-71) [ 132.000229][ T4614] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 132.010798][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.024992][ T5301] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 132.050203][ T5301] usb 2-1: USB disconnect, device number 8 [ 132.070834][ T2991] bridge_slave_1: left allmulticast mode [ 132.076548][ T2991] bridge_slave_1: left promiscuous mode [ 132.084319][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.129052][ T2991] bridge_slave_0: left allmulticast mode [ 132.142584][ T2991] bridge_slave_0: left promiscuous mode [ 132.162634][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.351951][ T7463] sctp: [Deprecated]: syz.0.930 (pid 7463) Use of int in maxseg socket option. [ 132.351951][ T7463] Use struct sctp_assoc_value instead [ 132.496893][ T54] Bluetooth: hci2: command 0x0405 tx timeout [ 132.638016][ T7474] Bluetooth: MGMT ver 1.23 [ 132.967076][ T5272] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 133.112022][ T2991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.125675][ T2991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.139157][ T2991] bond0 (unregistering): Released all slaves [ 133.187059][ T5272] usb 1-1: Using ep0 maxpacket: 32 [ 133.206910][ T5272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.241083][ T5272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.250929][ T2991] tipc: Disabling bearer [ 133.251585][ T2991] tipc: Left network mode [ 133.272575][ T5272] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 133.283978][ T5272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.294925][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.307377][ T5272] usb 1-1: config 0 descriptor?? [ 133.746254][ T5272] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 133.763741][ T2991] hsr_slave_0: left promiscuous mode [ 133.780146][ T2991] hsr_slave_1: left promiscuous mode [ 133.811681][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.819314][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.840905][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.856870][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.891267][ T2991] veth1_macvtap: left promiscuous mode [ 133.917097][ T2991] veth0_macvtap: left promiscuous mode [ 133.933030][ T2991] veth1_vlan: left promiscuous mode [ 133.939129][ T5272] ft260 0003:0403:6030.0008: chip code: 5e81 abf2 [ 133.950896][ T2991] veth0_vlan: left promiscuous mode [ 134.097449][ T5222] Bluetooth: hci0: command tx timeout [ 134.146917][ T5272] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 134.346118][ T5272] ft260 0003:0403:6030.0008: failed to retrieve status: -71, no wakeup [ 134.364308][ T5272] ft260 0003:0403:6030.0008: failed to retrieve status: -71 [ 134.383767][ T5272] ft260 0003:0403:6030.0008: failed to reset I2C controller: -71 [ 134.423053][ T5272] usb 1-1: USB disconnect, device number 10 [ 135.103567][ T2991] team0 (unregistering): Port device team_slave_1 removed [ 135.229301][ T2991] team0 (unregistering): Port device team_slave_0 removed [ 135.686907][ T5351] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 135.787562][ T7573] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 135.899908][ T5351] usb 2-1: config 0 has no interfaces? [ 135.905536][ T5351] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 135.914923][ T5351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.933318][ T5351] usb 2-1: config 0 descriptor?? [ 135.980342][ T7449] chnl_net:caif_netlink_parms(): no params data found [ 136.177758][ T5222] Bluetooth: hci0: command tx timeout [ 136.336056][ T5222] Bluetooth: hci2: unknown advertising packet type: 0x76 [ 136.336142][ T5222] Bluetooth: hci2: Dropping invalid advertising data [ 136.351431][ T5222] Bluetooth: hci2: Malformed LE Event: 0x02 [ 136.365925][ T5301] usb 2-1: USB disconnect, device number 9 [ 136.398031][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.405399][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.416527][ T7449] bridge_slave_0: entered allmulticast mode [ 136.425835][ T7449] bridge_slave_0: entered promiscuous mode [ 136.434680][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.444246][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.451661][ T7449] bridge_slave_1: entered allmulticast mode [ 136.459153][ T7449] bridge_slave_1: entered promiscuous mode [ 136.576551][ T7449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.598895][ T7599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.610299][ T7449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.740998][ T7449] team0: Port device team_slave_0 added [ 136.767799][ T7605] sctp: [Deprecated]: syz.0.991 (pid 7605) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.767799][ T7605] Use struct sctp_sack_info instead [ 136.772004][ T7449] team0: Port device team_slave_1 added [ 136.849217][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.856359][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.906770][ T7449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.926281][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.978910][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.020737][ T7449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.104686][ T7449] hsr_slave_0: entered promiscuous mode [ 137.121280][ T7449] hsr_slave_1: entered promiscuous mode [ 137.592786][ T7635] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 137.894848][ T7449] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 137.942588][ T7449] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 137.984376][ T7449] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 138.036996][ T7449] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 138.248951][ T5222] Bluetooth: hci0: command tx timeout [ 138.475128][ T7449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.497494][ T7449] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.514051][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.521292][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.611213][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.618428][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.694681][ T29] audit: type=1326 audit(1725493582.362:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.0.1022" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37cfd7cef9 code=0x0 [ 138.788197][ T7449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.403175][ T7449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.967124][ T29] audit: type=1326 audit(1725493583.632:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025157cef9 code=0x7fc00000 [ 140.017955][ T7449] veth0_vlan: entered promiscuous mode [ 140.026876][ T29] audit: type=1326 audit(1725493583.632:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f025157cef9 code=0x7fc00000 [ 140.061987][ T7449] veth1_vlan: entered promiscuous mode [ 140.069488][ T29] audit: type=1326 audit(1725493583.632:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025157cef9 code=0x7fc00000 [ 140.092487][ T29] audit: type=1326 audit(1725493583.632:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025157cef9 code=0x7fc00000 [ 140.153045][ T29] audit: type=1326 audit(1725493583.632:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025157cef9 code=0x7fc00000 [ 140.180280][ T7449] veth0_macvtap: entered promiscuous mode [ 140.194698][ T7449] veth1_macvtap: entered promiscuous mode [ 140.203300][ T29] audit: type=1326 audit(1725493583.632:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025157cef9 code=0x7fc00000 [ 140.234286][ T29] audit: type=1326 audit(1725493583.632:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025157cef9 code=0x7fc00000 [ 140.256212][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.257099][ T29] audit: type=1326 audit(1725493583.632:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025157cef9 code=0x7fc00000 [ 140.276576][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.294723][ T29] audit: type=1326 audit(1725493583.632:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025157cef9 code=0x7fc00000 [ 140.300434][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.342974][ T5222] Bluetooth: hci0: command tx timeout [ 140.348693][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.358636][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.369965][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.379849][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.391492][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.403623][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.415888][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.426419][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.436317][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.447191][ T5272] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 140.465147][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.478113][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.488781][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.498704][ T7449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.509551][ T7449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.521172][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.549504][ T7449] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.565165][ T7449] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.580071][ T7449] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.589268][ T7449] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.653251][ T5272] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.673791][ T5272] usb 1-1: config 0 has no interface number 0 [ 140.697229][ T5272] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 140.708759][ T5272] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 140.710584][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.718013][ T5272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.736465][ T5272] usb 1-1: config 0 descriptor?? [ 140.746834][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.767936][ T5272] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 140.813826][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.822973][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.957041][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 140.987912][ T5272] usb 1-1: USB disconnect, device number 11 [ 141.010719][ T5272] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 141.149243][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.180494][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 141.191136][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 141.200582][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.231545][ T7736] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 141.252372][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 141.500800][ T1115] tipc: Subscription rejected, illegal request [ 141.595327][ T46] usb 2-1: USB disconnect, device number 10 [ 141.730455][ T7766] netlink: 'syz.3.1057': attribute type 4 has an invalid length. [ 141.752102][ T7766] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1057'. [ 141.887107][ T7773] process 'syz.4.1059' launched './file2' with NULL argv: empty string added [ 142.028623][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 142.192031][ T7788] loop0: detected capacity change from 0 to 127 [ 142.220260][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 142.250561][ T9] usb 3-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 142.280474][ T9] usb 3-1: Manufacturer: syz [ 142.299486][ T9] usb 3-1: config 0 descriptor?? [ 142.468952][ T1807] kernel write not supported for file /vcsa1 (pid: 1807 comm: kworker/1:2) [ 142.722683][ T9] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 143.027057][ T1807] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 143.135878][ T9] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 143.154203][ T9] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 143.169132][ T9] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 143.184003][ T9] usb 3-1: USB disconnect, device number 9 [ 143.228810][ T1807] usb 1-1: config index 0 descriptor too short (expected 4114, got 18) [ 143.246680][ T1807] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 143.267152][ T1807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.282586][ T1807] usb 1-1: Product: syz [ 143.289768][ T1807] usb 1-1: Manufacturer: syz [ 143.294484][ T1807] usb 1-1: SerialNumber: syz [ 143.302777][ T1807] usb 1-1: config 0 descriptor?? [ 143.737595][ T7829] netlink: 'syz.4.1079': attribute type 4 has an invalid length. [ 143.745415][ T7829] netlink: 'syz.4.1079': attribute type 5 has an invalid length. [ 143.769444][ T7829] netlink: 'syz.4.1079': attribute type 6 has an invalid length. [ 143.783080][ T7829] netlink: 126052 bytes leftover after parsing attributes in process `syz.4.1079'. [ 143.915988][ T1807] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 143.938380][ T7840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.127744][ T1807] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 144.162127][ T1807] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 144.176221][ T1807] asix 1-1:0.0: probe with driver asix failed with error -71 [ 144.214853][ T1807] usb 1-1: USB disconnect, device number 12 [ 144.518815][ T46] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 144.717419][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 144.733247][ T46] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.745529][ T46] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.764149][ T46] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 144.778415][ T46] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 144.797090][ T46] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.816296][ T46] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.841909][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.862236][ T46] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 145.175518][ T7897] loop0: detected capacity change from 0 to 128 [ 145.415340][ T7906] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 145.854185][ T7928] netlink: 'syz.3.1120': attribute type 11 has an invalid length. [ 145.866874][ T7928] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1120'. [ 146.700953][ T7958] loop4: detected capacity change from 0 to 2 [ 146.830031][ T5301] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 146.944870][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 146.944888][ T29] audit: type=1107 audit(1725493590.612:83): pid=7967 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='_HNz(' [ 147.016919][ T5301] usb 3-1: Using ep0 maxpacket: 8 [ 147.029838][ T5301] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.045301][ T5301] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.056643][ T5301] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.073117][ T5301] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.082286][ T5301] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 147.090383][ T5301] usb 3-1: Manufacturer: syz [ 147.095018][ T5301] usb 3-1: SerialNumber: syz [ 147.259457][ T46] usb 2-1: USB disconnect, device number 11 [ 147.431920][ T7991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1148'. [ 147.497813][ T5272] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 147.687026][ T5272] usb 5-1: Using ep0 maxpacket: 32 [ 147.695210][ T5272] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 147.704540][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.716105][ T5272] usb 5-1: config 0 descriptor?? [ 147.724100][ T5272] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 147.876891][ T46] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 148.077045][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 148.108251][ T46] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 148.123728][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.133259][ T46] usb 2-1: Product: syz [ 148.141292][ T5301] cdc_ncm 3-1:1.0: bind() failure [ 148.142229][ T46] usb 2-1: Manufacturer: syz [ 148.164691][ T5301] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 148.171849][ T46] usb 2-1: SerialNumber: syz [ 148.187258][ T5301] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 148.187878][ T46] usb 2-1: config 0 descriptor?? [ 148.217273][ T5301] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 148.237753][ T5301] usb 3-1: USB disconnect, device number 10 [ 148.240010][ T46] gspca_main: sq930x-2.14.0 probing 2770:930c [ 148.596940][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 148.756614][ T5272] gspca_sunplus: reg_w_riv err -71 [ 148.771313][ T5272] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 148.780819][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 148.800626][ T8] usb 1-1: config 1 has no interface number 0 [ 148.807051][ T5272] usb 5-1: USB disconnect, device number 7 [ 148.822656][ T8] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.847587][ T8] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 148.862424][ T8] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 148.874851][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.894712][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.911999][ T8] usb 1-1: Product: syz [ 148.916222][ T8] usb 1-1: Manufacturer: syz [ 148.936910][ T8] usb 1-1: SerialNumber: syz [ 149.316968][ T46] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 149.567436][ T46] gspca_sq930x: Sensor ov9630 not yet treated [ 149.573642][ T46] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 149.607276][ T46] usb 2-1: USB disconnect, device number 12 [ 149.800634][ T8] cdc_ncm 1-1:1.1: bind() failure [ 149.954300][ T8067] macsec1: entered allmulticast mode [ 149.961911][ T8067] macvlan0: entered allmulticast mode [ 149.972315][ T8067] veth1_vlan: entered allmulticast mode [ 149.990859][ T8067] macvlan0: left allmulticast mode [ 150.005325][ T8067] veth1_vlan: left allmulticast mode [ 150.072959][ T8] usb 1-1: USB disconnect, device number 13 [ 150.907223][ T8104] netlink: 'syz.0.1202': attribute type 2 has an invalid length. [ 150.922227][ T8104] netlink: 'syz.0.1202': attribute type 1 has an invalid length. [ 150.938285][ T8104] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1202'. [ 151.214693][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802aa4b400: rx timeout, send abort [ 151.226091][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802aa4b400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 151.376325][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1216'. [ 151.531899][ T29] audit: type=1400 audit(1725493595.202:84): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=8139 comm="syz.2.1220" name="217" dev="tmpfs" ino=1127 [ 151.766939][ T46] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 151.976855][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 151.985164][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.019059][ T46] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.038817][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 152.062104][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.095341][ T46] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 152.123869][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.155357][ T46] usb 4-1: Product: syz [ 152.164325][ T46] usb 4-1: Manufacturer: syz [ 152.175066][ T46] usb 4-1: SerialNumber: syz [ 152.191278][ T46] usb 4-1: config 0 descriptor?? [ 152.202778][ T46] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 152.411847][ T8183] netlink: 412 bytes leftover after parsing attributes in process `syz.2.1238'. [ 152.559551][ T8189] sctp: [Deprecated]: syz.2.1239 (pid 8189) Use of int in max_burst socket option deprecated. [ 152.559551][ T8189] Use struct sctp_assoc_value instead [ 152.839983][ T8193] dccp_invalid_packet: P.Data Offset(0) too small [ 152.954190][ T8197] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 152.961911][ T8197] macvlan2: entered allmulticast mode [ 152.967705][ T8197] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 152.987437][ T8197] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 153.024158][ T46] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 153.074179][ T5270] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 153.268509][ T5270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.297048][ T5270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.312481][ T8209] loop0: detected capacity change from 0 to 7 [ 153.319312][ T8] usb 4-1: USB disconnect, device number 11 [ 153.327773][ T5232] Dev loop0: unable to read RDB block 7 [ 153.336178][ T5270] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.339563][ T5232] loop0: AHDI p2 [ 153.351765][ T5270] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.358158][ T5232] loop0: partition table partially beyond EOD, truncated [ 153.370033][ T5270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.375823][ T5270] usb 5-1: config 0 descriptor?? [ 153.393092][ T8209] Dev loop0: unable to read RDB block 7 [ 153.401101][ T8209] loop0: AHDI p2 [ 153.404791][ T8209] loop0: partition table partially beyond EOD, truncated [ 153.828989][ T5270] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 153.836449][ T5270] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 153.854132][ T5270] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 153.867267][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 153.882714][ T5270] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 154.015373][ T8253] loop8: detected capacity change from 0 to 7 [ 154.039727][ T8253] Dev loop8: unable to read RDB block 7 [ 154.058408][ T8253] loop8: unable to read partition table [ 154.064298][ T8253] loop8: partition table beyond EOD, truncated [ 154.101598][ T8253] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 154.101598][ T8253] ) failed (rc=-5) [ 154.189354][ T5270] usb 5-1: USB disconnect, device number 8 [ 154.243368][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 155.022592][ T8333] Bluetooth: hci3: unsupported parameter 64512 [ 155.030040][ T8333] Bluetooth: hci3: invalid len left 4, exp >= 104 [ 155.364683][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.381599][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.624691][ T8366] syz_tun: entered promiscuous mode [ 155.644445][ T8366] batadv_slave_0: entered promiscuous mode [ 155.955312][ T8387] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1303'. [ 157.166850][ T46] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 157.361040][ T46] usb 5-1: config 0 has an invalid interface descriptor of length 2, skipping [ 157.377982][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.397899][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.416122][ T46] usb 5-1: New USB device found, idVendor=0403, idProduct=ff00, bcdDevice=5c.04 [ 157.430589][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.477967][ T46] usb 5-1: config 0 descriptor?? [ 157.487437][ T46] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 157.505040][ T46] ftdi_sio ttyUSB0: unknown device type: 0x5c04 [ 157.751404][ T5270] usb 5-1: USB disconnect, device number 9 [ 157.758820][ T5270] ftdi_sio 5-1:0.0: device disconnected [ 157.994336][ T8537] pim6reg: entered allmulticast mode [ 158.055906][ T8537] pim6reg: left allmulticast mode [ 158.497472][ T8557] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1350'. [ 158.887684][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 159.088782][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.101121][ T8] usb 3-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 159.127284][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.170299][ T8] usb 3-1: config 0 descriptor?? [ 159.216971][ T1807] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 159.424164][ T1807] usb 2-1: Using ep0 maxpacket: 8 [ 159.434435][ T1807] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 159.447015][ T1807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.465314][ T1807] usb 2-1: Product: syz [ 159.485593][ T1807] usb 2-1: Manufacturer: syz [ 159.495730][ T1807] usb 2-1: SerialNumber: syz [ 159.508676][ T1807] usb 2-1: config 0 descriptor?? [ 159.646088][ T8] hid-steam 0003:28DE:1205.000A: : USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.2-1/input0 [ 159.725840][ T1807] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 159.748161][ T8] hid-steam 0003:28DE:1205.000A: Steam Controller 'XXXXXXXXXX' connected [ 159.776433][ T8] input: Steam Deck as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1205.000A/input/input16 [ 159.828926][ T8568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.841379][ T8] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1205.000A/input/input17 [ 159.877577][ T8568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.938249][ T8] hid-steam 0003:28DE:1205.000B: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.2-1/input0 [ 159.981935][ T8] usb 3-1: USB disconnect, device number 11 [ 160.087785][ T8] hid-steam 0003:28DE:1205.000A: Steam Controller 'XXXXXXXXXX' disconnected [ 160.498244][ T8646] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1368'. [ 160.528019][ T1807] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 160.547031][ T1807] usb 2-1: USB disconnect, device number 13 [ 160.605669][ T8655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1369'. [ 160.653464][ T29] audit: type=1326 audit(1725493604.322:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8600 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1757cef9 code=0x7fc00000 [ 161.124333][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1376'. [ 161.778614][ T29] audit: type=1326 audit(1725493605.452:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8694 comm="syz.1.1383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f025157cef9 code=0x0 [ 161.886901][ T5301] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 162.087356][ T5301] usb 5-1: Using ep0 maxpacket: 32 [ 162.103678][ T5301] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.125208][ T5301] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 162.146767][ T5301] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.173504][ T5301] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.205119][ T5301] usb 5-1: config 1 interface 1 has no altsetting 0 [ 162.217815][ T5301] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.234465][ T5301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.253998][ T5301] usb 5-1: Product: syz [ 162.266942][ T5301] usb 5-1: Manufacturer: syz [ 162.276809][ T5301] usb 5-1: SerialNumber: syz [ 162.356136][ T8712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1389'. [ 162.365740][ T8712] netlink: 'syz.2.1389': attribute type 7 has an invalid length. [ 162.380720][ T8712] netlink: 'syz.2.1389': attribute type 8 has an invalid length. [ 162.391428][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1389'. [ 162.434899][ T8712] gretap0: entered promiscuous mode [ 162.449395][ T8712] gretap0: left promiscuous mode [ 162.525312][ T5301] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 162.543995][ T5301] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 162.705641][ T5301] usb 5-1: USB disconnect, device number 10 [ 162.896890][ T1807] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 163.104283][ T1807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.135311][ T1807] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.159815][ T1807] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.177679][ T1807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.203492][ T1807] usb 1-1: config 0 descriptor?? [ 163.541079][ T8739] IPVS: You probably need to specify IP address on multicast interface. [ 163.565450][ T8739] IPVS: Error connecting to the multicast addr [ 163.651435][ T1807] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 163.675042][ T1807] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 163.718662][ T1807] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 164.011386][ T5272] usb 1-1: USB disconnect, device number 14 [ 164.229516][ T8874] batadv0: entered promiscuous mode [ 164.235832][ T8874] batadv_slave_0: entered promiscuous mode [ 164.242008][ T8874] batadv_slave_0: left promiscuous mode [ 164.250034][ T8874] batadv0: left promiscuous mode [ 164.346870][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 164.427059][ T1807] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 164.467215][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 164.538571][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 164.548949][ T8] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 164.558476][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.577659][ T8] usb 3-1: Product: syz [ 164.581995][ T8] usb 3-1: Manufacturer: syz [ 164.586607][ T8] usb 3-1: SerialNumber: syz [ 164.604486][ T8] usb 3-1: config 0 descriptor?? [ 164.628307][ T8] gspca_main: sq930x-2.14.0 probing 2770:930c [ 164.635325][ T1807] usb 2-1: config 0 interface 0 has no altsetting 0 [ 164.647701][ T1807] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 164.657897][ T1807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.668914][ T1807] usb 2-1: config 0 descriptor?? [ 164.676336][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 164.697959][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.719457][ T9] usb 5-1: config 0 descriptor?? [ 164.742372][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 165.112795][ T8918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1424'. [ 165.306853][ T5301] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 165.335288][ T8926] rdma_op ffff88806de4c9f0 conn xmit_rdma 0000000000000000 [ 165.497900][ T5301] usb 4-1: config 0 has no interfaces? [ 165.503503][ T5301] usb 4-1: New USB device found, idVendor=0548, idProduct=0069, bcdDevice= a.8d [ 165.514195][ T5301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.535046][ T5301] usb 4-1: config 0 descriptor?? [ 165.553582][ T9] gspca_stv06xx: I2C: Read error writing address: -71 [ 165.563730][ T9] usb 5-1: USB disconnect, device number 11 [ 165.677152][ T8] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 165.683383][ T8] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 165.693507][ T8] usb 3-1: USB disconnect, device number 12 [ 165.724353][ T1807] video4linux radio32: keene_cmd_set failed (-71) [ 165.735069][ T1807] radio-keene 2-1:0.0: V4L2 device registered as radio32 [ 165.748038][ T1807] usb 2-1: USB disconnect, device number 14 [ 165.806939][ T5272] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 165.968030][ T8911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.977061][ T8911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.990315][ T8] usb 4-1: USB disconnect, device number 12 [ 166.001793][ T5272] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.013294][ T5272] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 166.024998][ T5272] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.034419][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.042450][ T5272] usb 1-1: Product: syz [ 166.046599][ T5272] usb 1-1: Manufacturer: syz [ 166.051226][ T5272] usb 1-1: SerialNumber: syz [ 166.201920][ T8975] tap0: tun_chr_ioctl cmd 1074025677 [ 166.211477][ T8975] tap0: linktype set to 1 [ 167.082568][ T5272] cdc_ncm 1-1:1.0: bind() failure [ 167.102542][ T5272] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 167.124339][ T5272] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 167.147975][ T5272] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 167.176203][ T5272] usb 1-1: USB disconnect, device number 15 [ 167.396475][ T9054] netlink: 'syz.1.1446': attribute type 10 has an invalid length. [ 167.410906][ T9054] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1446'. [ 167.499207][ T9054] team0: Port device geneve0 added [ 167.564203][ T9009] netlink: 'syz.4.1443': attribute type 4 has an invalid length. [ 167.577509][ T9009] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1443'. [ 167.925556][ T9077] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 168.013387][ T5222] Bluetooth: hci2: link tx timeout [ 168.019180][ T5222] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.103546][ T9] kernel write not supported for file /input/event2 (pid: 9 comm: kworker/0:1) [ 168.146875][ T1807] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 168.279493][ T9101] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1460'. [ 168.388674][ T1807] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.424740][ T1807] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 168.462295][ T1807] usb 4-1: config 1 has no interface number 0 [ 168.478415][ T1807] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.500969][ T5272] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 168.522505][ T1807] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 168.533496][ T1807] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.549455][ T1807] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.570762][ T1807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.588426][ T1807] usb 4-1: Product: syz [ 168.596253][ T1807] usb 4-1: Manufacturer: syz [ 168.609620][ T1807] usb 4-1: SerialNumber: syz [ 168.718929][ T5272] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.732768][ T5272] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 168.754828][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.785562][ T5272] usb 5-1: config 0 descriptor?? [ 169.070216][ T5351] usb 5-1: USB disconnect, device number 12 [ 169.433945][ T1807] cdc_ncm 4-1:1.1: bind() failure [ 169.682528][ T8] usb 4-1: USB disconnect, device number 13 [ 170.087135][ T54] Bluetooth: hci2: command 0x0405 tx timeout [ 170.104412][ T9186] ALSA: mixer_oss: invalid OSS volume '' [ 170.480227][ T9204] ALSA: mixer_oss: invalid OSS volume 'DIGIT vLXTp0' [ 171.497032][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 171.686958][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 171.702821][ T9] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 171.714074][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.722624][ T9] usb 2-1: Product: syz [ 171.726945][ T9] usb 2-1: Manufacturer: syz [ 171.731559][ T9] usb 2-1: SerialNumber: syz [ 171.751931][ T9] usb 2-1: config 0 descriptor?? [ 171.769812][ T9279] vivid-001: disconnect [ 171.855373][ T9275] vivid-001: reconnect [ 171.889975][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 171.914828][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 171.947835][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 171.973144][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.998797][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.022291][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.031845][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.263000][ T8] usb 4-1: usb_control_msg returned -32 [ 172.276953][ T8] usbtmc 4-1:16.0: can't read capabilities [ 172.402738][ T9] mos7840 2-1:0.0: required endpoints missing [ 172.425818][ T9] usb 2-1: USB disconnect, device number 15 [ 173.086854][ T5351] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 173.143498][ T9352] syz.2.1542[9352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.143656][ T9352] syz.2.1542[9352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.288795][ T5351] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 173.318733][ T5351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 173.333566][ T5351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 173.346231][ T5351] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.371485][ T5351] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.384285][ T5351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.403189][ T5351] usb 5-1: config 0 descriptor?? [ 173.448126][ T1807] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 173.646916][ T1807] usb 3-1: Using ep0 maxpacket: 32 [ 173.659242][ T1807] usb 3-1: config 163 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 173.676265][ T1807] usb 3-1: config 163 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 173.692239][ T1807] usb 3-1: New USB device found, idVendor=0499, idProduct=1001, bcdDevice=f8.14 [ 173.713576][ T1807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.726316][ T1807] usb 3-1: Product: syz [ 173.731145][ T1807] usb 3-1: Manufacturer: syz [ 173.736103][ T1807] usb 3-1: SerialNumber: syz [ 173.754568][ T1807] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.793733][ T1807] snd-usb-audio 3-1:163.0: probe with driver snd-usb-audio failed with error -2 [ 173.848778][ T5351] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 173.876448][ T5351] plantronics 0003:047F:FFFF.000D: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 174.061701][ T9] usb 3-1: USB disconnect, device number 13 [ 174.131410][ T8] usb 5-1: USB disconnect, device number 13 [ 174.411481][ T8] usb 4-1: USB disconnect, device number 14 [ 174.534280][ T9440] bond0: option arp_interval: invalid value (18446744073145618180) [ 174.542481][ T9440] bond0: option arp_interval: allowed values 0 - 2147483647 [ 175.410168][ T9500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1581'. [ 175.422590][ T9500] netlink: 'syz.3.1581': attribute type 7 has an invalid length. [ 175.427229][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 175.446939][ T9500] netlink: 'syz.3.1581': attribute type 8 has an invalid length. [ 175.465256][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1581'. [ 175.503887][ T9500] erspan0: entered promiscuous mode [ 175.512891][ T9500] batadv_slave_1: entered promiscuous mode [ 175.525480][ T9500] gretap0: entered promiscuous mode [ 175.536079][ T9500] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 175.546179][ T9500] Cannot create hsr debugfs directory [ 175.557724][ T9508] loop8: detected capacity change from 0 to 7 [ 175.610651][ T9508] Dev loop8: unable to read RDB block 7 [ 175.617190][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 175.622499][ T9508] loop8: unable to read partition table [ 175.634681][ T9508] loop8: partition table beyond EOD, truncated [ 175.642639][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.656118][ T8] usb 2-1: config 0 has no interface number 0 [ 175.663603][ T9508] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 175.663603][ T9508] ) failed (rc=-5) [ 175.677301][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.692062][ T8] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 175.704223][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.715114][ T8] usb 2-1: config 0 descriptor?? [ 175.754102][ T8] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 176.025753][ T8] usb 2-1: USB disconnect, device number 16 [ 176.035466][ T8] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 176.337534][ T5301] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 176.527260][ T5301] usb 3-1: Using ep0 maxpacket: 32 [ 176.551170][ T5301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 176.585457][ T5301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 176.607829][ T5301] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 176.618504][ T5301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.632727][ T5301] usb 3-1: config 0 descriptor?? [ 176.650280][ T9543] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 176.669311][ T5301] hub 3-1:0.0: USB hub found [ 176.692722][ T9704] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 176.814605][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1606'. [ 176.891933][ T5301] hub 3-1:0.0: 2 ports detected [ 176.908380][ T5301] hub 3-1:0.0: insufficient power available to use all downstream ports [ 176.965208][ C0] ------------[ cut here ]------------ [ 176.970904][ C0] WARNING: CPU: 0 PID: 9715 at net/hsr/hsr_forward.c:602 hsr_fill_frame_info+0x3da/0x570 [ 176.980922][ C0] Modules linked in: [ 176.984891][ C0] CPU: 0 UID: 0 PID: 9715 Comm: syz.3.1607 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 176.995694][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 177.005888][ C0] RIP: 0010:hsr_fill_frame_info+0x3da/0x570 [ 177.011936][ C0] Code: 00 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 b5 ab 01 f6 90 0f 0b 90 e9 09 ff ff ff e8 a7 ab 01 f6 90 <0f> 0b 90 eb 93 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a3 fc ff ff 48 [ 177.031710][ C0] RSP: 0018:ffffc90000007278 EFLAGS: 00010246 [ 177.037914][ C0] RAX: ffffffff8b91e0b9 RBX: 0000000000000000 RCX: ffff888069615a00 [ 177.045992][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.054081][ C0] RBP: ffff888031b9acc0 R08: ffffffff8b91df09 R09: 0000000000000000 [ 177.062204][ C0] R10: ffffc900000073c8 R11: fffff52000000e7b R12: dffffc0000000000 [ 177.070333][ C0] R13: 0000000000005865 R14: ffff888024a01ca0 R15: ffffc900000073c0 [ 177.078435][ C0] FS: 00007f622f0ee6c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 177.087487][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.094153][ C0] CR2: 0000000020010000 CR3: 0000000032e18000 CR4: 00000000003506f0 [ 177.102264][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.110386][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.118489][ C0] Call Trace: [ 177.121825][ C0] [ 177.124722][ C0] ? __warn+0x163/0x4e0 [ 177.129014][ C0] ? hsr_fill_frame_info+0x3da/0x570 [ 177.134365][ C0] ? report_bug+0x2b3/0x500 [ 177.138975][ C0] ? hsr_fill_frame_info+0x3da/0x570 [ 177.144376][ C0] ? handle_bug+0x3e/0x70 [ 177.148821][ C0] ? exc_invalid_op+0x1a/0x50 [ 177.153565][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 177.158726][ C0] ? hsr_fill_frame_info+0x229/0x570 [ 177.164081][ C0] ? hsr_fill_frame_info+0x3d9/0x570 [ 177.169474][ C0] ? hsr_fill_frame_info+0x3da/0x570 [ 177.174884][ C0] ? hsr_fill_frame_info+0x3d9/0x570 [ 177.180277][ C0] hsr_forward_skb+0x847/0x2b60 [ 177.185243][ C0] ? hsr_forward_skb+0xaf/0x2b60 [ 177.190292][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 177.195665][ C0] ? validate_chain+0x11e/0x5900 [ 177.200718][ C0] ? skb_push+0x97/0x100 [ 177.205062][ C0] hsr_handle_frame+0x51b/0x7d0 [ 177.210051][ C0] ? __pfx_hsr_handle_frame+0x10/0x10 [ 177.215538][ C0] __netif_receive_skb_core+0x13e8/0x4570 [ 177.221384][ C0] ? mark_lock+0x9a/0x350 [ 177.225846][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 177.232031][ C0] ? mark_lock+0x9a/0x350 [ 177.236459][ C0] ? __lock_acquire+0x137a/0x2040 [ 177.241682][ C0] __netif_receive_skb_list_core+0x2b7/0x980 [ 177.247768][ C0] ? mark_lock+0x9a/0x350 [ 177.252175][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 177.258863][ C0] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 177.265263][ C0] netif_receive_skb_list_internal+0xa51/0xe30 [ 177.271543][ C0] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 177.278032][ C0] ? dev_gro_receive+0x108f/0x24b0 [ 177.283283][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 177.290189][ C0] ? __pfx_inet_gro_receive+0x10/0x10 [ 177.295700][ C0] napi_complete_done+0x310/0x8e0 [ 177.300874][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 177.306602][ C0] ? rcu_is_watching+0x15/0xb0 [ 177.311471][ C0] ? napi_gro_receive+0x6f3/0xc90 [ 177.316556][ C0] gro_cell_poll+0x19a/0x1c0 [ 177.321242][ C0] __napi_poll+0xcb/0x490 [ 177.325663][ C0] net_rx_action+0x89b/0x1240 [ 177.330462][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 177.335676][ C0] ? sched_clock+0x4a/0x70 [ 177.340212][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.346670][ C0] handle_softirqs+0x2c4/0x970 [ 177.351567][ C0] ? do_softirq+0x11b/0x1e0 [ 177.356132][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 177.361550][ C0] do_softirq+0x11b/0x1e0 [ 177.365968][ C0] [ 177.368992][ C0] [ 177.371962][ C0] ? __pfx_do_softirq+0x10/0x10 [ 177.376922][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 177.382707][ C0] ? rcu_is_watching+0x15/0xb0 [ 177.387556][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 177.392826][ C0] ? napi_gro_frags+0x9c9/0x12a0 [ 177.397843][ C0] ? tun_get_user+0x2a78/0x4720 [ 177.402732][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 177.408577][ C0] ? tun_get_user+0x2a78/0x4720 [ 177.413471][ C0] tun_get_user+0x2d63/0x4720 [ 177.418242][ C0] ? tun_get_user+0x2a78/0x4720 [ 177.423146][ C0] ? __lock_acquire+0x137a/0x2040 [ 177.428287][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 177.433476][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 177.439017][ C0] ? tun_get+0x1e/0x2f0 [ 177.443239][ C0] ? __pfx_lock_release+0x10/0x10 [ 177.448370][ C0] ? tun_get+0x1e/0x2f0 [ 177.452550][ C0] ? tun_get+0x27d/0x2f0 [ 177.456862][ C0] tun_chr_write_iter+0x113/0x1f0 [ 177.461961][ C0] vfs_write+0xa72/0xc90 [ 177.466250][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 177.471879][ C0] ? __pfx_vfs_write+0x10/0x10 [ 177.476817][ C0] ? do_futex+0x33b/0x560 [ 177.481202][ C0] ksys_write+0x1a0/0x2c0 [ 177.485580][ C0] ? __pfx_ksys_write+0x10/0x10 [ 177.490499][ C0] ? do_syscall_64+0x100/0x230 [ 177.495325][ C0] ? do_syscall_64+0xb6/0x230 [ 177.500096][ C0] do_syscall_64+0xf3/0x230 [ 177.504633][ C0] ? clear_bhb_loop+0x35/0x90 [ 177.509415][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.515348][ C0] RIP: 0033:0x7f622e37cef9 [ 177.519832][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.539531][ C0] RSP: 002b:00007f622f0ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.548058][ C0] RAX: ffffffffffffffda RBX: 00007f622e535f80 RCX: 00007f622e37cef9 [ 177.556066][ C0] RDX: 000000000000fdef RSI: 0000000020000440 RDI: 0000000000000003 [ 177.564132][ C0] RBP: 00007f622e3ef01e R08: 0000000000000000 R09: 0000000000000000 [ 177.572232][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.580335][ C0] R13: 0000000000000000 R14: 00007f622e535f80 R15: 00007ffe18dfd148 [ 177.588472][ C0] [ 177.591558][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 177.598853][ C0] CPU: 0 UID: 0 PID: 9715 Comm: syz.3.1607 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 177.609520][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 177.619566][ C0] Call Trace: [ 177.622836][ C0] [ 177.625669][ C0] dump_stack_lvl+0x241/0x360 [ 177.630349][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.635542][ C0] ? __pfx__printk+0x10/0x10 [ 177.640124][ C0] ? _printk+0xd5/0x120 [ 177.644278][ C0] ? vscnprintf+0x5d/0x90 [ 177.648610][ C0] panic+0x349/0x860 [ 177.652499][ C0] ? __warn+0x172/0x4e0 [ 177.656647][ C0] ? __pfx_panic+0x10/0x10 [ 177.661052][ C0] ? show_trace_log_lvl+0x4e6/0x520 [ 177.666264][ C0] __warn+0x346/0x4e0 [ 177.670237][ C0] ? hsr_fill_frame_info+0x3da/0x570 [ 177.675517][ C0] report_bug+0x2b3/0x500 [ 177.679843][ C0] ? hsr_fill_frame_info+0x3da/0x570 [ 177.685209][ C0] handle_bug+0x3e/0x70 [ 177.689358][ C0] exc_invalid_op+0x1a/0x50 [ 177.693859][ C0] asm_exc_invalid_op+0x1a/0x20 [ 177.698967][ C0] RIP: 0010:hsr_fill_frame_info+0x3da/0x570 [ 177.704852][ C0] Code: 00 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 b5 ab 01 f6 90 0f 0b 90 e9 09 ff ff ff e8 a7 ab 01 f6 90 <0f> 0b 90 eb 93 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a3 fc ff ff 48 [ 177.724537][ C0] RSP: 0018:ffffc90000007278 EFLAGS: 00010246 [ 177.730603][ C0] RAX: ffffffff8b91e0b9 RBX: 0000000000000000 RCX: ffff888069615a00 [ 177.738567][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.746532][ C0] RBP: ffff888031b9acc0 R08: ffffffff8b91df09 R09: 0000000000000000 [ 177.754500][ C0] R10: ffffc900000073c8 R11: fffff52000000e7b R12: dffffc0000000000 [ 177.762467][ C0] R13: 0000000000005865 R14: ffff888024a01ca0 R15: ffffc900000073c0 [ 177.770444][ C0] ? hsr_fill_frame_info+0x229/0x570 [ 177.775725][ C0] ? hsr_fill_frame_info+0x3d9/0x570 [ 177.781009][ C0] ? hsr_fill_frame_info+0x3d9/0x570 [ 177.786288][ C0] hsr_forward_skb+0x847/0x2b60 [ 177.791143][ C0] ? hsr_forward_skb+0xaf/0x2b60 [ 177.796071][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 177.801355][ C0] ? validate_chain+0x11e/0x5900 [ 177.806295][ C0] ? skb_push+0x97/0x100 [ 177.810540][ C0] hsr_handle_frame+0x51b/0x7d0 [ 177.815394][ C0] ? __pfx_hsr_handle_frame+0x10/0x10 [ 177.820760][ C0] __netif_receive_skb_core+0x13e8/0x4570 [ 177.826494][ C0] ? mark_lock+0x9a/0x350 [ 177.830831][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 177.836902][ C0] ? mark_lock+0x9a/0x350 [ 177.841238][ C0] ? __lock_acquire+0x137a/0x2040 [ 177.846272][ C0] __netif_receive_skb_list_core+0x2b7/0x980 [ 177.852267][ C0] ? mark_lock+0x9a/0x350 [ 177.856607][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 177.863121][ C0] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 177.869451][ C0] netif_receive_skb_list_internal+0xa51/0xe30 [ 177.875610][ C0] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 177.881935][ C0] ? dev_gro_receive+0x108f/0x24b0 [ 177.887046][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 177.893717][ C0] ? __pfx_inet_gro_receive+0x10/0x10 [ 177.899103][ C0] napi_complete_done+0x310/0x8e0 [ 177.904130][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 177.909679][ C0] ? rcu_is_watching+0x15/0xb0 [ 177.914441][ C0] ? napi_gro_receive+0x6f3/0xc90 [ 177.919466][ C0] gro_cell_poll+0x19a/0x1c0 [ 177.924054][ C0] __napi_poll+0xcb/0x490 [ 177.928391][ C0] net_rx_action+0x89b/0x1240 [ 177.933078][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 177.938184][ C0] ? sched_clock+0x4a/0x70 [ 177.942606][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.948938][ C0] handle_softirqs+0x2c4/0x970 [ 177.953702][ C0] ? do_softirq+0x11b/0x1e0 [ 177.958205][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 177.963494][ C0] do_softirq+0x11b/0x1e0 [ 177.967819][ C0] [ 177.970740][ C0] [ 177.973659][ C0] ? __pfx_do_softirq+0x10/0x10 [ 177.978508][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 177.984140][ C0] ? rcu_is_watching+0x15/0xb0 [ 177.988904][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 177.994099][ C0] ? napi_gro_frags+0x9c9/0x12a0 [ 177.999031][ C0] ? tun_get_user+0x2a78/0x4720 [ 178.003880][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 178.009600][ C0] ? tun_get_user+0x2a78/0x4720 [ 178.014446][ C0] tun_get_user+0x2d63/0x4720 [ 178.019115][ C0] ? tun_get_user+0x2a78/0x4720 [ 178.023967][ C0] ? __lock_acquire+0x137a/0x2040 [ 178.028992][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 178.034020][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 178.039470][ C0] ? tun_get+0x1e/0x2f0 [ 178.043616][ C0] ? __pfx_lock_release+0x10/0x10 [ 178.048649][ C0] ? tun_get+0x1e/0x2f0 [ 178.052797][ C0] ? tun_get+0x27d/0x2f0 [ 178.057033][ C0] tun_chr_write_iter+0x113/0x1f0 [ 178.062053][ C0] vfs_write+0xa72/0xc90 [ 178.066301][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 178.071843][ C0] ? __pfx_vfs_write+0x10/0x10 [ 178.076599][ C0] ? do_futex+0x33b/0x560 [ 178.080939][ C0] ksys_write+0x1a0/0x2c0 [ 178.085267][ C0] ? __pfx_ksys_write+0x10/0x10 [ 178.090115][ C0] ? do_syscall_64+0x100/0x230 [ 178.094873][ C0] ? do_syscall_64+0xb6/0x230 [ 178.099545][ C0] do_syscall_64+0xf3/0x230 [ 178.104039][ C0] ? clear_bhb_loop+0x35/0x90 [ 178.108717][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.114604][ C0] RIP: 0033:0x7f622e37cef9 [ 178.119008][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.138605][ C0] RSP: 002b:00007f622f0ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.147015][ C0] RAX: ffffffffffffffda RBX: 00007f622e535f80 RCX: 00007f622e37cef9 [ 178.154974][ C0] RDX: 000000000000fdef RSI: 0000000020000440 RDI: 0000000000000003 [ 178.162935][ C0] RBP: 00007f622e3ef01e R08: 0000000000000000 R09: 0000000000000000 [ 178.170894][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.178854][ C0] R13: 0000000000000000 R14: 00007f622e535f80 R15: 00007ffe18dfd148 [ 178.186828][ C0] [ 178.190066][ C0] Kernel Offset: disabled [ 178.194379][ C0] Rebooting in 86400 seconds..