last executing test programs: 31.267812726s ago: executing program 1 (id=594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "fb80"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) 29.404071065s ago: executing program 1 (id=600): io_setup(0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000400000006000000", @ANYRES8=r1], 0x66) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r4}, 0x38) 23.016827034s ago: executing program 1 (id=615): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x10000, 0x1, 0x100020b}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) io_uring_setup(0x6fab, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) connect$inet6(r6, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) 18.267923294s ago: executing program 1 (id=630): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0xc, 0x2, "dd92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) 12.831891602s ago: executing program 1 (id=658): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000514210000bd7000000000000800010000000000080003"], 0x20}}, 0x0) syz_usb_connect(0x0, 0x5db, 0x0, 0x0) 10.568959633s ago: executing program 1 (id=664): r0 = syz_open_dev$cec(&(0x7f0000008280), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000082c0)=0xf1) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x4, 0x0, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x4, 0x0, &(0x7f0000002040)) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) r8 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc02864cf, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000180)={r7}) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x0}) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r9, 0x80885659, 0x0) 10.568609863s ago: executing program 2 (id=666): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c00028005000100000000000800074000000000100017000000000000000000"], 0x84}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 9.484065992s ago: executing program 2 (id=670): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) 8.48842813s ago: executing program 2 (id=674): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) 7.456052013s ago: executing program 2 (id=678): kexec_load(0x1, 0x1, &(0x7f0000004f40)=[{0x0, 0x0, 0x101, 0xffffffffffffffff}], 0x0) 6.726628276s ago: executing program 2 (id=680): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) 5.491663955s ago: executing program 3 (id=683): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x200340) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f0000000100)=0xb) 4.626210875s ago: executing program 3 (id=686): mkdir(&(0x7f0000000080)='./file0\x00', 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 2.836190505s ago: executing program 3 (id=689): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="b9", 0x1}], 0x1, 0x0, 0x0, 0xc010}}], 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 2.772602894s ago: executing program 2 (id=690): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) eventfd2(0xa82, 0xc0800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, 0x0) chdir(&(0x7f0000000440)='./bus\x00') open(&(0x7f0000000340)='./file0\x00', 0x1610c3, 0x1df2a23c5997fa5e) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) modify_ldt$write(0x1, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r3, 0x80000001, 0x4) 2.625001173s ago: executing program 3 (id=691): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="020001"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) 1.492035158s ago: executing program 0 (id=695): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000062c0)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000084) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.491817898s ago: executing program 4 (id=696): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180)={0x0}) 1.465057832s ago: executing program 3 (id=697): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000ffffffffffffffe30000000000000000000000000000000200000000000000400000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000300000000004a96d8"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.425293986s ago: executing program 4 (id=698): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) 1.296186773s ago: executing program 3 (id=699): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) 1.293925023s ago: executing program 4 (id=700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 1.276043316s ago: executing program 0 (id=701): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000002400)={[{0x7, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0x9}) 1.218290173s ago: executing program 4 (id=702): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r1 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) 1.035944136s ago: executing program 4 (id=703): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x6, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) 960.073496ms ago: executing program 0 (id=704): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, 0x6a, 0x1, 0x0, 0x0, {0x1, 0x3, 0x2}}, 0x14}}, 0x0) 959.878156ms ago: executing program 0 (id=705): getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xdca}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={r0, 0x8}, &(0x7f0000000140)=0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0xa0, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x13, [{0xb, 0x0, 0x1}, {0xae5, 0x0, 0x1}, {0x9}, {0x1}, {0x6}, {0x8, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x6}, {0x7ff, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x75a}, {0xfff, 0x0, 0x1}, {0x4}, {0xf0001, 0x0, 0x1}, {0x9}, {0xffff}, {}, {0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x9}, {0x2}, {0x3ff}, {0x800, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5}, {0xd24a2, 0x0, 0x1}, {0x572a, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x200}, {0x1a}]}]}, 0xa0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x20000000) close(0xffffffffffffffff) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) 739.122284ms ago: executing program 4 (id=706): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b0001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000005c0)={0x20, 0xb, 0x1, "04"}, 0x0, 0x0}) 148.62683ms ago: executing program 0 (id=707): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x5, 0x1}, {0x2001, 0x3}}}]}}]}]}]}}]}, 0x5c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 0 (id=708): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) write(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. [ 48.309816][ T4171] cgroup: Unknown subsys name 'net' [ 48.449445][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.802393][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.219707][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 51.297253][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 51.356531][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 51.389110][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.397045][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.405375][ T4189] device bridge_slave_0 entered promiscuous mode [ 51.423779][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 51.434171][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.441250][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.450734][ T4189] device bridge_slave_1 entered promiscuous mode [ 51.503251][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.519194][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.528591][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 51.577036][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.584298][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.592199][ T4183] device bridge_slave_0 entered promiscuous mode [ 51.621913][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.629244][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.637332][ T4183] device bridge_slave_1 entered promiscuous mode [ 51.646927][ T4189] team0: Port device team_slave_0 added [ 51.672906][ T4189] team0: Port device team_slave_1 added [ 51.693515][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.701263][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.709293][ T4191] device bridge_slave_0 entered promiscuous mode [ 51.719159][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.744776][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.752164][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.760558][ T4191] device bridge_slave_1 entered promiscuous mode [ 51.769238][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.785640][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.792715][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.801817][ T4182] device bridge_slave_0 entered promiscuous mode [ 51.829997][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.837502][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.864379][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.876852][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.884125][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.891775][ T4182] device bridge_slave_1 entered promiscuous mode [ 51.920548][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.927867][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.954519][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.974007][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.981325][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.990481][ T4184] device bridge_slave_0 entered promiscuous mode [ 52.000411][ T4183] team0: Port device team_slave_0 added [ 52.008897][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.029853][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.037387][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.045976][ T4184] device bridge_slave_1 entered promiscuous mode [ 52.054563][ T4183] team0: Port device team_slave_1 added [ 52.070459][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.090919][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.124098][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.142945][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.155605][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.172447][ T4191] team0: Port device team_slave_0 added [ 52.184640][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.191690][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.219249][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.252687][ T4191] team0: Port device team_slave_1 added [ 52.273188][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.280629][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.307914][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.328746][ T4189] device hsr_slave_0 entered promiscuous mode [ 52.335924][ T4189] device hsr_slave_1 entered promiscuous mode [ 52.350122][ T4182] team0: Port device team_slave_0 added [ 52.362252][ T4184] team0: Port device team_slave_0 added [ 52.373153][ T4184] team0: Port device team_slave_1 added [ 52.380102][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.391255][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.418499][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.431184][ T4182] team0: Port device team_slave_1 added [ 52.456690][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.463866][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.490525][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.519797][ T4183] device hsr_slave_0 entered promiscuous mode [ 52.526774][ T4183] device hsr_slave_1 entered promiscuous mode [ 52.533447][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.541751][ T4183] Cannot create hsr debugfs directory [ 52.569812][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.577001][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.604080][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.620439][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.627608][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.654301][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.675370][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.682421][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.710555][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.741412][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.748872][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.775676][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.837581][ T4182] device hsr_slave_0 entered promiscuous mode [ 52.845190][ T4182] device hsr_slave_1 entered promiscuous mode [ 52.851907][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.860110][ T4182] Cannot create hsr debugfs directory [ 52.868868][ T4191] device hsr_slave_0 entered promiscuous mode [ 52.876463][ T4191] device hsr_slave_1 entered promiscuous mode [ 52.883479][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.891210][ T4191] Cannot create hsr debugfs directory [ 52.945523][ T1345] Bluetooth: hci4: command 0x0409 tx timeout [ 52.959389][ T1345] Bluetooth: hci2: command 0x0409 tx timeout [ 52.965548][ T1345] Bluetooth: hci3: command 0x0409 tx timeout [ 52.971650][ T1345] Bluetooth: hci1: command 0x0409 tx timeout [ 52.979034][ T1345] Bluetooth: hci0: command 0x0409 tx timeout [ 52.987116][ T4184] device hsr_slave_0 entered promiscuous mode [ 52.994673][ T4184] device hsr_slave_1 entered promiscuous mode [ 53.001645][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.009241][ T4184] Cannot create hsr debugfs directory [ 53.273634][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.284445][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.297366][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.307808][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.336047][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.347166][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.362147][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.371789][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.455311][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.494533][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.504477][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.531911][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.555716][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.573180][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.585341][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.601718][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.611123][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.622014][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.630925][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.646456][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.669466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.678415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.687038][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.706669][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.725024][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.738525][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.748514][ T1403] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.755886][ T1403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.765862][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.775458][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.787668][ T1403] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.794920][ T1403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.803287][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.813074][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.821859][ T1403] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.829053][ T1403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.837121][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.845258][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.856543][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.881548][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.909272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.919900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.929350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.939456][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.946582][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.955485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.964656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.974212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.983069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.991784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.001095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.009934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.018671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.027605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.036533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.045275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.063827][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.076509][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.086619][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.107874][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.179351][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.188799][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.199012][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.207814][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.217905][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.244441][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.253372][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.269264][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.282106][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.300284][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.317511][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.329472][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.365811][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.384705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.393069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.410249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.418682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.442874][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.454470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.472831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.482230][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.489562][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.498178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.507274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.516053][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.523374][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.540455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.550838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.571310][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.606969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.616617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.627435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.636546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.646039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.654848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.663366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.672570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.681345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.690782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.699915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.708842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.717369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.726698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.739447][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.756500][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.773344][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.782710][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.802917][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.830132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.845146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.859526][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.866870][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.883542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.892858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.901854][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.909367][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.917741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.927179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.936085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.945850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.957115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.965244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.978072][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.987839][ T4189] device veth0_vlan entered promiscuous mode [ 55.001888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.024140][ T4242] Bluetooth: hci0: command 0x041b tx timeout [ 55.030527][ T4242] Bluetooth: hci1: command 0x041b tx timeout [ 55.032814][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.052747][ T4242] Bluetooth: hci3: command 0x041b tx timeout [ 55.062989][ T4189] device veth1_vlan entered promiscuous mode [ 55.074869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.082901][ T4242] Bluetooth: hci2: command 0x041b tx timeout [ 55.094751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.102794][ T4242] Bluetooth: hci4: command 0x041b tx timeout [ 55.114731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.122642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.132937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.162582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.171501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.187598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.200375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.211873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.221297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.230354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.240259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.249458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.258253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.269675][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.276870][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.298903][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.308629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.317668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.327609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.336736][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.344111][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.352596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.362691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.372029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.379887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.419879][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.430780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.448535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.461348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.472851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.482091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.492445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.501511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.513360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.522317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.532049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.540922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.562388][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.576315][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.589806][ T4189] device veth0_macvtap entered promiscuous mode [ 55.604414][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.613175][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.622747][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.638118][ T4183] device veth0_vlan entered promiscuous mode [ 55.655805][ T4189] device veth1_macvtap entered promiscuous mode [ 55.669245][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.677754][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.688800][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.704160][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.712153][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.735095][ T4183] device veth1_vlan entered promiscuous mode [ 55.747106][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.756172][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.765598][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.784415][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.829861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.840704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.849813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.860170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.869267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.878238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.885894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.897322][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.913226][ T4183] device veth0_macvtap entered promiscuous mode [ 55.923942][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.932163][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.940812][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.951233][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.960088][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.968657][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.977115][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.985924][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.997079][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.006734][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.015608][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.024692][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.038822][ T4183] device veth1_macvtap entered promiscuous mode [ 56.053983][ T4182] device veth0_vlan entered promiscuous mode [ 56.087113][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.095855][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.103525][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.117393][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.135275][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.149052][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.162798][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.176552][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.185848][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.194974][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.205467][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.216594][ T4182] device veth1_vlan entered promiscuous mode [ 56.242415][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.255384][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.267473][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.297071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.306985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.316828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.325909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.335328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.344502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.353147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.362155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.371326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.380259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.392472][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.401844][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.410628][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.420021][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.445450][ T4191] device veth0_vlan entered promiscuous mode [ 56.456812][ T4184] device veth0_vlan entered promiscuous mode [ 56.464329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.472500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.483274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.491769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.499857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.508543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.532543][ T4184] device veth1_vlan entered promiscuous mode [ 56.543073][ T4182] device veth0_macvtap entered promiscuous mode [ 56.580873][ T4191] device veth1_vlan entered promiscuous mode [ 56.614086][ T4182] device veth1_macvtap entered promiscuous mode [ 56.677318][ T4191] device veth0_macvtap entered promiscuous mode [ 56.687777][ T4191] device veth1_macvtap entered promiscuous mode [ 56.705093][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.713521][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.720154][ T4184] device veth0_macvtap entered promiscuous mode [ 56.737184][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.745742][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.754275][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.762919][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.771525][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.779816][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.790217][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.799355][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.809443][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.836670][ T4184] device veth1_macvtap entered promiscuous mode [ 56.849063][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.860526][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.872179][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.886501][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.897836][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.921546][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.933413][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.943999][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.955226][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.965308][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.976285][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.987463][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.997453][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.006235][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.015493][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.025226][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.034084][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.045164][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.056383][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.066482][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.077256][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.089591][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.104341][ T397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.112665][ T397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.117039][ T4242] Bluetooth: hci2: command 0x040f tx timeout [ 57.121040][ T1403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.134956][ T4242] Bluetooth: hci3: command 0x040f tx timeout [ 57.136738][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.154736][ T1403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.159011][ T4242] Bluetooth: hci1: command 0x040f tx timeout [ 57.163196][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.170576][ T4242] Bluetooth: hci0: command 0x040f tx timeout [ 57.182087][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.196246][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.201069][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 57.207592][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.224871][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.236699][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.245893][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.255346][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.265827][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.276055][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.284333][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.293255][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.306143][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.315141][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.324791][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.333650][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.367602][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.385618][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.402372][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.419405][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.430517][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.441326][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.451729][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.462955][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.474871][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.502388][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.512679][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.524981][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.535641][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.545271][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.574588][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.591965][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.604070][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.604087][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.604101][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.604111][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.604123][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.604134][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.604145][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.605471][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.699269][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.703689][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.717313][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.723764][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.745973][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.755243][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.764362][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.773253][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.794067][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.935747][ T397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.959403][ T397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.976720][ T4280] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 57.990572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.011337][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.030994][ T397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.039502][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.061098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.069663][ T397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.097643][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.119517][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.135528][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.147775][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.159296][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.192444][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.239424][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.253991][ T4280] usb 4-1: Using ep0 maxpacket: 32 [ 58.270162][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.290887][ T4300] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5'. [ 58.314684][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.389435][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.403951][ T4280] usb 4-1: config 0 interface 0 has no altsetting 0 [ 58.582951][ T4310] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.635346][ T4280] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 58.671738][ T4280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.700941][ T4280] usb 4-1: Product: syz [ 58.730087][ T4280] usb 4-1: Manufacturer: syz [ 58.765979][ T4280] usb 4-1: SerialNumber: syz [ 58.807739][ T4280] usb 4-1: config 0 descriptor?? [ 59.191849][ T1345] Bluetooth: hci1: command 0x0419 tx timeout [ 59.198630][ T1345] Bluetooth: hci3: command 0x0419 tx timeout [ 59.213426][ T1345] Bluetooth: hci2: command 0x0419 tx timeout [ 59.267798][ T1345] Bluetooth: hci4: command 0x0419 tx timeout [ 59.298837][ T1345] Bluetooth: hci0: command 0x0419 tx timeout [ 61.353751][ T4241] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 61.469786][ T4253] usb 4-1: USB disconnect, device number 2 [ 61.513615][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 61.523895][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 61.756455][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.765779][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 61.774942][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 61.783847][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 61.793608][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 61.913607][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 61.922630][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 61.931808][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 62.053955][ T4241] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 62.066453][ T4241] usb 1-1: config 0 has no interface number 0 [ 62.083200][ T4241] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 62.110691][ T4241] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 62.304105][ T4241] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 62.319203][ T4241] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 62.347111][ T4241] usb 1-1: Product: syz [ 62.351567][ T4241] usb 1-1: SerialNumber: syz [ 62.359282][ T4241] usb 1-1: config 0 descriptor?? [ 62.395395][ T4345] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 62.417700][ T4241] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 62.639463][ T4241] usb 1-1: USB disconnect, device number 2 [ 63.196767][ T26] audit: type=1326 audit(1768444270.429:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb884749 code=0x7fc00000 [ 63.283738][ T26] audit: type=1326 audit(1768444270.429:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0bdb884749 code=0x7fc00000 [ 63.307036][ T26] audit: type=1326 audit(1768444270.429:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb884749 code=0x7fc00000 [ 63.331792][ T26] audit: type=1326 audit(1768444270.429:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb884749 code=0x7fc00000 [ 63.357004][ T26] audit: type=1326 audit(1768444270.439:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb884749 code=0x7fc00000 [ 63.577718][ T26] audit: type=1326 audit(1768444270.439:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb884749 code=0x7fc00000 [ 63.869561][ T26] audit: type=1326 audit(1768444270.439:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb884749 code=0x7fc00000 [ 64.203165][ T26] audit: type=1326 audit(1768444270.439:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb884749 code=0x7fc00000 [ 64.388075][ T26] audit: type=1326 audit(1768444270.439:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb884749 code=0x7fc00000 [ 64.422884][ T26] audit: type=1326 audit(1768444270.439:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb884749 code=0x7fc00000 [ 64.570287][ T4406] batman_adv: batadv0: Adding interface: gretap1 [ 64.577848][ T4406] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.604390][ T4406] batman_adv: batadv0: Interface activated: gretap1 [ 65.873724][ T4241] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 66.077420][ T4421] binder: 4420:4421 ioctl c0306201 200000000040 returned -14 [ 66.279174][ T4425] binder: BINDER_SET_CONTEXT_MGR already set [ 66.309005][ T4425] binder: 4424:4425 ioctl 4018620d 2000000002c0 returned -16 [ 66.473959][ T4241] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 66.483046][ T4241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.957529][ T4241] usb 4-1: Product: syz [ 66.962413][ T4241] usb 4-1: Manufacturer: syz [ 66.968063][ T4241] usb 4-1: SerialNumber: syz [ 67.124748][ T4241] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 68.214491][ T4241] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 68.228667][ T4173] usb 4-1: USB disconnect, device number 3 [ 68.245841][ T4173] usb 4-1: ath9k_htc: USB layer deinitialized [ 70.117631][ T4173] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 70.237552][ T4173] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.254696][ T4483] overlayfs: unrecognized mount option "uuid=null" or missing value [ 70.970737][ T4494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.53'. [ 71.535466][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.557838][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.559441][ T4524] sched: RT throttling activated [ 75.605022][ T4552] mmap: syz.0.69 (4552) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 77.265456][ T3158] cfg80211: failed to load regulatory.db [ 77.802104][ T4583] binder: 4577:4583 ioctl 400c620e 0 returned -14 [ 79.341080][ T4597] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.171691][ T4657] ODEBUG: Out of memory. ODEBUG disabled [ 85.843240][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.98'. [ 88.565616][ T4692] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.817743][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.956978][ T4704] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 89.012393][ T4704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 89.024638][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 89.025082][ T26] audit: type=1326 audit(1768444296.179:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4695 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb884749 code=0x7ffc0000 [ 89.279702][ T26] audit: type=1326 audit(1768444296.179:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4695 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb884749 code=0x7ffc0000 [ 89.443626][ T26] audit: type=1326 audit(1768444296.179:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4695 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb884749 code=0x7ffc0000 [ 89.473666][ T26] audit: type=1326 audit(1768444296.179:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4695 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0bdb884749 code=0x7ffc0000 [ 89.493718][ T4240] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.496235][ T26] audit: type=1326 audit(1768444296.179:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4695 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb884749 code=0x7ffc0000 [ 89.544019][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 89.545547][ T26] audit: type=1326 audit(1768444296.189:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4695 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb884749 code=0x7ffc0000 [ 89.609722][ T26] audit: type=1326 audit(1768444296.189:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4695 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb884749 code=0x7ffc0000 [ 89.633751][ T26] audit: type=1326 audit(1768444296.189:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4695 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f0bdb884749 code=0x7ffc0000 [ 89.667522][ T23] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 89.681837][ T23] usb 5-1: config 1 has no interface number 1 [ 89.901599][ T23] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 89.921106][ T23] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 89.935782][ T4240] usb 1-1: Using ep0 maxpacket: 32 [ 89.946115][ T26] audit: type=1326 audit(1768444296.189:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4695 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb884749 code=0x7ffc0000 [ 89.975862][ T23] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.991662][ T26] audit: type=1326 audit(1768444296.189:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4695 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdb884749 code=0x7ffc0000 [ 90.134058][ T4240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 1024 [ 90.178717][ T4240] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 90.213830][ T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.229292][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.238556][ T23] usb 5-1: Product: syz [ 90.242974][ T23] usb 5-1: Manufacturer: syz [ 90.254315][ T23] usb 5-1: SerialNumber: syz [ 90.353853][ T4240] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 90.473492][ T4240] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 90.500180][ T4240] usb 1-1: Product: syz [ 90.507757][ T4240] usb 1-1: Manufacturer: syz [ 90.512639][ T4240] usb 1-1: SerialNumber: syz [ 90.532069][ T4240] usb 1-1: config 0 descriptor?? [ 90.555129][ T4694] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 90.754237][ T23] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 90.991295][ T4728] capability: warning: `syz.3.117' uses deprecated v2 capabilities in a way that may be insecure [ 91.041411][ T4728] ======================================================= [ 91.041411][ T4728] WARNING: The mand mount option has been deprecated and [ 91.041411][ T4728] and is ignored by this kernel. Remove the mand [ 91.041411][ T4728] option from the mount to silence this warning. [ 91.041411][ T4728] ======================================================= [ 91.132034][ T4728] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 91.404155][ T4735] tmpfs: Unknown parameter 'usrquota' [ 92.202181][ T23] usb 5-1: USB disconnect, device number 2 [ 92.214171][ T7] usb 1-1: USB disconnect, device number 3 [ 92.566052][ T4759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.124'. [ 93.360443][ T4765] xt_connbytes: Forcing CT accounting to be enabled [ 93.367466][ T4765] Cannot find set identified by id 0 to match [ 94.373022][ T4778] process 'syz.0.129' launched '/dev/fd/9' with NULL argv: empty string added [ 95.168971][ T4784] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 97.060384][ T4822] autofs4:pid:4822:autofs_fill_super: called with bogus options [ 97.266372][ T4834] capability: warning: `syz.3.146' uses 32-bit capabilities (legacy support in use) [ 97.338619][ T4240] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.623780][ T4240] usb 5-1: Using ep0 maxpacket: 32 [ 98.996135][ T4849] Zero length message leads to an empty skb [ 99.063887][ T4240] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.123693][ T4240] usb 5-1: config 0 has no interfaces? [ 99.158647][ T4849] device syzkaller0 entered promiscuous mode [ 99.444052][ T4240] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 99.453498][ T4240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.869941][ T4240] usb 5-1: config 0 descriptor?? [ 99.893753][ T4240] usb 5-1: can't set config #0, error -71 [ 99.908694][ T4240] usb 5-1: USB disconnect, device number 3 [ 100.001008][ T4857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 100.495635][ T4864] netlink: 348 bytes leftover after parsing attributes in process `syz.4.155'. [ 104.379689][ T4241] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.283663][ T4241] usb 1-1: Using ep0 maxpacket: 32 [ 105.413794][ T4241] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.653866][ T4241] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 105.678210][ T4241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.716478][ T4241] usb 1-1: Product: syz [ 105.722133][ T4241] usb 1-1: Manufacturer: syz [ 105.733746][ T4241] usb 1-1: SerialNumber: syz [ 105.772809][ T4241] usb 1-1: config 0 descriptor?? [ 105.855365][ T4241] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 107.343688][ T7] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 107.734093][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 107.751196][ T7] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 107.800951][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.830157][ T7] usb 2-1: config 0 descriptor?? [ 107.863997][ T4941] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 108.200476][ T4173] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.203656][ T4241] gspca_sunplus: reg_r err -71 [ 108.213329][ T4241] sunplus: probe of 1-1:0.0 failed with error -71 [ 108.334584][ T4241] usb 1-1: USB disconnect, device number 4 [ 108.347044][ T7] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 108.397758][ T7] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 108.465870][ T7] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 108.476421][ T4173] usb 3-1: Using ep0 maxpacket: 8 [ 108.516383][ T7] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 108.605058][ T7] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 108.675102][ T7] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 108.804181][ T4173] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 108.814914][ T4173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.823147][ T4173] usb 3-1: Product: syz [ 108.827437][ T7] usb 2-1: USB disconnect, device number 2 [ 108.834212][ T4173] usb 3-1: Manufacturer: syz [ 108.838928][ T4173] usb 3-1: SerialNumber: syz [ 108.863527][ T4173] usb 3-1: config 0 descriptor?? [ 108.920699][ T4173] gspca_main: sq905-2.14.0 probing 2770:9120 [ 108.956697][ T4963] fido_id[4963]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 110.233816][ T4173] gspca_sq905: bulk read fail (-22) len 0/4 [ 110.243777][ T4173] sq905: probe of 3-1:0.0 failed with error -5 [ 110.451471][ T4173] usb 3-1: USB disconnect, device number 2 [ 113.043882][ T4227] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.594129][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 114.074198][ T5015] syz.2.204 uses obsolete (PF_INET,SOCK_PACKET) [ 114.113916][ T4227] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.161238][ T4227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.183384][ T4227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 114.200709][ T4227] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 114.215679][ T4227] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.345623][ T4227] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 114.373260][ T4227] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 114.415779][ T4227] usb 4-1: Manufacturer: syz [ 114.451443][ T4227] usb 4-1: config 0 descriptor?? [ 114.853855][ T4227] rc_core: IR keymap rc-hauppauge not found [ 114.860411][ T4227] Registered IR keymap rc-empty [ 114.878496][ T4227] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.967475][ T4227] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 115.061992][ T5034] netlink: 256 bytes leftover after parsing attributes in process `syz.4.209'. [ 115.227380][ T5035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.210'. [ 115.247870][ T4227] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 115.470960][ T4227] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 115.786208][ T4227] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 115.834145][ T4227] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 115.917965][ T4227] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 115.955866][ T4227] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 115.976622][ T5040] netlink: 'syz.1.211': attribute type 12 has an invalid length. [ 115.992252][ T5040] netlink: 'syz.1.211': attribute type 29 has an invalid length. [ 116.000479][ T5040] netlink: 148 bytes leftover after parsing attributes in process `syz.1.211'. [ 116.013719][ T4227] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 116.073758][ T4227] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 116.143767][ T4227] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.166516][ T4227] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.203864][ T4227] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.243721][ T4227] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.315878][ T4227] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 117.360540][ T4227] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 117.407419][ T4227] usb 4-1: USB disconnect, device number 4 [ 117.611980][ T5064] device syzkaller1 entered promiscuous mode [ 120.994204][ T5109] fuse: root generation should be zero [ 123.245778][ T5131] misc userio: Begin command sent, but we're already running [ 124.964378][ T4227] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 125.274048][ T4227] usb 3-1: Using ep0 maxpacket: 32 [ 125.702319][ T5155] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 125.711960][ T5155] ALSA: mixer_oss: invalid index 1374389 [ 125.815421][ T5127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 126.266012][ T5172] [U]  [ 126.269378][ T5172] [U] K{‘ [ 126.272775][ T5172] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖÆ¯¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 126.281801][ T5172] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 126.298872][ T5172] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 126.311426][ T5172] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)޹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 126.348115][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.360589][ T5172] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-ɿ߿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 126.385891][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.392974][ T5172] [U] ܾ˜4B`Ë—HÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 126.406095][ T5172] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 126.420952][ T5172] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`Ʀ\ [ 126.525506][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.532776][ T5172] [U] M¢XÎÂ"Ä{;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆÈ½ [ 126.543531][ T5172] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 126.557907][ T5172] [U] 22½“Æ©ÐÛ©X?0;3U± [ 126.564860][ T5172] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 126.592183][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.599043][ T5172] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 126.609375][ T5172] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 126.618805][ T5172] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 126.625654][ T5172] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 126.638566][ T5172] [U] ¹ EC [ 126.642944][ T5172] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙ߯Ë,ÎLÂ,Õ [ 126.860916][ T5165] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 127.973746][ T4227] usb 3-1: unable to get BOS descriptor or descriptor too short [ 127.981545][ T4227] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 128.173939][ T4227] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 128.219523][ T4227] usb 3-1: can't read configurations, error -71 [ 128.913774][ T4240] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 128.921765][ T4173] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.233807][ T4240] usb 2-1: Using ep0 maxpacket: 32 [ 129.363852][ T4240] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.383910][ T4240] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.395120][ T4240] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 129.433931][ T4173] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=1d.4f [ 129.446200][ T4240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.457704][ T4173] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 129.494100][ T4240] usb 2-1: config 0 descriptor?? [ 129.502345][ T4173] usb 4-1: Manufacturer: syz [ 130.401020][ T4173] peak_usb 4-1:127.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 130.446977][ T4240] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 130.503503][ T4173] peak_usb 4-1:127.0 can0: sending command failure: -22 [ 130.533236][ T4173] peak_usb 4-1:127.0 can0: sending command failure: -22 [ 130.554998][ T4240] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 130.578199][ T4173] peak_usb 4-1:127.0 can0: sending command failure: -22 [ 130.608320][ T4240] ft260 0003:0403:6030.0003: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 130.764405][ T4240] ft260 0003:0403:6030.0003: failed to retrieve chip version [ 130.956002][ T4240] ft260: probe of 0003:0403:6030.0003 failed with error -71 [ 131.038796][ T4240] usb 2-1: USB disconnect, device number 3 [ 131.297642][ T4173] peak_usb: probe of 4-1:127.0 failed with error -22 [ 131.363908][ T4173] usb 4-1: USB disconnect, device number 5 [ 131.719513][ T5242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.270'. [ 132.400276][ T5233] fido_id[5233]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 132.503659][ T4241] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.839839][ T4241] usb 2-1: Using ep0 maxpacket: 16 [ 132.884107][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.949202][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.343802][ T4241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 133.393666][ T4241] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 133.463734][ T4241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 133.474114][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 133.509331][ T4241] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 133.754077][ T4241] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 133.773718][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 133.797956][ T4241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.816719][ T4241] usb 2-1: Product: syz [ 133.833956][ T4241] usb 2-1: Manufacturer: syz [ 133.843858][ T4241] usb 2-1: SerialNumber: syz [ 133.890552][ T4241] usb 2-1: config 0 descriptor?? [ 133.914164][ T5238] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 133.922188][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.943076][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.963639][ C0] port100 2-1:0.0: NFC: The urb has been stopped (status -2) [ 133.972301][ T4241] port100 2-1:0.0: NFC: Could not get supported command types [ 134.008051][ T1108] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.017691][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 134.033899][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.074824][ T1108] usb 3-1: config 0 descriptor?? [ 134.124693][ T1108] hub 3-1:0.0: USB hub found [ 134.149754][ T4227] usb 2-1: USB disconnect, device number 4 [ 134.293680][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 134.333975][ T1108] hub 3-1:0.0: 1 port detected [ 134.480412][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 134.606098][ T7] usb 1-1: config index 0 descriptor too short (expected 255, got 18) [ 134.631907][ T7] usb 1-1: config 4 interface 0 has no altsetting 0 [ 134.962341][ T5276] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 135.009388][ T5276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.282'. [ 135.021138][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 135.021218][ T26] audit: type=1326 audit(1768444342.189:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee55e63749 code=0x7ffc0000 [ 135.221573][ T26] audit: type=1326 audit(1768444342.189:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee55e63749 code=0x7ffc0000 [ 135.486800][ T26] audit: type=1326 audit(1768444342.189:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee55e63749 code=0x7ffc0000 [ 135.509497][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.516080][ T26] audit: type=1326 audit(1768444342.189:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fee55e63749 code=0x7ffc0000 [ 135.545465][ T26] audit: type=1326 audit(1768444342.199:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee55e63749 code=0x7ffc0000 [ 135.577573][ T26] audit: type=1326 audit(1768444342.199:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee55e63749 code=0x7ffc0000 [ 135.603636][ T7] usb 1-1: string descriptor 0 read error: -22 [ 135.610154][ T7] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 135.632664][ T26] audit: type=1326 audit(1768444342.199:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee55e63749 code=0x7ffc0000 [ 135.658575][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.678749][ T26] audit: type=1326 audit(1768444342.199:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fee55e63749 code=0x7ffc0000 [ 135.704072][ T26] audit: type=1326 audit(1768444342.199:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee55e63749 code=0x7ffc0000 [ 135.726819][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.736880][ T7] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 135.754479][ T4242] usb 3-1: USB disconnect, device number 5 [ 135.764087][ T7] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 135.775510][ T1108] hub 3-1:0.0: activate --> -19 [ 135.785061][ T26] audit: type=1326 audit(1768444342.199:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5271 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee55e63749 code=0x7ffc0000 [ 135.810396][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.823878][ T7] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 135.832079][ T7] usb 1-1: media controller created [ 135.851304][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.883644][ T4962] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 135.939507][ T5255] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 136.064398][ T7] zl10353_read_register: readreg error (reg=127, ret==0) [ 136.176783][ T7] usb 1-1: USB disconnect, device number 5 [ 136.314000][ T4962] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.443306][ T4962] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 136.797202][ T4962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.927942][ T4962] usb 2-1: config 0 descriptor?? [ 137.006488][ T5298] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 137.200211][ T4962] usb-storage 2-1:0.0: USB Mass Storage device detected [ 138.023242][ T4962] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 138.606198][ T4962] usb 2-1: USB disconnect, device number 5 [ 139.933754][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 141.003988][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 141.025148][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.127308][ T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 141.279756][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 141.294726][ T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 141.305157][ T7] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 141.320540][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.572613][ T7] usb 2-1: config 0 descriptor?? [ 143.024445][ T7] usb 2-1: can't set config #0, error -71 [ 143.031812][ T7] usb 2-1: USB disconnect, device number 6 [ 143.077389][ T5340] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 143.324124][ T5340] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 143.563778][ T1345] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 143.831253][ T5359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.310'. [ 145.339742][ T1345] usb 4-1: device not accepting address 6, error -71 [ 145.939167][ T5380] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 145.946008][ T5380] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 145.999083][ T5380] vhci_hcd vhci_hcd.0: Device attached [ 146.061172][ T5390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.321'. [ 146.214222][ T5390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.321'. [ 146.941943][ T4227] vhci_hcd: vhci_device speed not set [ 147.023929][ T4227] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 147.878454][ T5381] vhci_hcd: connection reset by peer [ 148.073695][ T4431] vhci_hcd: stop threads [ 148.082205][ T4431] vhci_hcd: release socket [ 148.096540][ T4431] vhci_hcd: disconnect device [ 148.125215][ T5408] tipc: Started in network mode [ 148.144371][ T5408] tipc: Node identity ac14140f, cluster identity 4711 [ 148.419676][ T5408] tipc: New replicast peer: 255.255.255.255 [ 148.490948][ T5408] tipc: Enabled bearer , priority 10 [ 149.293997][ T4241] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 149.637665][ T4241] usb 1-1: Using ep0 maxpacket: 16 [ 149.645628][ T4240] tipc: Node number set to 2886997007 [ 150.063956][ T4241] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 150.092046][ T4241] usb 1-1: config 1 has no interface number 1 [ 150.118693][ T4241] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 150.177712][ T4241] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 150.372646][ T4241] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.574471][ T4241] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.604187][ T4241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.645369][ T4241] usb 1-1: Product: syz [ 151.078638][ T4241] usb 1-1: Manufacturer: syz [ 151.086418][ T4241] usb 1-1: SerialNumber: syz [ 151.633689][ T4240] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 151.694531][ T1108] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 151.883797][ T4240] usb 2-1: Using ep0 maxpacket: 16 [ 152.044278][ T4240] usb 2-1: config 0 has no interfaces? [ 152.051117][ T4240] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 152.144029][ T4227] vhci_hcd: vhci_device speed not set [ 152.152117][ T4240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.346956][ T4240] usb 2-1: config 0 descriptor?? [ 152.617329][ T4173] usb 2-1: USB disconnect, device number 7 [ 152.706953][ T5459] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 152.838059][ T4241] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 153.323322][ T5466] overlayfs: failed to resolve './file2': -2 [ 154.074710][ T4241] usb 1-1: USB disconnect, device number 6 [ 154.105096][ T1108] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 154.115355][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.123490][ T1108] usb 3-1: Product: syz [ 154.133760][ T1108] usb 3-1: Manufacturer: syz [ 154.138582][ T1108] usb 3-1: SerialNumber: syz [ 154.175768][ T1108] usb 3-1: config 0 descriptor?? [ 154.261100][ T1108] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 154.287173][ T5481] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.347'. [ 155.423792][ T1108] gspca_sunplus: reg_r err -110 [ 155.429122][ T1108] sunplus: probe of 3-1:0.0 failed with error -110 [ 155.820510][ T1345] usb 3-1: USB disconnect, device number 6 [ 156.979882][ T1345] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 157.354622][ T1345] usb 3-1: Using ep0 maxpacket: 16 [ 157.484191][ T1345] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 157.499934][ T1345] usb 3-1: config 0 has no interface number 0 [ 157.521308][ T1345] usb 3-1: config 0 interface 237 has no altsetting 0 [ 158.964520][ T5548] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 159.073844][ T1345] usb 3-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 159.193774][ T1345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.208977][ T1345] usb 3-1: Product: syz [ 159.225479][ T1345] usb 3-1: config 0 descriptor?? [ 159.373805][ T1345] usb 3-1: can't set config #0, error -71 [ 159.774661][ T1345] usb 3-1: USB disconnect, device number 7 [ 159.856296][ T5559] device batadv_slave_0 entered promiscuous mode [ 160.867940][ T5568] overlayfs: conflicting lowerdir path [ 161.919154][ T5597] netlink: 'syz.2.379': attribute type 10 has an invalid length. [ 161.927056][ T5597] netlink: 40 bytes leftover after parsing attributes in process `syz.2.379'. [ 161.945723][ T5597] batman_adv: batadv0: Adding interface: virt_wifi0 [ 161.952395][ T5597] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.979116][ T5597] batman_adv: batadv0: Interface activated: virt_wifi0 [ 162.960777][ T5614] dlm: non-version read from control device 122 [ 162.993788][ T1345] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 163.433831][ T1345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.494986][ T1345] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 163.495633][ T5623] misc userio: Invalid payload size [ 163.530080][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 163.530094][ T26] audit: type=1326 audit(1768444370.769:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.3.390" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6bf5c31749 code=0x0 [ 163.563658][ T1345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.606918][ T1345] usb 1-1: config 0 descriptor?? [ 164.105185][ T1345] hid (null): global environment stack underflow [ 164.131593][ T1345] hid-generic 0003:057E:200E.0004: global environment stack underflow [ 164.156376][ T1345] hid-generic 0003:057E:200E.0004: item 0 4 1 11 parsing failed [ 164.187709][ T1345] hid-generic: probe of 0003:057E:200E.0004 failed with error -22 [ 164.307612][ T1345] usb 1-1: USB disconnect, device number 7 [ 164.527837][ T4240] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 164.613742][ T4227] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 164.683828][ T1108] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 165.043771][ T4240] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 165.052947][ T4240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.065944][ T4240] usb 5-1: config 0 descriptor?? [ 165.153665][ T1108] usb 3-1: unable to get BOS descriptor or descriptor too short [ 165.246007][ T1108] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 165.370173][ T1108] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 165.551405][ T1108] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 165.676274][ T1108] usb 3-1: config 129 has no interface number 0 [ 165.684712][ T4240] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 165.693299][ T1108] usb 3-1: config 129 has no interface number 1 [ 165.701581][ T1108] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 165.716458][ T1108] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 165.728483][ T1108] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 165.742258][ T1108] usb 3-1: config 129 interface 135 has no altsetting 0 [ 165.750726][ T1108] usb 3-1: config 129 interface 5 has no altsetting 0 [ 165.883966][ T4227] usb 4-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice=fb.88 [ 165.893290][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.901342][ T4227] usb 4-1: Product: syz [ 165.905960][ T4227] usb 4-1: Manufacturer: syz [ 165.910656][ T4227] usb 4-1: SerialNumber: syz [ 165.918165][ T4227] usb 4-1: config 0 descriptor?? [ 165.923771][ T1345] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 165.932282][ T4242] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 165.993956][ T1108] usb 3-1: string descriptor 0 read error: -22 [ 166.000960][ T1108] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 166.010972][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.043916][ T4240] gp8psk: usb out operation failed. [ 166.050019][ T4240] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 166.058570][ T1108] usb 3-1: MIDIStreaming interface descriptor not found [ 166.062152][ T4240] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 166.082113][ T4240] usb 5-1: USB disconnect, device number 4 [ 166.133873][ T4242] usb 2-1: device descriptor read/64, error -71 [ 166.187639][ T1345] usb 1-1: Using ep0 maxpacket: 16 [ 166.194858][ T4227] kaweth 4-1:0.0: Firmware present in device. [ 166.292050][ T7] usb 3-1: USB disconnect, device number 8 [ 166.305168][ T1345] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 166.316404][ T1345] usb 1-1: config 1 has no interface number 1 [ 166.332513][ T1345] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 166.348577][ T1345] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 166.363003][ T1345] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.383898][ T4227] kaweth 4-1:0.0: Statistics collection: 0 [ 166.389955][ T4227] kaweth 4-1:0.0: Multicast filter limit: 0 [ 166.396765][ T4227] kaweth 4-1:0.0: MTU: 0 [ 166.401414][ T4227] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 166.413894][ T4242] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 166.553891][ T1345] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.569523][ T1345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.581074][ T1345] usb 1-1: Product: syz [ 166.585771][ T1345] usb 1-1: Manufacturer: syz [ 166.591307][ T1345] usb 1-1: SerialNumber: syz [ 166.617261][ T4242] usb 2-1: device descriptor read/64, error -71 [ 166.744063][ T4242] usb usb2-port1: attempt power cycle [ 167.174384][ T4227] kaweth 4-1:0.0: Error setting receive filter [ 167.253064][ T4227] kaweth: probe of 4-1:0.0 failed with error -5 [ 167.444058][ T4227] usb 4-1: USB disconnect, device number 8 [ 167.528155][ T1345] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 169.593886][ T5678] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 169.681862][ T5687] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 169.729205][ T1345] usb 1-1: failed to enable PITCH for EP 0x82 [ 169.787563][ T1345] usb 1-1: USB disconnect, device number 8 [ 170.560312][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.659056][ T5706] overlayfs: failed to verify upper (86/file1, ino=478, err=-116) [ 170.675419][ T5706] overlayfs: failed to verify index dir 'upper' xattr [ 170.683244][ T5706] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 171.663782][ T1345] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 172.413763][ T1345] usb 1-1: Using ep0 maxpacket: 8 [ 173.933738][ T1345] usb 1-1: unable to read config index 0 descriptor/all [ 173.955832][ T1345] usb 1-1: can't read configurations, error -71 [ 175.018540][ T1108] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 175.460275][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 175.733999][ T1108] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 175.749530][ T1108] usb 4-1: config 0 has no interface number 0 [ 175.762473][ T5760] tmpfs: Unknown parameter 'usrquota' [ 175.768864][ T1108] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.804077][ T1108] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 175.903750][ T4227] Bluetooth: hci0: command 0x0406 tx timeout [ 175.913763][ T1345] Bluetooth: hci1: command 0x0406 tx timeout [ 175.918691][ T4227] Bluetooth: hci4: command 0x0406 tx timeout [ 175.919978][ T1345] Bluetooth: hci3: command 0x0406 tx timeout [ 175.984053][ T1108] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 176.014481][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 176.044789][ T1108] usb 4-1: Product: syz [ 176.058143][ T1108] usb 4-1: SerialNumber: syz [ 176.106592][ T1108] usb 4-1: config 0 descriptor?? [ 176.185632][ T1108] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 176.216038][ T1108] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input8 [ 176.410027][ T1108] usb 4-1: USB disconnect, device number 9 [ 176.417059][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.417333][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 176.633462][ T1108] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 177.983399][ T5799] netlink: 32 bytes leftover after parsing attributes in process `syz.2.450'. [ 178.255159][ T5805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'. [ 178.383928][ T4227] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 178.684329][ T4227] usb 4-1: Using ep0 maxpacket: 8 [ 178.859527][ T4227] usb 4-1: unable to get BOS descriptor or descriptor too short [ 178.975166][ T4227] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 179.036440][ T4227] usb 4-1: config 0 has no interface number 0 [ 179.049631][ T4227] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 179.074848][ T4227] usb 4-1: config 0 interface 88 has no altsetting 0 [ 179.264694][ T4227] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 179.276071][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 179.290499][ T4227] usb 4-1: Product: syz [ 179.298433][ T4227] usb 4-1: Manufacturer: syz [ 179.307898][ T4227] usb 4-1: SerialNumber: syz [ 179.346085][ T4227] usb 4-1: config 0 descriptor?? [ 180.337244][ T4227] usb 4-1: USB disconnect, device number 10 [ 181.416304][ T5828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.459'. [ 182.403752][ T4242] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 182.663794][ T4242] usb 3-1: Using ep0 maxpacket: 32 [ 182.953842][ T4242] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 182.981936][ T4242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.013322][ T4242] usb 3-1: Product: syz [ 183.020015][ T4242] usb 3-1: Manufacturer: syz [ 183.033535][ T4242] usb 3-1: SerialNumber: syz [ 183.065516][ T4242] usb 3-1: config 0 descriptor?? [ 183.155201][ T4242] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 185.513767][ T4242] gspca_topro: Sensor cx0342 [ 185.720396][ T4242] usb 3-1: USB disconnect, device number 9 [ 186.762518][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 188.655161][ T5994] futex_wake_op: syz.2.498 tries to shift op by -1; fix this program [ 189.420401][ T26] audit: type=1326 audit(1768444396.659:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaaaef749 code=0x7ffc0000 [ 189.463708][ T4962] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 189.505555][ T26] audit: type=1326 audit(1768444396.659:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcaaaef749 code=0x7ffc0000 [ 189.613657][ T26] audit: type=1326 audit(1768444396.659:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaaaef749 code=0x7ffc0000 [ 189.723840][ T4962] usb 1-1: Using ep0 maxpacket: 32 [ 189.773709][ T1345] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 189.843863][ T4962] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 189.862606][ T4962] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.878812][ T26] audit: type=1326 audit(1768444396.659:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdcaaaef749 code=0x7ffc0000 [ 189.909188][ T4962] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 189.929516][ T4962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.940001][ T26] audit: type=1326 audit(1768444396.659:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaaaef749 code=0x7ffc0000 [ 189.963288][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.976536][ T4962] usb 1-1: config 0 descriptor?? [ 190.015662][ T26] audit: type=1326 audit(1768444396.659:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdcaaaef749 code=0x7ffc0000 [ 190.040378][ T1345] usb 4-1: Using ep0 maxpacket: 8 [ 190.070585][ T26] audit: type=1326 audit(1768444396.659:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaaaef749 code=0x7ffc0000 [ 190.094672][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.136923][ T26] audit: type=1326 audit(1768444396.659:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdcaaaef749 code=0x7ffc0000 [ 190.160801][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.173880][ T1345] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.193119][ T1345] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 190.212042][ T1345] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 190.225314][ T26] audit: type=1326 audit(1768444396.659:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaaaef749 code=0x7ffc0000 [ 190.251037][ T1345] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 190.271349][ T1345] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 190.308000][ T26] audit: type=1326 audit(1768444396.659:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fdcaaaef749 code=0x7ffc0000 [ 190.333214][ T1345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.426006][ T1345] hub 4-1:1.0: bad descriptor, ignoring hub [ 190.443012][ T1345] hub: probe of 4-1:1.0 failed with error -5 [ 190.478182][ T1345] cdc_wdm 4-1:1.0: skipping garbage [ 190.509671][ T1345] cdc_wdm 4-1:1.0: skipping garbage [ 190.566298][ T1345] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 190.606727][ T1345] cdc_wdm 4-1:1.0: Unknown control protocol [ 190.845512][ T4962] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 190.876601][ T4962] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 190.912638][ T4962] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 190.949377][ T4962] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 190.973680][ T4962] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 191.015468][ T4962] corsair-cpro 0003:1B1C:0C10.0005: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 191.459980][ T4962] corsair-cpro: probe of 0003:1B1C:0C10.0005 failed with error -110 [ 191.520429][ T4962] usb 1-1: USB disconnect, device number 11 [ 191.655401][ T6062] netdevsim netdevsim3: Direct firmware load for / [ 191.655401][ T6062] failed with error -2 [ 191.667305][ T6062] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 191.667305][ T6062] [ 192.887660][ T6073] fido_id[6073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 193.838600][ T6091] netlink: 72 bytes leftover after parsing attributes in process `syz.4.513'. [ 194.077459][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 194.236985][ T6096] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.247535][ T6096] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.257480][ T6096] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.266568][ T6096] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.354059][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.520315][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.424276][ T6107] netlink: 'syz.4.517': attribute type 10 has an invalid length. [ 195.432396][ T6107] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 195.445432][ T6107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.468668][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.517'. [ 195.553812][ T4242] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 196.164012][ T4242] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.633710][ T4242] usb 3-1: config 0 has no interface number 0 [ 196.653478][ T4242] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 196.673210][ T4242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.693975][ T4242] usb 3-1: config 0 descriptor?? [ 196.755752][ T4242] usb 3-1: selecting invalid altsetting 1 [ 197.072476][ T4242] dvb_ttusb_budget: ttusb_init_controller: error [ 197.193712][ T4242] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 197.654908][ T4242] DVB: Unable to find symbol cx22700_attach() [ 197.663821][ T4962] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 197.877767][ T4242] DVB: Unable to find symbol tda10046_attach() [ 197.893788][ T4242] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 197.973869][ T6144] Device name cannot be null; rc = [-22] [ 198.607868][ T4242] usb 3-1: USB disconnect, device number 10 [ 198.793877][ T4962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 198.857531][ T4962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.924158][ T4962] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 198.968529][ T4962] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.033760][ T4962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.099783][ T4962] usb 1-1: config 0 descriptor?? [ 199.627019][ T4962] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 199.771395][ T4962] plantronics 0003:047F:FFFF.0006: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 199.983261][ T4962] usb 1-1: USB disconnect, device number 12 [ 200.058890][ T6164] fido_id[6164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 201.391017][ T5969] Bluetooth: hci5: Frame reassembly failed (-84) [ 202.705477][ T4227] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 202.954648][ T4227] usb 2-1: Using ep0 maxpacket: 8 [ 203.084751][ T4227] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 203.101828][ T4227] usb 2-1: config 0 has no interface number 0 [ 203.118878][ T4227] usb 2-1: config 0 interface 191 has no altsetting 0 [ 203.294983][ T4227] usb 2-1: New USB device found, idVendor=0547, idProduct=2235, bcdDevice=a2.64 [ 203.317387][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.339987][ T4227] usb 2-1: Product: syz [ 203.357344][ T4227] usb 2-1: Manufacturer: syz [ 203.366199][ T4227] usb 2-1: SerialNumber: syz [ 203.482607][ T1108] Bluetooth: hci5: command 0x1003 tx timeout [ 203.494578][ T4227] usb 2-1: config 0 descriptor?? [ 203.510879][ T146] Bluetooth: hci5: sending frame failed (-49) [ 203.559992][ T4227] usbtest 2-1:0.191: EZ-USB device [ 203.594737][ T6238] trusted_key: encrypted_key: insufficient parameters specified [ 203.615100][ T4227] usbtest 2-1:0.191: high-speed {control bulk-in bulk-out} tests (+alt) [ 203.825247][ T4227] usb 2-1: USB disconnect, device number 11 [ 205.583710][ T4242] Bluetooth: hci5: command 0x1001 tx timeout [ 205.589983][ T146] Bluetooth: hci5: sending frame failed (-49) [ 207.768786][ T4962] Bluetooth: hci5: command 0x1009 tx timeout [ 208.280764][ T6287] netlink: 60 bytes leftover after parsing attributes in process `syz.4.577'. [ 210.064850][ T6285] comedi comedi3: reset error (fatal) [ 210.653747][ T4240] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 211.603838][ T4240] usb 3-1: too many configurations: 67, using maximum allowed: 8 [ 213.373946][ T4240] usb 3-1: unable to read config index 7 descriptor/start: -71 [ 213.382289][ T4240] usb 3-1: can't read configurations, error -71 [ 214.803670][ T4242] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 215.467959][ T6370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.604'. [ 215.613849][ T4242] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.640026][ T4242] usb 1-1: config 0 has no interface number 0 [ 215.823813][ T4242] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 215.859952][ T4242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.973727][ T4242] usb 1-1: Product: syz [ 215.988299][ T4242] usb 1-1: Manufacturer: syz [ 216.008614][ T4242] usb 1-1: SerialNumber: syz [ 216.801486][ T4242] usb 1-1: config 0 descriptor?? [ 217.157254][ T6396] NILFS (nullb0): couldn't find nilfs on the device [ 217.723894][ T4242] dvb_usb_ec168: probe of 1-1:0.1 failed with error -71 [ 217.753800][ T4242] usb 1-1: USB disconnect, device number 13 [ 220.783542][ T1345] Bluetooth: hci5: command 0xfc11 tx timeout [ 220.788253][ T4190] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 221.283763][ T4280] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 221.543700][ T4280] usb 3-1: Using ep0 maxpacket: 32 [ 221.664068][ T4280] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.690045][ T4280] usb 3-1: config 0 has no interface number 0 [ 221.876167][ T4280] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 221.922251][ T4280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.971112][ T4280] usb 3-1: Product: syz [ 221.985767][ T4280] usb 3-1: Manufacturer: syz [ 222.004070][ T4280] usb 3-1: SerialNumber: syz [ 222.033635][ T4280] usb 3-1: config 0 descriptor?? [ 222.095486][ T4280] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 222.128968][ T4280] usb 3-1: selecting invalid altsetting 1 [ 222.140598][ T4280] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 222.201852][ T6443] infiniband syz1: set active [ 222.206963][ T6443] infiniband syz1: added syz_tun [ 222.254912][ T6443] RDS/IB: syz1: added [ 222.260197][ T6443] smc: adding ib device syz1 with port count 1 [ 222.267129][ T6443] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 222.561767][ T4280] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 222.579283][ T4280] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 222.602203][ T4280] usb 3-1: media controller created [ 222.628457][ T4280] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.823751][ T4280] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 222.854271][ T4280] zl10353_read_register: readreg error (reg=127, ret==-71) [ 222.916673][ T4280] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 223.023444][ T6453] xt_hashlimit: size too large, truncated to 1048576 [ 223.099238][ T4280] usb 3-1: USB disconnect, device number 13 [ 223.343651][ T4242] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 223.667914][ T4280] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 223.755350][ T4242] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 223.783650][ T4242] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.803648][ T4242] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.822182][ T4242] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 223.836472][ T4242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.860298][ T4242] usb 5-1: config 0 descriptor?? [ 223.913684][ T4280] usb 1-1: Using ep0 maxpacket: 8 [ 224.033804][ T4280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 224.045658][ T4280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.055692][ T4280] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.065744][ T4280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 224.077635][ T4280] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 224.088102][ T4280] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 224.097936][ T4280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.117769][ T4280] usb 1-1: config 0 descriptor?? [ 224.144242][ T6458] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 224.346588][ T4242] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0 [ 224.354667][ T4242] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0 [ 224.362728][ T4242] hid-steam 0003:28DE:1102.0007: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 224.379467][ T4242] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 224.387754][ T4242] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 224.401846][ T4242] hid-steam 0003:28DE:1102.0008: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 224.514035][ T4242] hid-steam 0003:28DE:1102.0007: Steam Controller 'XXXXXXXXXX' connected [ 224.544089][ T4242] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0007/input/input11 [ 224.574730][ T4173] usb 1-1: USB disconnect, device number 14 [ 224.910663][ T6471] netlink: 'syz.4.624': attribute type 10 has an invalid length. [ 224.964143][ T6471] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 225.629437][ T6480] udc-core: couldn't find an available UDC or it's busy [ 225.642833][ T6480] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 225.713679][ T1345] usb 5-1: reset full-speed USB device number 5 using dummy_hcd [ 225.947632][ T4227] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 226.001153][ T6495] loop8: detected capacity change from 0 to 8 [ 226.014839][ T4176] Dev loop8: unable to read RDB block 8 [ 226.020999][ T4176] loop8: unable to read partition table [ 226.027961][ T4176] loop8: partition table beyond EOD, truncated [ 226.213554][ T6495] Dev loop8: unable to read RDB block 8 [ 226.335565][ T6495] loop8: unable to read partition table [ 226.428951][ T6495] loop8: partition table beyond EOD, truncated [ 226.627656][ T6495] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 226.664231][ T4242] usb 5-1: USB disconnect, device number 5 [ 226.847225][ T4242] hid-steam 0003:28DE:1102.0007: Steam Controller 'XXXXXXXXXX' disconnected [ 227.073731][ T4227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.086643][ T4227] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 227.109723][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.541261][ T4227] usb 2-1: config 0 descriptor?? [ 227.593846][ T23] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 228.037944][ T6525] tmpfs: Unknown parameter 'usrquota' [ 228.083308][ T4227] pwc: Askey VC010 type 2 USB webcam detected. [ 228.143938][ T23] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 228.173920][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.182652][ T23] usb 3-1: Product: syz [ 228.197550][ T23] usb 3-1: Manufacturer: syz [ 228.203155][ T23] usb 3-1: SerialNumber: syz [ 228.241443][ T6534] loop2: detected capacity change from 0 to 7 [ 228.277861][ T6534] Dev loop2: unable to read RDB block 7 [ 228.288999][ T6534] loop2: unable to read partition table [ 228.296935][ T6534] loop2: partition table beyond EOD, truncated [ 228.320645][ T6534] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 228.389075][ T6528] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 228.400752][ T6528] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 229.075312][ T4227] pwc: recv_control_msg error -32 req 02 val 2b00 [ 229.203759][ T4227] pwc: recv_control_msg error -32 req 02 val 2700 [ 229.304272][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 229.334064][ T4227] pwc: recv_control_msg error -32 req 02 val 2c00 [ 229.464001][ T4227] pwc: recv_control_msg error -32 req 04 val 1000 [ 229.584629][ T4227] pwc: recv_control_msg error -32 req 04 val 1300 [ 229.644133][ T4227] pwc: recv_control_msg error -32 req 04 val 1400 [ 229.683782][ T4227] pwc: recv_control_msg error -32 req 02 val 2000 [ 229.984841][ T4227] pwc: recv_control_msg error -32 req 04 val 1500 [ 230.963807][ T4227] pwc: recv_control_msg error -32 req 02 val 2500 [ 230.987915][ T4227] pwc: recv_control_msg error -71 req 02 val 2400 [ 231.013789][ T4227] pwc: recv_control_msg error -71 req 02 val 2600 [ 231.043846][ T4227] pwc: recv_control_msg error -71 req 02 val 2900 [ 231.056013][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 231.063829][ T4227] pwc: recv_control_msg error -71 req 02 val 2800 [ 231.093728][ T4227] pwc: recv_control_msg error -71 req 04 val 1100 [ 231.119925][ T4227] pwc: recv_control_msg error -71 req 04 val 1200 [ 231.143054][ T4227] pwc: Registered as video103. [ 231.180658][ T4227] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 231.773975][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 232.104993][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 232.283818][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 232.296200][ T4227] usb 2-1: USB disconnect, device number 12 [ 233.250089][ T6594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.666'. [ 234.173712][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 234.273789][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 234.373919][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 234.424171][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 234.501291][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 234.620034][ T6610] netlink: 16 bytes leftover after parsing attributes in process `syz.4.669'. [ 234.661309][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 234.661343][ T26] audit: type=1326 audit(1768444441.899:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaaaef749 code=0x7fc00000 [ 234.925501][ T6610] device erspan0 entered promiscuous mode [ 234.944365][ T6610] device erspan0 left promiscuous mode [ 235.103056][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 235.146082][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 235.282592][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 235.324419][ T26] audit: type=1326 audit(1768444441.939:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdcaaaef749 code=0x7fc00000 [ 235.346722][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.440334][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 235.451877][ T23] lan78xx: probe of 3-1:1.0 failed with error -71 [ 235.462960][ T23] usb 3-1: USB disconnect, device number 14 [ 235.803982][ T26] audit: type=1326 audit(1768444441.949:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaaaef749 code=0x7fc00000 [ 236.396930][ T26] audit: type=1326 audit(1768444441.959:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaaaef749 code=0x7fc00000 [ 237.037066][ T26] audit: type=1326 audit(1768444441.979:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaaaef749 code=0x7fc00000 [ 237.449285][ T26] audit: type=1326 audit(1768444442.009:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaaaef749 code=0x7fc00000 [ 237.626489][ T6646] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 237.798021][ T26] audit: type=1326 audit(1768444442.029:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaaaef749 code=0x7fc00000 [ 237.893528][ T26] audit: type=1326 audit(1768444442.039:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaaaef749 code=0x7fc00000 [ 237.993646][ T26] audit: type=1326 audit(1768444442.049:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaaaef749 code=0x7fc00000 [ 238.161383][ T26] audit: type=1326 audit(1768444442.049:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcaaaef749 code=0x7fc00000 [ 241.595832][ T6678] overlayfs: missing 'lowerdir' [ 242.741983][ T26] kauditd_printk_skb: 847 callbacks suppressed [ 242.741997][ T26] audit: type=1326 audit(1768444449.979:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf5c31749 code=0x7fc00000 [ 243.093739][ T26] audit: type=1326 audit(1768444449.979:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6bf5c31749 code=0x7fc00000 [ 243.117805][ T26] audit: type=1326 audit(1768444449.979:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf5c31749 code=0x7fc00000 [ 243.413887][ T4227] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 243.684801][ T26] audit: type=1326 audit(1768444449.979:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf5c31749 code=0x7fc00000 [ 243.769433][ T26] audit: type=1326 audit(1768444449.979:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf5c31749 code=0x7fc00000 [ 243.792912][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.853810][ T4227] usb 5-1: Using ep0 maxpacket: 32 [ 243.874060][ T26] audit: type=1326 audit(1768444449.979:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf5c31749 code=0x7fc00000 [ 243.924798][ T6726] [ 243.927180][ T6726] ====================================================== [ 243.934555][ T6726] WARNING: possible circular locking dependency detected [ 243.941844][ T6726] syzkaller #0 Not tainted [ 243.946387][ T6726] ------------------------------------------------------ [ 243.953587][ T6726] syz.0.708/6726 is trying to acquire lock: [ 243.959653][ T6726] ffff888075e19120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 243.969327][ T6726] [ 243.969327][ T6726] but task is already holding lock: [ 243.976687][ T6726] ffffffff8d232788 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 243.985596][ T6726] [ 243.985596][ T6726] which lock already depends on the new lock. [ 243.985596][ T6726] [ 243.996506][ T6726] [ 243.996506][ T6726] the existing dependency chain (in reverse order) is: [ 244.005775][ T6726] [ 244.005775][ T6726] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 244.013071][ T6726] __mutex_lock_common+0x1eb/0x2390 [ 244.018884][ T6726] mutex_lock_nested+0x17/0x20 [ 244.024164][ T6726] ax25_setsockopt+0x830/0xa40 [ 244.029439][ T6726] __sys_setsockopt+0x2bf/0x3d0 [ 244.035130][ T6726] __x64_sys_setsockopt+0xb1/0xc0 [ 244.040700][ T6726] do_syscall_64+0x4c/0xa0 [ 244.045887][ T6726] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.052576][ T6726] [ 244.052576][ T6726] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 244.060402][ T6726] __lock_acquire+0x2c33/0x7c60 [ 244.066434][ T6726] lock_acquire+0x197/0x3f0 [ 244.071620][ T6726] lock_sock_nested+0x44/0x100 [ 244.076905][ T6726] ax25_device_event+0x217/0x4f0 [ 244.082540][ T6726] raw_notifier_call_chain+0xcb/0x160 [ 244.088432][ T6726] __dev_notify_flags+0x178/0x2d0 [ 244.094260][ T6726] dev_change_flags+0xe3/0x1a0 [ 244.099787][ T6726] dev_ifsioc+0x147/0xe70 [ 244.105196][ T6726] dev_ioctl+0x55f/0xe50 [ 244.110307][ T6726] sock_do_ioctl+0x222/0x2f0 [ 244.115504][ T6726] sock_ioctl+0x4ed/0x6e0 [ 244.120522][ T6726] __se_sys_ioctl+0xfa/0x170 [ 244.125711][ T6726] do_syscall_64+0x4c/0xa0 [ 244.130900][ T6726] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.137511][ T6726] [ 244.137511][ T6726] other info that might help us debug this: [ 244.137511][ T6726] [ 244.148007][ T6726] Possible unsafe locking scenario: [ 244.148007][ T6726] [ 244.155617][ T6726] CPU0 CPU1 [ 244.161227][ T6726] ---- ---- [ 244.166848][ T6726] lock(rtnl_mutex); [ 244.170820][ T6726] lock(sk_lock-AF_AX25); [ 244.177824][ T6726] lock(rtnl_mutex); [ 244.184854][ T6726] lock(sk_lock-AF_AX25); [ 244.189381][ T6726] [ 244.189381][ T6726] *** DEADLOCK *** [ 244.189381][ T6726] [ 244.197908][ T6726] 1 lock held by syz.0.708/6726: [ 244.203295][ T6726] #0: ffffffff8d232788 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 244.212406][ T6726] [ 244.212406][ T6726] stack backtrace: [ 244.218520][ T6726] CPU: 1 PID: 6726 Comm: syz.0.708 Not tainted syzkaller #0 [ 244.225970][ T6726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.236325][ T6726] Call Trace: [ 244.239604][ T6726] [ 244.242528][ T6726] dump_stack_lvl+0x168/0x230 [ 244.247287][ T6726] ? load_image+0x3b0/0x3b0 [ 244.251781][ T6726] ? show_regs_print_info+0x20/0x20 [ 244.257067][ T6726] ? print_circular_bug+0x12b/0x1a0 [ 244.262527][ T6726] check_noncircular+0x274/0x310 [ 244.267851][ T6726] ? add_chain_block+0x940/0x940 [ 244.272860][ T6726] ? lockdep_lock+0xdc/0x1e0 [ 244.277612][ T6726] ? lockdep_unlock+0x134/0x2d0 [ 244.282625][ T6726] ? mark_lock+0x94/0x320 [ 244.287040][ T6726] __lock_acquire+0x2c33/0x7c60 [ 244.292027][ T6726] ? lock_chain_count+0x20/0x20 [ 244.296996][ T6726] ? mark_lock+0x94/0x320 [ 244.301415][ T6726] ? verify_lock_unused+0x140/0x140 [ 244.306698][ T6726] ? verify_lock_unused+0x140/0x140 [ 244.312087][ T6726] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 244.318153][ T6726] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 244.324395][ T6726] ? __local_bh_enable_ip+0x12a/0x1b0 [ 244.329759][ T6726] ? mark_lock+0x94/0x320 [ 244.334307][ T6726] lock_acquire+0x197/0x3f0 [ 244.338973][ T6726] ? ax25_device_event+0x217/0x4f0 [ 244.344077][ T6726] ? lock_chain_count+0x20/0x20 [ 244.349075][ T6726] ? read_lock_is_recursive+0x10/0x10 [ 244.354762][ T6726] ? __local_bh_enable_ip+0x12a/0x1b0 [ 244.360395][ T6726] ? lockdep_hardirqs_on+0x94/0x140 [ 244.366335][ T6726] ? __local_bh_enable_ip+0x12a/0x1b0 [ 244.371878][ T6726] ? _local_bh_enable+0xa0/0xa0 [ 244.376723][ T6726] lock_sock_nested+0x44/0x100 [ 244.382099][ T6726] ? ax25_device_event+0x217/0x4f0 [ 244.387209][ T6726] ax25_device_event+0x217/0x4f0 [ 244.392523][ T6726] raw_notifier_call_chain+0xcb/0x160 [ 244.398092][ T6726] __dev_notify_flags+0x178/0x2d0 [ 244.403303][ T6726] ? __dev_change_flags+0x6a0/0x6a0 [ 244.409307][ T6726] ? __dev_change_flags+0x4bb/0x6a0 [ 244.414867][ T6726] ? dev_get_flags+0x1c0/0x1c0 [ 244.420071][ T6726] ? dev_ioctl+0x54e/0xe50 [ 244.424478][ T6726] ? dev_ioctl+0x54e/0xe50 [ 244.428967][ T6726] dev_change_flags+0xe3/0x1a0 [ 244.433813][ T6726] dev_ifsioc+0x147/0xe70 [ 244.438153][ T6726] ? dev_ioctl+0xe50/0xe50 [ 244.442555][ T6726] ? apparmor_capable+0x12c/0x190 [ 244.447564][ T6726] ? full_name_hash+0x8e/0xe0 [ 244.452310][ T6726] dev_ioctl+0x55f/0xe50 [ 244.456713][ T6726] ? _copy_from_user+0x111/0x170 [ 244.462120][ T6726] sock_do_ioctl+0x222/0x2f0 [ 244.466876][ T6726] ? sock_show_fdinfo+0xb0/0xb0 [ 244.471799][ T6726] sock_ioctl+0x4ed/0x6e0 [ 244.476199][ T6726] ? sock_poll+0x3f0/0x3f0 [ 244.480776][ T6726] ? bpf_lsm_file_ioctl+0x5/0x10 [ 244.485786][ T6726] ? security_file_ioctl+0x7c/0xa0 [ 244.491063][ T6726] ? sock_poll+0x3f0/0x3f0 [ 244.495577][ T6726] __se_sys_ioctl+0xfa/0x170 [ 244.500157][ T6726] do_syscall_64+0x4c/0xa0 [ 244.504725][ T6726] ? clear_bhb_loop+0x30/0x80 [ 244.509388][ T6726] ? clear_bhb_loop+0x30/0x80 [ 244.514130][ T6726] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.520035][ T6726] RIP: 0033:0x7f90674a3749 [ 244.524556][ T6726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.544697][ T6726] RSP: 002b:00007f906570a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.553355][ T6726] RAX: ffffffffffffffda RBX: 00007f90676f9fa0 RCX: 00007f90674a3749 [ 244.561606][ T6726] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 244.569937][ T6726] RBP: 00007f9067527f91 R08: 0000000000000000 R09: 0000000000000000 [ 244.578687][ T6726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.587030][ T6726] R13: 00007f90676fa038 R14: 00007f90676f9fa0 R15: 00007ffc773371c8 [ 244.595322][ T6726] [ 244.598573][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.618184][ T26] audit: type=1326 audit(1768444449.979:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf5c31749 code=0x7fc00000 [ 244.641252][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.653746][ T4227] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.708252][ T26] audit: type=1326 audit(1768444449.979:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf5c31749 code=0x7fc00000 [ 244.740679][ T26] audit: type=1326 audit(1768444449.979:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf5c31749 code=0x7fc00000 [ 244.773792][ T26] audit: type=1326 audit(1768444449.979:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf5c31749 code=0x7fc00000 [ 244.873744][ T4227] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 244.887397][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.895803][ T4227] usb 5-1: Product: syz [ 244.900162][ T4227] usb 5-1: Manufacturer: syz [ 244.909359][ T4227] usb 5-1: SerialNumber: syz [ 244.966240][ T4227] usb 5-1: config 0 descriptor?? [ 244.982116][ T6726] ================================================================== [ 244.990813][ T6726] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 244.998633][ T6726] Write of size 4 at addr ffff888025ccc7b8 by task syz.0.708/6726 [ 245.006539][ T6726] [ 245.008971][ T6726] CPU: 1 PID: 6726 Comm: syz.0.708 Not tainted syzkaller #0 [ 245.016417][ T6726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 245.026550][ T6726] Call Trace: [ 245.029826][ T6726] [ 245.032745][ T6726] dump_stack_lvl+0x168/0x230 [ 245.037492][ T6726] ? show_regs_print_info+0x20/0x20 [ 245.042784][ T6726] ? load_image+0x3b0/0x3b0 [ 245.047461][ T6726] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 245.052987][ T6726] print_address_description+0x60/0x2d0 [ 245.058533][ T6726] ? ax25_dev_device_down+0x35e/0x520 [ 245.064580][ T6726] kasan_report+0xdf/0x130 [ 245.069274][ T6726] ? ax25_dev_device_down+0x35e/0x520 [ 245.074737][ T6726] ? kfree+0xef/0x2a0 [ 245.078732][ T6726] kasan_check_range+0x27b/0x290 [ 245.083825][ T6726] ax25_dev_device_down+0x35e/0x520 [ 245.089225][ T6726] ax25_device_event+0x4b4/0x4f0 [ 245.094531][ T6726] raw_notifier_call_chain+0xcb/0x160 [ 245.100051][ T6726] __dev_notify_flags+0x178/0x2d0 [ 245.105457][ T6726] ? __dev_change_flags+0x6a0/0x6a0 [ 245.110759][ T6726] ? __dev_change_flags+0x4bb/0x6a0 [ 245.116192][ T6726] ? dev_get_flags+0x1c0/0x1c0 [ 245.121081][ T6726] ? dev_ioctl+0x54e/0xe50 [ 245.125502][ T6726] ? dev_ioctl+0x54e/0xe50 [ 245.130105][ T6726] dev_change_flags+0xe3/0x1a0 [ 245.134893][ T6726] dev_ifsioc+0x147/0xe70 [ 245.139408][ T6726] ? dev_ioctl+0xe50/0xe50 [ 245.143832][ T6726] ? apparmor_capable+0x12c/0x190 [ 245.148951][ T6726] ? full_name_hash+0x8e/0xe0 [ 245.153647][ T6726] dev_ioctl+0x55f/0xe50 [ 245.158162][ T6726] ? _copy_from_user+0x111/0x170 [ 245.163190][ T6726] sock_do_ioctl+0x222/0x2f0 [ 245.167793][ T6726] ? sock_show_fdinfo+0xb0/0xb0 [ 245.172657][ T6726] sock_ioctl+0x4ed/0x6e0 [ 245.177207][ T6726] ? sock_poll+0x3f0/0x3f0 [ 245.181636][ T6726] ? bpf_lsm_file_ioctl+0x5/0x10 [ 245.186663][ T6726] ? security_file_ioctl+0x7c/0xa0 [ 245.191796][ T6726] ? sock_poll+0x3f0/0x3f0 [ 245.196292][ T6726] __se_sys_ioctl+0xfa/0x170 [ 245.201080][ T6726] do_syscall_64+0x4c/0xa0 [ 245.205504][ T6726] ? clear_bhb_loop+0x30/0x80 [ 245.210201][ T6726] ? clear_bhb_loop+0x30/0x80 [ 245.215358][ T6726] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.221375][ T6726] RIP: 0033:0x7f90674a3749 [ 245.226081][ T6726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.246150][ T6726] RSP: 002b:00007f906570a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.254651][ T6726] RAX: ffffffffffffffda RBX: 00007f90676f9fa0 RCX: 00007f90674a3749 [ 245.262710][ T6726] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 245.271126][ T6726] RBP: 00007f9067527f91 R08: 0000000000000000 R09: 0000000000000000 [ 245.279098][ T6726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.287361][ T6726] R13: 00007f90676fa038 R14: 00007f90676f9fa0 R15: 00007ffc773371c8 [ 245.295621][ T6726] [ 245.298626][ T6726] [ 245.300937][ T6726] Allocated by task 6646: [ 245.305359][ T6726] __kasan_kmalloc+0xb5/0xf0 [ 245.309939][ T6726] ax25_dev_device_up+0x50/0x580 [ 245.315070][ T6726] ax25_device_event+0x483/0x4f0 [ 245.320441][ T6726] raw_notifier_call_chain+0xcb/0x160 [ 245.325809][ T6726] __dev_notify_flags+0x178/0x2d0 [ 245.330938][ T6726] dev_change_flags+0xe3/0x1a0 [ 245.335744][ T6726] dev_ifsioc+0x147/0xe70 [ 245.340177][ T6726] dev_ioctl+0x55f/0xe50 [ 245.344410][ T6726] sock_do_ioctl+0x222/0x2f0 [ 245.349438][ T6726] sock_ioctl+0x4ed/0x6e0 [ 245.353938][ T6726] __se_sys_ioctl+0xfa/0x170 [ 245.358613][ T6726] do_syscall_64+0x4c/0xa0 [ 245.363021][ T6726] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.369166][ T6726] [ 245.371496][ T6726] Freed by task 6726: [ 245.375542][ T6726] kasan_set_track+0x4b/0x70 [ 245.380124][ T6726] kasan_set_free_info+0x1f/0x40 [ 245.385336][ T6726] ____kasan_slab_free+0xd5/0x110 [ 245.390552][ T6726] slab_free_freelist_hook+0xea/0x170 [ 245.396011][ T6726] kfree+0xef/0x2a0 [ 245.400214][ T6726] ax25_dev_device_down+0x1c0/0x520 [ 245.405600][ T6726] ax25_device_event+0x4b4/0x4f0 [ 245.410816][ T6726] raw_notifier_call_chain+0xcb/0x160 [ 245.416269][ T6726] __dev_notify_flags+0x178/0x2d0 [ 245.421374][ T6726] dev_change_flags+0xe3/0x1a0 [ 245.426129][ T6726] dev_ifsioc+0x147/0xe70 [ 245.430710][ T6726] dev_ioctl+0x55f/0xe50 [ 245.435022][ T6726] sock_do_ioctl+0x222/0x2f0 [ 245.439685][ T6726] sock_ioctl+0x4ed/0x6e0 [ 245.444007][ T6726] __se_sys_ioctl+0xfa/0x170 [ 245.448591][ T6726] do_syscall_64+0x4c/0xa0 [ 245.453021][ T6726] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.459250][ T6726] [ 245.461553][ T6726] Last potentially related work creation: [ 245.467246][ T6726] kasan_save_stack+0x35/0x60 [ 245.472010][ T6726] kasan_record_aux_stack+0xb8/0x100 [ 245.477405][ T6726] insert_work+0x54/0x3d0 [ 245.481732][ T6726] __queue_work+0x9c5/0xd50 [ 245.486219][ T6726] queue_work_on+0x11d/0x1d0 [ 245.490884][ T6726] netdevice_event+0x803/0x900 [ 245.496196][ T6726] raw_notifier_call_chain+0xcb/0x160 [ 245.501792][ T6726] __dev_notify_flags+0x178/0x2d0 [ 245.506918][ T6726] dev_change_flags+0xe3/0x1a0 [ 245.511678][ T6726] do_setlink+0xc01/0x3980 [ 245.516081][ T6726] rtnl_newlink+0x1419/0x17d0 [ 245.520796][ T6726] rtnetlink_rcv_msg+0x7ff/0xe90 [ 245.525747][ T6726] netlink_rcv_skb+0x1e0/0x430 [ 245.530605][ T6726] netlink_unicast+0x774/0x920 [ 245.535529][ T6726] netlink_sendmsg+0x8ab/0xbc0 [ 245.540370][ T6726] __sys_sendto+0x423/0x580 [ 245.544960][ T6726] __x64_sys_sendto+0xda/0xf0 [ 245.549659][ T6726] do_syscall_64+0x4c/0xa0 [ 245.554061][ T6726] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.560051][ T6726] [ 245.562362][ T6726] Second to last potentially related work creation: [ 245.569034][ T6726] kasan_save_stack+0x35/0x60 [ 245.573712][ T6726] kasan_record_aux_stack+0xb8/0x100 [ 245.578988][ T6726] insert_work+0x54/0x3d0 [ 245.583305][ T6726] __queue_work+0x9c5/0xd50 [ 245.587905][ T6726] queue_work_on+0x11d/0x1d0 [ 245.592480][ T6726] call_usermodehelper_exec+0x26b/0x460 [ 245.598190][ T6726] kobject_uevent_env+0x681/0x890 [ 245.603403][ T6726] device_add+0x91c/0xfb0 [ 245.607821][ T6726] __video_register_device+0x38e1/0x4670 [ 245.613540][ T6726] vivid_create_devnodes+0x203a/0x2cd0 [ 245.619074][ T6726] vivid_probe+0x50a1/0x6950 [ 245.623655][ T6726] platform_probe+0x137/0x1c0 [ 245.628417][ T6726] really_probe+0x284/0xc80 [ 245.632901][ T6726] __driver_probe_device+0x18c/0x330 [ 245.638172][ T6726] driver_probe_device+0x4f/0x420 [ 245.643388][ T6726] __driver_attach+0x46b/0x670 [ 245.648419][ T6726] bus_for_each_dev+0x175/0x1e0 [ 245.653381][ T6726] bus_add_driver+0x30a/0x5a0 [ 245.658135][ T6726] driver_register+0x32d/0x430 [ 245.663000][ T6726] vivid_init+0x39/0x70 [ 245.667330][ T6726] do_one_initcall+0x1ee/0x680 [ 245.672085][ T6726] do_initcall_level+0x137/0x1f0 [ 245.677103][ T6726] do_initcalls+0x4b/0x90 [ 245.681519][ T6726] kernel_init_freeable+0x3ce/0x560 [ 245.687122][ T6726] kernel_init+0x19/0x1b0 [ 245.691449][ T6726] ret_from_fork+0x1f/0x30 [ 245.696118][ T6726] [ 245.698518][ T6726] The buggy address belongs to the object at ffff888025ccc700 [ 245.698518][ T6726] which belongs to the cache kmalloc-192 of size 192 [ 245.713039][ T6726] The buggy address is located 184 bytes inside of [ 245.713039][ T6726] 192-byte region [ffff888025ccc700, ffff888025ccc7c0) [ 245.726884][ T6726] The buggy address belongs to the page: [ 245.732754][ T6726] page:ffffea0000973300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25ccc [ 245.743847][ T6726] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 245.751565][ T6726] raw: 00fff00000000200 ffffea00017f1780 0000000400000004 ffff888016841a00 [ 245.760659][ T6726] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 245.769518][ T6726] page dumped because: kasan: bad access detected [ 245.776116][ T6726] page_owner tracks the page as allocated [ 245.782006][ T6726] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 9998360039, free_ts 0 [ 245.798211][ T6726] get_page_from_freelist+0x1b77/0x1c60 [ 245.804312][ T6726] __alloc_pages+0x1e1/0x470 [ 245.809171][ T6726] alloc_page_interleave+0x24/0x1e0 [ 245.814713][ T6726] new_slab+0xc0/0x4b0 [ 245.819073][ T6726] ___slab_alloc+0x81e/0xdf0 [ 245.823937][ T6726] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 245.829426][ T6726] call_usermodehelper_setup+0x8a/0x260 [ 245.835246][ T6726] kobject_uevent_env+0x65e/0x890 [ 245.840772][ T6726] device_add+0x91c/0xfb0 [ 245.845115][ T6726] cdev_device_add+0x1a4/0x340 [ 245.850163][ T6726] cec_register_adapter+0x29c/0x5f0 [ 245.855645][ T6726] vivid_create_devnodes+0xa7c/0x2cd0 [ 245.861316][ T6726] vivid_probe+0x50a1/0x6950 [ 245.865909][ T6726] platform_probe+0x137/0x1c0 [ 245.870755][ T6726] really_probe+0x284/0xc80 [ 245.875620][ T6726] __driver_probe_device+0x18c/0x330 [ 245.881171][ T6726] page_owner free stack trace missing [ 245.886630][ T6726] [ 245.889031][ T6726] Memory state around the buggy address: [ 245.894959][ T6726] ffff888025ccc680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 245.903088][ T6726] ffff888025ccc700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.911307][ T6726] >ffff888025ccc780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 245.919350][ T6726] ^ [ 245.925321][ T6726] ffff888025ccc800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.933472][ T6726] ffff888025ccc880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 245.941774][ T6726] ================================================================== [ 245.950165][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.958277][ T6726] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 245.965492][ T6726] CPU: 1 PID: 6726 Comm: syz.0.708 Tainted: G B syzkaller #0 [ 245.974467][ T6726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 245.984955][ T6726] Call Trace: [ 245.988222][ T6726] [ 245.991144][ T6726] dump_stack_lvl+0x168/0x230 [ 245.996016][ T6726] ? show_regs_print_info+0x20/0x20 [ 246.001480][ T6726] ? load_image+0x3b0/0x3b0 [ 246.006073][ T6726] panic+0x2c9/0x7f0 [ 246.010186][ T6726] ? bpf_jit_dump+0xd0/0xd0 [ 246.014775][ T6726] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 246.021063][ T6726] ? _raw_spin_unlock+0x40/0x40 [ 246.026070][ T6726] ? ax25_dev_device_down+0x35e/0x520 [ 246.031470][ T6726] check_panic_on_warn+0x80/0xa0 [ 246.036492][ T6726] ? ax25_dev_device_down+0x35e/0x520 [ 246.041945][ T6726] end_report+0x6d/0xf0 [ 246.046194][ T6726] kasan_report+0x102/0x130 [ 246.050682][ T6726] ? ax25_dev_device_down+0x35e/0x520 [ 246.056131][ T6726] ? kfree+0xef/0x2a0 [ 246.060189][ T6726] kasan_check_range+0x27b/0x290 [ 246.065210][ T6726] ax25_dev_device_down+0x35e/0x520 [ 246.070594][ T6726] ax25_device_event+0x4b4/0x4f0 [ 246.075617][ T6726] raw_notifier_call_chain+0xcb/0x160 [ 246.081153][ T6726] __dev_notify_flags+0x178/0x2d0 [ 246.086174][ T6726] ? __dev_change_flags+0x6a0/0x6a0 [ 246.091537][ T6726] ? __dev_change_flags+0x4bb/0x6a0 [ 246.096763][ T6726] ? dev_get_flags+0x1c0/0x1c0 [ 246.101790][ T6726] ? dev_ioctl+0x54e/0xe50 [ 246.106216][ T6726] ? dev_ioctl+0x54e/0xe50 [ 246.110707][ T6726] dev_change_flags+0xe3/0x1a0 [ 246.115465][ T6726] dev_ifsioc+0x147/0xe70 [ 246.120046][ T6726] ? dev_ioctl+0xe50/0xe50 [ 246.124627][ T6726] ? apparmor_capable+0x12c/0x190 [ 246.129648][ T6726] ? full_name_hash+0x8e/0xe0 [ 246.134337][ T6726] dev_ioctl+0x55f/0xe50 [ 246.138655][ T6726] ? _copy_from_user+0x111/0x170 [ 246.143680][ T6726] sock_do_ioctl+0x222/0x2f0 [ 246.148294][ T6726] ? sock_show_fdinfo+0xb0/0xb0 [ 246.153260][ T6726] sock_ioctl+0x4ed/0x6e0 [ 246.157693][ T6726] ? sock_poll+0x3f0/0x3f0 [ 246.162215][ T6726] ? bpf_lsm_file_ioctl+0x5/0x10 [ 246.167425][ T6726] ? security_file_ioctl+0x7c/0xa0 [ 246.172809][ T6726] ? sock_poll+0x3f0/0x3f0 [ 246.177393][ T6726] __se_sys_ioctl+0xfa/0x170 [ 246.182359][ T6726] do_syscall_64+0x4c/0xa0 [ 246.186900][ T6726] ? clear_bhb_loop+0x30/0x80 [ 246.191664][ T6726] ? clear_bhb_loop+0x30/0x80 [ 246.196798][ T6726] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.203180][ T6726] RIP: 0033:0x7f90674a3749 [ 246.207870][ T6726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.227981][ T6726] RSP: 002b:00007f906570a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.236587][ T6726] RAX: ffffffffffffffda RBX: 00007f90676f9fa0 RCX: 00007f90674a3749 [ 246.245092][ T6726] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 246.253230][ T6726] RBP: 00007f9067527f91 R08: 0000000000000000 R09: 0000000000000000 [ 246.261475][ T6726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.269632][ T6726] R13: 00007f90676fa038 R14: 00007f90676f9fa0 R15: 00007ffc773371c8 [ 246.277695][ T6726] [ 246.281211][ T6726] Kernel Offset: disabled [ 246.285621][ T6726] Rebooting in 86400 seconds..