last executing test programs: 1m35.996080747s ago: executing program 1 (id=84): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 1m35.014147852s ago: executing program 1 (id=95): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 1m34.460692987s ago: executing program 1 (id=98): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 1m34.048354534s ago: executing program 1 (id=100): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 1m33.042066614s ago: executing program 1 (id=110): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r2}, 0x10) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) 1m32.636957877s ago: executing program 1 (id=114): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000240)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES64=r1], 0x0) 1m32.243631966s ago: executing program 32 (id=114): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000240)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES64=r1], 0x0) 3.842000072s ago: executing program 4 (id=850): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0x9, "b2938f8d"}, @local=@item_012={0x1, 0x2, 0x2, "90"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, "000f0200"}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}, @global]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/95) 2.886542455s ago: executing program 2 (id=859): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) readv(r1, &(0x7f0000000180)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1) 2.711897144s ago: executing program 2 (id=861): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'erspan0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x2, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f030e1233e6140006001e0089e9aaa911d7c2290f0089061327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe94f, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.520524694s ago: executing program 0 (id=862): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r0 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000994bd740f60d5600b5a0000000010902"], 0x0) write$usbip_server(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000300000001"], 0x35) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.464380232s ago: executing program 2 (id=864): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statfs(&(0x7f0000000100)='./file0\x00', 0x0) 2.358422645s ago: executing program 5 (id=865): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0xc0010001, 0x0, 0x40}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 2.213026336s ago: executing program 3 (id=866): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x8578, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 2.181427144s ago: executing program 2 (id=867): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$tipc(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="fb3f0ab3d8", 0x5dc}, {0x0}], 0x2, 0x0, 0x0, 0x40}, 0x20008081) 2.075425828s ago: executing program 5 (id=868): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8917, &(0x7f0000000b00)={'sit0\x00', {0x2, 0x0, @empty=0xac14140b}}) 1.974280087s ago: executing program 3 (id=869): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4000001, &(0x7f00000001c0)={0xa, 0x4e21, 0xac6c, @mcast2, 0x4}, 0x1c) 1.955078981s ago: executing program 5 (id=870): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r0, 0x32d7, 0x0, 0x46, 0x0, 0x0) 1.954762544s ago: executing program 2 (id=871): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000340)=ANY=[], 0x30) write(r0, &(0x7f0000000200)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0x1fc0) 1.832956111s ago: executing program 4 (id=872): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) 1.682321679s ago: executing program 4 (id=873): r0 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 1.66437424s ago: executing program 3 (id=874): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r2}, 0x8) 1.544868296s ago: executing program 2 (id=875): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1.410862834s ago: executing program 3 (id=876): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x4e25, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d3, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.40706054s ago: executing program 5 (id=886): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) 1.188976474s ago: executing program 5 (id=877): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$kcm(0x2, 0x3, 0x84) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 1.166555435s ago: executing program 3 (id=878): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={r2, 0x8, 0x30, 0x0, 0xd}, &(0x7f0000000040)=0x18) 914.48535ms ago: executing program 0 (id=879): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0xffffff1f}, 0x20}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000050005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e"], 0x44}}, 0x0) 701.024876ms ago: executing program 0 (id=880): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000100)={0x2}, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) 592.789056ms ago: executing program 0 (id=881): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x5, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x80000003, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 545.952661ms ago: executing program 4 (id=882): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0) 408.256884ms ago: executing program 4 (id=883): socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0x40, 0x101) io_setup(0x6, &(0x7f00000007c0)=0x0) io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0xa, r0, 0x0, 0x0, 0x7fe, 0x0, 0x0, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, r0, 0x0, 0x0, 0x1, 0x0, 0x3, r0}]) 272.991648ms ago: executing program 0 (id=884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 124.448776ms ago: executing program 0 (id=885): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x0, "08000000000000000000000000000000000000b582000000010000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000080)={"000c00816800df00"}) 123.919175ms ago: executing program 3 (id=887): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000640)={0x4c, r1, 0xe096044a3fc9e6f1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x24a}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfd}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "10c1"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x3]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x44) 123.275775ms ago: executing program 4 (id=888): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)={0x2c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x9}]]}, 0x2c}}, 0x0) 0s ago: executing program 5 (id=889): chdir(&(0x7f0000000540)='./cgroup\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/179, 0xb3) lseek(r0, 0x7fffffff, 0x2) getdents64(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 90.199918][ T5847] team0: Port device team_slave_0 added [ 90.239700][ T5848] team0: Port device team_slave_0 added [ 90.259393][ T5847] team0: Port device team_slave_1 added [ 90.285482][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.293100][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.320230][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.334527][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.346223][ T5848] team0: Port device team_slave_1 added [ 90.369452][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.376778][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.403029][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.424814][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.478109][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.486162][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.512661][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.528138][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.536035][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.566110][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.624813][ T5846] hsr_slave_0: entered promiscuous mode [ 90.632228][ T5846] hsr_slave_1: entered promiscuous mode [ 90.677323][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.684739][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.715755][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.728974][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.737177][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.765270][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.805690][ T5845] team0: Port device team_slave_0 added [ 90.816901][ T5845] team0: Port device team_slave_1 added [ 90.879188][ T5843] hsr_slave_0: entered promiscuous mode [ 90.885929][ T5843] hsr_slave_1: entered promiscuous mode [ 90.892382][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.900131][ T5843] Cannot create hsr debugfs directory [ 90.943910][ T5847] hsr_slave_0: entered promiscuous mode [ 90.950732][ T5847] hsr_slave_1: entered promiscuous mode [ 90.958623][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.966324][ T5847] Cannot create hsr debugfs directory [ 91.006305][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.013373][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.040411][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.096506][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.103955][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.138517][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.298254][ T5848] hsr_slave_0: entered promiscuous mode [ 91.309454][ T5848] hsr_slave_1: entered promiscuous mode [ 91.317263][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.325229][ T5848] Cannot create hsr debugfs directory [ 91.481566][ T5845] hsr_slave_0: entered promiscuous mode [ 91.489383][ T5845] hsr_slave_1: entered promiscuous mode [ 91.496021][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.503745][ T5845] Cannot create hsr debugfs directory [ 91.860695][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.878686][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.910406][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.938272][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.945306][ T5839] Bluetooth: hci4: command tx timeout [ 92.032986][ T5839] Bluetooth: hci0: command tx timeout [ 92.038478][ T5839] Bluetooth: hci1: command tx timeout [ 92.053202][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.067158][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.078698][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.101776][ T5828] Bluetooth: hci2: command tx timeout [ 92.107373][ T5839] Bluetooth: hci3: command tx timeout [ 92.110048][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.188362][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.204968][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.222731][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.235857][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.346014][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.379455][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.387146][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.407452][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.445994][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.525707][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.567816][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.595786][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.603235][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.620335][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.658723][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.665936][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.678903][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.706335][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.766192][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.857861][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.875854][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.923532][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.930850][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.968043][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.004572][ T3065] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.011879][ T3065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.032056][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.039229][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.058215][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.079270][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.086678][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.126261][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.178377][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.204115][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.238744][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.246483][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.284263][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.315860][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.323077][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.377465][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.384701][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.413591][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.421109][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.520029][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.552939][ T5846] veth0_vlan: entered promiscuous mode [ 93.578890][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.601058][ T5846] veth1_vlan: entered promiscuous mode [ 93.620713][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.689452][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.750777][ T5846] veth0_macvtap: entered promiscuous mode [ 93.767194][ T5846] veth1_macvtap: entered promiscuous mode [ 93.817170][ T5847] veth0_vlan: entered promiscuous mode [ 93.844689][ T5843] veth0_vlan: entered promiscuous mode [ 93.861951][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.887778][ T5848] veth0_vlan: entered promiscuous mode [ 93.902137][ T5843] veth1_vlan: entered promiscuous mode [ 93.920066][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.935504][ T5847] veth1_vlan: entered promiscuous mode [ 93.948219][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.976193][ T5848] veth1_vlan: entered promiscuous mode [ 93.989587][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.000410][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.010937][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.020905][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.029962][ T5839] Bluetooth: hci4: command tx timeout [ 94.102954][ T5828] Bluetooth: hci0: command tx timeout [ 94.108491][ T5839] Bluetooth: hci1: command tx timeout [ 94.136162][ T5843] veth0_macvtap: entered promiscuous mode [ 94.150627][ T5847] veth0_macvtap: entered promiscuous mode [ 94.159688][ T5848] veth0_macvtap: entered promiscuous mode [ 94.182114][ T5839] Bluetooth: hci3: command tx timeout [ 94.187807][ T5839] Bluetooth: hci2: command tx timeout [ 94.200244][ T5847] veth1_macvtap: entered promiscuous mode [ 94.214923][ T5848] veth1_macvtap: entered promiscuous mode [ 94.225996][ T5843] veth1_macvtap: entered promiscuous mode [ 94.281909][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.293131][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.307468][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.349326][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.360639][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.375003][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.406508][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.415968][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.427384][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.434798][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.434837][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.434854][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.436590][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.478889][ T5845] veth0_vlan: entered promiscuous mode [ 94.492893][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.504769][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.515960][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.524935][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.538433][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.549806][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.559742][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.570324][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.583053][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.594803][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.605906][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.616199][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.627224][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.637300][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.647852][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.659102][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.697316][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.706522][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.715623][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.725870][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.737712][ T5845] veth1_vlan: entered promiscuous mode [ 94.748930][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.760313][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.770327][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.780850][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.790885][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.801574][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.813150][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.881992][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.892185][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.900924][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.911855][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.937611][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.946578][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.009987][ T5845] veth0_macvtap: entered promiscuous mode [ 95.063211][ T5845] veth1_macvtap: entered promiscuous mode [ 95.081829][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.090430][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.129777][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.146928][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.147914][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.174292][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.185216][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.203803][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.214334][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.226020][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.236850][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.249149][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.259921][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.271138][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.299421][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.320547][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.333538][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.344804][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.356689][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.368441][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.378915][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.399615][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.413002][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.489631][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.503997][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.512468][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.515922][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.524481][ T5893] loop6: detected capacity change from 0 to 524287999 [ 95.533831][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.550778][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.608195][ T5014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.616857][ T5014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.740397][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.762404][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.854735][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.892818][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.072992][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.085520][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.118693][ T5839] Bluetooth: hci4: command tx timeout [ 96.181464][ T5839] Bluetooth: hci1: command tx timeout [ 96.187542][ T5828] Bluetooth: hci0: command tx timeout [ 96.241551][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.250286][ T3065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.261645][ T5839] Bluetooth: hci2: command tx timeout [ 96.267138][ T5839] Bluetooth: hci3: command tx timeout [ 96.307241][ T3065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.464075][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.511568][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 96.552518][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.616517][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 96.645303][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.673054][ T9] usb 5-1: Product: syz [ 96.688072][ T9] usb 5-1: Manufacturer: syz [ 96.700921][ T9] usb 5-1: SerialNumber: syz [ 96.952983][ T5909] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.033112][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 97.246832][ T1206] cfg80211: failed to load regulatory.db [ 97.286554][ T5833] usb 5-1: USB disconnect, device number 2 [ 97.327529][ T5833] usblp0: removed [ 97.581705][ T5926] process 'syz.0.12' launched './file2' with NULL argv: empty string added [ 98.039914][ T5937] binder: 5936:5937 ioctl c0306201 80000540 returned -22 [ 98.641102][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.771976][ T976] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.795245][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.818766][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 98.880431][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.922943][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 98.941054][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.959549][ T10] usb 3-1: Product: syz [ 98.978147][ T10] usb 3-1: Manufacturer: syz [ 98.991564][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 98.999345][ T10] usb 3-1: SerialNumber: syz [ 99.000618][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.044963][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.098865][ T976] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 99.140927][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.190849][ T976] usb 5-1: config 0 descriptor?? [ 99.254974][ T5959] loop8: detected capacity change from 0 to 8 [ 99.283883][ T5959] Dev loop8: unable to read RDB block 8 [ 99.299059][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 99.318619][ T5959] loop8: unable to read partition table [ 99.335080][ T5959] loop8: partition table beyond EOD, truncated [ 99.342778][ T5961] syz.1.25 uses obsolete (PF_INET,SOCK_PACKET) [ 99.359518][ T5959] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 99.573587][ T10] usb 3-1: USB disconnect, device number 2 [ 99.596887][ T10] usblp0: removed [ 99.864542][ T976] ft260 0003:0403:6030.0001: failed to retrieve chip version [ 99.897961][ T976] ft260 0003:0403:6030.0001: probe with driver ft260 failed with error -71 [ 99.922499][ T976] usb 5-1: USB disconnect, device number 3 [ 100.941351][ T5890] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.011207][ T5833] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.103132][ T5890] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.119465][ T5890] usb 2-1: config 0 has no interface number 0 [ 101.129012][ T5890] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.159882][ T5890] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.170705][ T5890] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 101.186228][ T5833] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.197004][ T5833] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.206781][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.217408][ T5833] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.237241][ T5890] usb 2-1: config 0 descriptor?? [ 101.242627][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.257769][ T5833] usb 3-1: SerialNumber: syz [ 101.486452][ T5833] usb 3-1: 0:2 : does not exist [ 101.565706][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.44'. [ 101.582298][ T5833] usb 3-1: USB disconnect, device number 3 [ 101.685558][ T5896] udevd[5896]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.758032][ T5890] prodikeys 0003:041E:2801.0002: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1 [ 101.817672][ T5890] hid_prodikeys: hid-prodikeys: failed to find output report [ 101.817672][ T5890] [ 101.858364][ T30] audit: type=1326 audit(1747082527.426:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6010 comm="syz.3.46" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x0 [ 101.943125][ T5890] usb 2-1: USB disconnect, device number 2 [ 102.115886][ T6009] fido_id[6009]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 102.244802][ T6024] input: syz0 as /devices/virtual/input/input5 [ 102.591260][ T6034] netlink: 24 bytes leftover after parsing attributes in process `syz.4.56'. [ 102.741488][ T5943] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.902352][ T5943] usb 3-1: Using ep0 maxpacket: 32 [ 102.931490][ T5943] usb 3-1: config 0 has an invalid interface number: 108 but max is 0 [ 102.946745][ T5943] usb 3-1: config 0 has no interface number 0 [ 102.968378][ T5943] usb 3-1: config 0 interface 108 has no altsetting 0 [ 103.003810][ T5943] usb 3-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd [ 103.041071][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.049151][ T5943] usb 3-1: Product: syz [ 103.101542][ T5943] usb 3-1: Manufacturer: syz [ 103.106228][ T5943] usb 3-1: SerialNumber: syz [ 103.140048][ T5943] usb 3-1: config 0 descriptor?? [ 103.175130][ T5943] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 103.380330][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 103.415307][ T6031] netlink: 100 bytes leftover after parsing attributes in process `syz.2.54'. [ 103.424681][ T6031] netlink: 100 bytes leftover after parsing attributes in process `syz.2.54'. [ 103.531613][ T5890] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.615502][ T5943] usb 3-1: USB disconnect, device number 4 [ 103.696295][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 103.718789][ T5890] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 103.759479][ T5890] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 103.780566][ T5890] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.791605][ T5890] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.814868][ T5890] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 103.824903][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.051811][ T5890] usb 5-1: GET_CAPABILITIES returned 0 [ 104.057397][ T5890] usbtmc 5-1:16.0: can't read capabilities [ 104.141162][ T976] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.293916][ T5890] usb 5-1: USB disconnect, device number 4 [ 104.324204][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.337128][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.352240][ T976] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 104.362203][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.396887][ T976] usb 1-1: config 0 descriptor?? [ 105.239991][ T976] hid-led 0003:27B8:01ED.0003: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 105.296003][ T976] hid-led 0003:27B8:01ED.0003: ThingM blink(1) initialized [ 105.402413][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.80'. [ 105.494543][ T5890] usb 1-1: USB disconnect, device number 2 [ 106.121386][ T6106] loop6: detected capacity change from 0 to 63 [ 106.214249][ T6106] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.258243][ T6106] Buffer I/O error on dev loop6, logical block 1, async page read [ 106.280616][ T6106] Buffer I/O error on dev loop6, logical block 2, async page read [ 106.302050][ T6106] Buffer I/O error on dev loop6, logical block 3, async page read [ 106.316305][ T5896] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.325703][ T5896] Buffer I/O error on dev loop6, logical block 1, async page read [ 106.338760][ T5896] Buffer I/O error on dev loop6, logical block 2, async page read [ 106.348074][ T5896] Buffer I/O error on dev loop6, logical block 3, async page read [ 106.367145][ T6106] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.382637][ T6106] Buffer I/O error on dev loop6, logical block 1, async page read [ 106.518576][ T1206] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 106.703353][ T1206] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.724470][ T1206] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.747463][ T1206] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.800062][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.834229][ T1206] usb 4-1: Product: syz [ 106.838609][ T1206] usb 4-1: Manufacturer: syz [ 106.853317][ T1206] usb 4-1: SerialNumber: syz [ 106.921163][ T5890] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.012174][ T6126] netlink: 'syz.1.95': attribute type 1 has an invalid length. [ 107.095725][ T1206] usb 4-1: 0:2 : does not exist [ 107.101712][ T6126] bond1 (unregistering): Released all slaves [ 107.103347][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 107.124827][ T1206] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 107.167085][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.175728][ T1206] usb 4-1: USB disconnect, device number 2 [ 107.216883][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.256484][ T5890] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 107.261631][ T5896] udevd[5896]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.309493][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.368275][ T5890] usb 1-1: config 0 descriptor?? [ 107.855900][ T5890] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 108.050829][ T5890] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 108.207803][ T6151] mmap: syz.3.104 (6151) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.262813][ T5890] ft260 0003:0403:6030.0004: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 108.399390][ T6153] syzkaller1: entered promiscuous mode [ 108.441325][ T6153] syzkaller1: entered allmulticast mode [ 108.464750][ T5890] ft260 0003:0403:6030.0004: failed to retrieve status: -71, no wakeup [ 108.477293][ T5890] ft260 0003:0403:6030.0004: failed to retrieve status: -71 [ 108.499710][ T5890] ft260 0003:0403:6030.0004: failed to reset I2C controller: -71 [ 108.634607][ T5890] usb 1-1: USB disconnect, device number 3 [ 108.973486][ T6159] input: syz0 as /devices/virtual/input/input6 [ 108.980476][ T6159] input: failed to attach handler leds to device input6, error: -6 [ 109.394425][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.543926][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.680250][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.014333][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.374716][ T30] audit: type=1804 audit(1747082535.956:3): pid=6188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.124" name="/" dev="pidfs" ino=6186 res=1 errno=0 [ 110.490619][ T6189] pim6reg1: entered promiscuous mode [ 110.508942][ T6189] pim6reg1: entered allmulticast mode [ 110.556353][ T36] bridge_slave_1: left allmulticast mode [ 110.587307][ T36] bridge_slave_1: left promiscuous mode [ 110.620416][ T30] audit: type=1326 audit(1747082536.186:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 110.646319][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.713788][ T36] bridge_slave_0: left allmulticast mode [ 110.720780][ T30] audit: type=1326 audit(1747082536.186:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 110.751433][ T36] bridge_slave_0: left promiscuous mode [ 110.762590][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.772108][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.781187][ T30] audit: type=1326 audit(1747082536.186:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 110.781333][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.803874][ T30] audit: type=1326 audit(1747082536.186:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1558 code=0x7ffc0000 [ 110.833998][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.841991][ T30] audit: type=1326 audit(1747082536.186:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 110.871169][ T30] audit: type=1326 audit(1747082536.186:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 110.894541][ T30] audit: type=1326 audit(1747082536.186:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1558 code=0x7ffc0000 [ 110.916704][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.925134][ T30] audit: type=1326 audit(1747082536.186:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 110.950905][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.958307][ T30] audit: type=1326 audit(1747082536.186:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 112.300544][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.330502][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.363997][ T36] bond0 (unregistering): Released all slaves [ 112.548715][ T5840] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.728515][ T5840] usb 3-1: Using ep0 maxpacket: 8 [ 112.747110][ T5840] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 112.771454][ T5840] usb 3-1: config 179 has no interface number 0 [ 112.791325][ T5840] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 112.834677][ T5840] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 112.882407][ T5840] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 112.909474][ T5840] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 112.926536][ T5840] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 112.967113][ T5840] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 112.987136][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.009404][ T6228] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.062352][ T5839] Bluetooth: hci4: command tx timeout [ 113.407052][ T5884] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input7 [ 113.581468][ T6228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.632607][ T6228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.783163][ T36] hsr_slave_0: left promiscuous mode [ 113.836591][ T36] hsr_slave_1: left promiscuous mode [ 113.859330][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.922065][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.950000][ T976] usb 3-1: USB disconnect, device number 5 [ 113.950083][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 113.964515][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 113.983477][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.044643][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.127609][ T36] veth1_macvtap: left promiscuous mode [ 114.149367][ T36] veth0_macvtap: left promiscuous mode [ 114.182785][ T36] veth1_vlan: left promiscuous mode [ 114.200050][ T36] veth0_vlan: left promiscuous mode [ 114.418582][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'. [ 115.142409][ T5839] Bluetooth: hci4: command tx timeout [ 115.205466][ T36] team0 (unregistering): Port device team_slave_1 removed [ 115.245823][ T36] team0 (unregistering): Port device team_slave_0 removed [ 115.283754][ T5890] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.462762][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 115.483772][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.507192][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.529042][ T5890] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 115.538893][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.579430][ T5890] usb 1-1: config 0 descriptor?? [ 115.873544][ T6272] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 115.875041][ T6272] Zero length message leads to an empty skb [ 116.019903][ T5890] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 116.205394][ T5890] ft260 0003:0403:6030.0005: chip code: 0000 0000 [ 116.483788][ T6197] chnl_net:caif_netlink_parms(): no params data found [ 116.707185][ T5890] usb 1-1: USB disconnect, device number 4 [ 116.842518][ T6318] loop8: detected capacity change from 0 to 1 [ 116.891943][ T6318] Dev loop8: unable to read RDB block 1 [ 116.921496][ T6318] loop8: unable to read partition table [ 116.945553][ T6318] loop8: partition table beyond EOD, truncated [ 116.991854][ T6318] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 117.221748][ T5839] Bluetooth: hci4: command tx timeout [ 117.229655][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.271181][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.327960][ T6197] bridge_slave_0: entered allmulticast mode [ 117.363493][ T6197] bridge_slave_0: entered promiscuous mode [ 117.388527][ T6197] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.435819][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.459243][ T6197] bridge_slave_1: entered allmulticast mode [ 117.488551][ T6197] bridge_slave_1: entered promiscuous mode [ 117.706401][ T6197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.777691][ T6197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.973371][ T6197] team0: Port device team_slave_0 added [ 117.992740][ T6197] team0: Port device team_slave_1 added [ 118.026728][ T976] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 118.191784][ T6197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.198806][ T6197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.210505][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 118.224800][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.249145][ T6197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.317490][ T976] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 118.326325][ T6197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.361082][ T6197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.361214][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.455162][ T6197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.476313][ T976] usb 5-1: config 0 descriptor?? [ 118.496956][ T6352] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 118.779341][ T6197] hsr_slave_0: entered promiscuous mode [ 118.828272][ T6197] hsr_slave_1: entered promiscuous mode [ 118.842168][ T6197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.864548][ T6197] Cannot create hsr debugfs directory [ 118.973969][ T976] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 119.051378][ T1206] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 119.249755][ T1206] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.291076][ T1206] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 119.319944][ T5839] Bluetooth: hci4: command tx timeout [ 119.340190][ T1206] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 119.366205][ T1206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.394889][ T1206] usb 3-1: config 0 descriptor?? [ 119.401656][ T5943] usb 5-1: USB disconnect, device number 5 [ 119.431547][ T1206] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 119.439099][ T1206] dvb-usb: bulk message failed: -22 (3/0) [ 119.466895][ T1206] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 119.490396][ T1206] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 119.507805][ T1206] usb 3-1: media controller created [ 119.537838][ T1206] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.579229][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.603301][ T1206] dvb-usb: bulk message failed: -22 (6/0) [ 119.647917][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.648091][ T1206] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 119.719214][ T1206] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 119.774864][ T1206] dvb-usb: schedule remote query interval to 150 msecs. [ 119.795998][ T1206] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 119.934336][ T6197] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 119.956860][ T1206] dvb-usb: bulk message failed: -22 (1/0) [ 119.981077][ T1206] dvb-usb: error while querying for an remote control event. [ 120.018967][ T6197] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 120.059964][ T6197] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 120.142959][ T1206] dvb-usb: bulk message failed: -22 (1/0) [ 120.148774][ T1206] dvb-usb: error while querying for an remote control event. [ 120.167916][ T6197] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 120.373930][ T5840] dvb-usb: bulk message failed: -22 (1/0) [ 120.379759][ T5840] dvb-usb: error while querying for an remote control event. [ 120.476285][ T6197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.484780][ T976] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 120.588091][ T6197] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.643684][ T5833] usb 3-1: USB disconnect, device number 6 [ 120.667355][ T5014] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.675297][ T5014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.703061][ T976] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 120.724389][ T976] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.763679][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.771030][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.779194][ T5833] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 120.803924][ T976] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 120.821196][ T976] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 120.870046][ T976] usb 5-1: Product: syz [ 120.880178][ T976] usb 5-1: Manufacturer: syz [ 120.911660][ T976] usb 5-1: SerialNumber: syz [ 120.923135][ T976] usb 5-1: config 0 descriptor?? [ 120.949509][ T976] usb 5-1: selecting invalid altsetting 0 [ 121.274571][ T976] usb 5-1: USB disconnect, device number 6 [ 121.454539][ T6197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.566971][ T6197] veth0_vlan: entered promiscuous mode [ 121.603974][ T6197] veth1_vlan: entered promiscuous mode [ 121.754921][ T6197] veth0_macvtap: entered promiscuous mode [ 121.817911][ T6197] veth1_macvtap: entered promiscuous mode [ 121.923179][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.956088][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.991331][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.038996][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.067275][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.081142][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.101619][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.133071][ T6445] netlink: 'syz.2.199': attribute type 4 has an invalid length. [ 122.143406][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.178943][ T6197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.505241][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.557531][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.571145][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.604331][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.639655][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.670723][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.690006][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.702488][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.728540][ T6197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.886011][ T6197] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.911114][ T6197] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.942267][ T6197] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.971106][ T6197] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.341683][ T976] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.504177][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.525835][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.547881][ T976] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 123.568889][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.585851][ T976] usb 1-1: config 0 descriptor?? [ 123.799407][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.821511][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.120282][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.151680][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.442096][ T976] hid-led 0003:27B8:01ED.0007: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 124.526909][ T976] hid-led 0003:27B8:01ED.0007: ThingM blink(1) v1 initialized [ 124.660524][ T976] usb 1-1: USB disconnect, device number 5 [ 125.125910][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 125.125929][ T30] audit: type=1326 audit(1747082550.706:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.5.215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 125.194752][ T30] audit: type=1326 audit(1747082550.706:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.5.215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 125.258832][ T30] audit: type=1326 audit(1747082550.766:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.5.215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 125.339054][ T30] audit: type=1326 audit(1747082550.766:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.5.215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 125.424829][ T30] audit: type=1326 audit(1747082550.766:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.5.215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 125.551182][ T6522] ipvlan2: entered promiscuous mode [ 125.556632][ T30] audit: type=1326 audit(1747082550.776:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.5.215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 125.598953][ T6522] ipvlan2: entered allmulticast mode [ 125.609351][ T6522] hsr0: entered allmulticast mode [ 125.622533][ T6522] hsr_slave_0: entered allmulticast mode [ 125.635786][ T6522] hsr_slave_1: entered allmulticast mode [ 125.641298][ T30] audit: type=1326 audit(1747082550.776:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.5.215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 125.711156][ T30] audit: type=1326 audit(1747082550.836:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.5.215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 125.787747][ T30] audit: type=1326 audit(1747082550.836:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.5.215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 125.828760][ T30] audit: type=1326 audit(1747082550.836:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.5.215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 125.871366][ T976] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 126.041590][ T976] usb 6-1: Using ep0 maxpacket: 16 [ 126.072699][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 126.151045][ T976] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 126.207571][ T976] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 126.246192][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.274695][ T976] usb 6-1: config 0 descriptor?? [ 126.287657][ T3065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.318542][ T3065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.613339][ T6551] netlink: 28 bytes leftover after parsing attributes in process `syz.0.224'. [ 126.641155][ T6551] netlink: 'syz.0.224': attribute type 7 has an invalid length. [ 126.663205][ T6551] netlink: 'syz.0.224': attribute type 8 has an invalid length. [ 126.676515][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'. [ 126.697728][ T6551] erspan0: entered promiscuous mode [ 126.705836][ T6551] erspan0: left promiscuous mode [ 126.759839][ T976] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 126.777782][ T976] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 126.807085][ T976] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 126.855599][ T976] kovaplus 0003:1E7D:2D50.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 127.411152][ T976] kovaplus 0003:1E7D:2D50.0008: couldn't init struct kovaplus_device [ 127.457566][ T976] kovaplus 0003:1E7D:2D50.0008: couldn't install mouse [ 127.521907][ T976] kovaplus 0003:1E7D:2D50.0008: probe with driver kovaplus failed with error -71 [ 127.600214][ T976] usb 6-1: USB disconnect, device number 2 [ 128.571260][ T976] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 128.768211][ T976] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.808844][ T976] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 128.835594][ T976] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 128.869855][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.899591][ T976] usb 6-1: config 0 descriptor?? [ 128.926029][ T976] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 128.953814][ T976] dvb-usb: bulk message failed: -22 (3/0) [ 129.002120][ T976] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 129.035615][ T976] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 129.069847][ T976] usb 6-1: media controller created [ 129.092865][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.163694][ T976] dvb-usb: bulk message failed: -22 (6/0) [ 129.170467][ T976] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 129.324254][ T976] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 129.386539][ T976] dvb-usb: schedule remote query interval to 150 msecs. [ 129.429478][ T976] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 129.581084][ T5831] dvb-usb: bulk message failed: -22 (1/0) [ 129.587014][ T5831] dvb-usb: error while querying for an remote control event. [ 129.751565][ T5831] dvb-usb: bulk message failed: -22 (1/0) [ 129.761038][ T5831] dvb-usb: error while querying for an remote control event. [ 129.835147][ T5831] usb 6-1: USB disconnect, device number 3 [ 129.962968][ T5831] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 130.412326][ T6640] input: syz0 as /devices/virtual/input/input10 [ 131.249123][ T6666] openvswitch: netlink: Tunnel attr 32 out of range max 16 [ 131.508431][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.263'. [ 131.596724][ T6673] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.605213][ T6673] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.104064][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 132.122767][ T6691] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.132267][ T6691] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.141060][ T6691] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.150497][ T6691] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.185017][ T6691] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.194561][ T6691] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.203751][ T6691] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.212833][ T6691] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.754635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 133.067639][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.082115][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.141717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 134.001385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 134.853724][ T6738] usb usb8: usbfs: process 6738 (syz.5.291) did not claim interface 0 before use [ 135.171308][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 135.363749][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.381377][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 135.398761][ T10] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 135.442254][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.483054][ T10] usb 4-1: config 0 descriptor?? [ 135.515745][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 135.548725][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 135.585902][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 135.607786][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 135.648959][ T10] usb 4-1: media controller created [ 135.668923][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.756893][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 135.796351][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 135.849071][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 135.917906][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 135.955733][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 136.112960][ T5840] dvb-usb: bulk message failed: -22 (1/0) [ 136.125798][ T5840] dvb-usb: error while querying for an remote control event. [ 136.321850][ T5840] dvb-usb: bulk message failed: -22 (1/0) [ 136.350573][ T5840] dvb-usb: error while querying for an remote control event. [ 136.548148][ T5840] dvb-usb: bulk message failed: -22 (1/0) [ 136.577946][ T5840] dvb-usb: error while querying for an remote control event. [ 136.598467][ T5833] usb 4-1: USB disconnect, device number 3 [ 136.687139][ T5833] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 137.441548][ T6815] syzkaller1: entered promiscuous mode [ 137.459198][ T6815] syzkaller1: entered allmulticast mode [ 138.061628][ T6837] ======================================================= [ 138.061628][ T6837] WARNING: The mand mount option has been deprecated and [ 138.061628][ T6837] and is ignored by this kernel. Remove the mand [ 138.061628][ T6837] option from the mount to silence this warning. [ 138.061628][ T6837] ======================================================= [ 138.191623][ T5840] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 138.377127][ T5840] usb 4-1: Using ep0 maxpacket: 8 [ 138.408511][ T5840] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 138.438915][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.463030][ T5840] usb 4-1: Product: syz [ 138.467349][ T5840] usb 4-1: Manufacturer: syz [ 138.482582][ T5840] usb 4-1: SerialNumber: syz [ 138.508506][ T5840] usb 4-1: config 0 descriptor?? [ 138.769757][ T5840] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 138.781584][ T5831] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 138.983535][ T5831] usb 1-1: config 0 interface 0 has no altsetting 0 [ 138.990246][ T5831] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 139.019939][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.060789][ T5831] usb 1-1: config 0 descriptor?? [ 139.241106][ T5890] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 139.393658][ T5890] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 139.412209][ T5890] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 139.424094][ T5890] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 139.435393][ T5890] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 139.447145][ T5890] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 139.454412][ T5884] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 139.462260][ T5890] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 139.485866][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.497697][ T5890] usb 6-1: Product: syz [ 139.502058][ T5890] usb 6-1: Manufacturer: syz [ 139.515124][ T5890] cdc_wdm 6-1:1.0: skipping garbage [ 139.521331][ T5890] cdc_wdm 6-1:1.0: skipping garbage [ 139.536650][ T5890] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 139.543364][ T5890] cdc_wdm 6-1:1.0: Unknown control protocol [ 139.585295][ T5840] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 139.607808][ T5840] usb 4-1: USB disconnect, device number 4 [ 139.625797][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.638111][ T5884] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 139.647327][ T5884] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 139.657856][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.670073][ T5884] usb 5-1: config 0 descriptor?? [ 139.681917][ T5884] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 139.689266][ T5884] dvb-usb: bulk message failed: -22 (3/0) [ 139.706631][ T5884] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 139.729625][ T5884] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 139.738877][ T5884] usb 5-1: media controller created [ 139.745960][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.762231][ T5884] dvb-usb: bulk message failed: -22 (6/0) [ 139.770644][ T5884] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 139.786029][ T5884] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 139.803199][ T5884] dvb-usb: schedule remote query interval to 150 msecs. [ 139.806909][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 139.810382][ T5884] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 139.816952][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 139.818692][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 139.837707][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 139.845282][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 139.851926][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 139.859184][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 139.865839][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 139.872459][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 139.879104][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 139.891190][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 139.897867][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 139.905360][ T5890] usb 6-1: USB disconnect, device number 4 [ 139.911401][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 139.911430][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 139.911448][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 139.961176][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 139.975765][ T5884] dvb-usb: error while querying for an remote control event. [ 140.139060][ T5831] video4linux radio48: keene_cmd_set failed (-71) [ 140.149106][ T5831] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 140.168284][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 140.175739][ T5831] usb 1-1: USB disconnect, device number 6 [ 140.196009][ T5884] dvb-usb: error while querying for an remote control event. [ 140.381336][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 140.394502][ T5831] usb 5-1: USB disconnect, device number 7 [ 140.395326][ T5884] dvb-usb: error while querying for an remote control event. [ 140.455653][ T5831] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 141.644208][ T6911] pim6reg: entered allmulticast mode [ 141.663114][ T6911] pim6reg: left allmulticast mode [ 142.939840][ T30] audit: type=1800 audit(1747082568.516:45): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.368" name="file0" dev="tmpfs" ino=169 res=0 errno=0 [ 144.541510][ T5890] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 144.724461][ T5890] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 144.751066][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 144.781956][ T5890] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 144.804063][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 144.821087][ T5890] usb 4-1: Product: syz [ 144.831306][ T5890] usb 4-1: Manufacturer: syz [ 144.835999][ T5890] usb 4-1: SerialNumber: syz [ 144.862293][ T5890] usb 4-1: config 0 descriptor?? [ 144.908925][ T5890] usb 4-1: selecting invalid altsetting 0 [ 145.082872][ T5831] usb 4-1: USB disconnect, device number 5 [ 145.592411][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 145.630233][ T7024] netlink: 104 bytes leftover after parsing attributes in process `syz.2.389'. [ 145.684551][ T7024] netlink: 104 bytes leftover after parsing attributes in process `syz.2.389'. [ 145.729281][ T7029] netlink: 36 bytes leftover after parsing attributes in process `syz.5.390'. [ 146.190639][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.201648][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.222105][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.231820][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.240463][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.282301][ T7044] netlink: 'syz.5.393': attribute type 64 has an invalid length. [ 146.350081][ T7045] netlink: 'syz.5.393': attribute type 64 has an invalid length. [ 146.364192][ T7044] netlink: 44 bytes leftover after parsing attributes in process `syz.5.393'. [ 146.384959][ T7045] netlink: 44 bytes leftover after parsing attributes in process `syz.5.393'. [ 146.564539][ T7052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.394'. [ 146.695549][ T7055] netlink: 'syz.3.395': attribute type 10 has an invalid length. [ 146.722019][ T7055] veth0_vlan: entered allmulticast mode [ 146.818166][ T7055] veth0_vlan: left promiscuous mode [ 146.835228][ T7055] veth0_vlan: entered promiscuous mode [ 146.846805][ T7055] team0: Device veth0_vlan failed to register rx_handler [ 146.986925][ T7055] syz.3.395 (7055) used greatest stack depth: 20392 bytes left [ 147.041246][ T5840] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 147.261324][ T5840] usb 6-1: Using ep0 maxpacket: 8 [ 147.276344][ T5840] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.302770][ T5840] usb 6-1: config 0 has no interface number 0 [ 147.331179][ T5840] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.378390][ T5840] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 147.427055][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.467092][ T5840] usb 6-1: config 0 descriptor?? [ 147.491580][ T5840] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 147.574131][ T7046] chnl_net:caif_netlink_parms(): no params data found [ 148.129572][ T7095] unknown channel width for channel at 909000KHz? [ 148.265683][ T5839] Bluetooth: hci0: command tx timeout [ 148.433708][ T7046] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.462826][ T7046] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.495668][ T7046] bridge_slave_0: entered allmulticast mode [ 148.527862][ T7046] bridge_slave_0: entered promiscuous mode [ 148.560833][ T7046] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.589161][ T7046] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.612896][ T7046] bridge_slave_1: entered allmulticast mode [ 148.621386][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 148.641811][ T7046] bridge_slave_1: entered promiscuous mode [ 148.811379][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 148.818820][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 148.829814][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.864107][ T1206] usb 6-1: USB disconnect, device number 5 [ 148.866296][ T7046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.880269][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.900503][ T7046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.932001][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.962381][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.001181][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.030797][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.081090][ T5884] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 149.182946][ T7046] team0: Port device team_slave_0 added [ 149.220464][ T7046] team0: Port device team_slave_1 added [ 149.233216][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.251169][ T5884] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.271616][ T10] usb 3-1: usb_control_msg returned -32 [ 149.299144][ T10] usbtmc 3-1:16.0: can't read capabilities [ 149.305345][ T5884] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.337115][ T7046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.342807][ T5884] usb 5-1: config 0 interface 0 has no altsetting 0 [ 149.368865][ T7046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.386323][ T5884] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 149.456570][ T7046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.461395][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.522070][ T5884] usb 5-1: config 0 descriptor?? [ 149.534790][ T7046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.569120][ T7046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.608188][ T7046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.626554][ T7122] lo: entered promiscuous mode [ 149.637284][ T7122] lo: entered allmulticast mode [ 149.686286][ T7123] usbtmc 3-1:16.0: stb usb_control_msg returned -32 [ 149.686985][ T7121] lo: left allmulticast mode [ 149.707141][ T10] usb 3-1: USB disconnect, device number 7 [ 149.718576][ T7121] lo: left promiscuous mode [ 149.938740][ T5884] kye 0003:0458:5015.0009: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 149.981332][ T5884] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 149.995557][ T7046] hsr_slave_0: entered promiscuous mode [ 150.004779][ T7046] hsr_slave_1: entered promiscuous mode [ 150.012591][ T5884] kye 0003:0458:5015.0009: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.4-1/input0 [ 150.014795][ T7046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.039472][ T5884] kye 0003:0458:5015.0009: tablet-enabling feature report not found [ 150.062009][ T7046] Cannot create hsr debugfs directory [ 150.075181][ T5884] kye 0003:0458:5015.0009: tablet enabling failed [ 150.150058][ T5884] usb 5-1: USB disconnect, device number 8 [ 150.227526][ T7133] fido_id[7133]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 150.342911][ T5839] Bluetooth: hci0: command tx timeout [ 151.518580][ T7046] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.199513][ T7046] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.397765][ T7046] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.424625][ T5839] Bluetooth: hci0: command tx timeout [ 152.558891][ T7046] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.105583][ T7046] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 153.141719][ T7046] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 153.220642][ T7046] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 153.301789][ T7046] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.427770][ T7217] loop2: detected capacity change from 0 to 7 [ 153.486976][ T7217] Dev loop2: unable to read RDB block 7 [ 153.530694][ T7217] loop2: AHDI p1 p2 p3 p4 [ 153.545686][ T7217] loop2: partition table partially beyond EOD, truncated [ 153.592620][ T7217] loop2: p1 start 1601398130 is beyond EOD, truncated [ 153.613851][ T7217] loop2: p2 start 1702059890 is beyond EOD, truncated [ 153.647922][ T7046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.656697][ T7217] loop2: p3 size 150995200 extends beyond EOD, truncated [ 153.720415][ T7046] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.766285][ T3065] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.773542][ T3065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.865258][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.872534][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.940528][ T5896] udevd[5896]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 153.971655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 154.001195][ T30] audit: type=1326 audit(1747082579.536:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 154.032548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 154.122859][ T30] audit: type=1326 audit(1747082579.546:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 154.144670][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.282839][ T30] audit: type=1326 audit(1747082579.566:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 154.385315][ T7046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.395143][ T30] audit: type=1326 audit(1747082579.566:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 154.511152][ T5839] Bluetooth: hci0: command tx timeout [ 154.521404][ T30] audit: type=1326 audit(1747082579.566:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 154.544098][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.561313][ T30] audit: type=1326 audit(1747082579.566:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 154.585132][ T30] audit: type=1326 audit(1747082579.566:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f55558 code=0x7ffc0000 [ 154.663203][ T30] audit: type=1326 audit(1747082579.566:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f55558 code=0x7ffc0000 [ 154.701285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 154.741369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 154.774206][ T30] audit: type=1326 audit(1747082579.566:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f55558 code=0x7ffc0000 [ 154.792451][ T7046] veth0_vlan: entered promiscuous mode [ 154.795967][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.823106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 154.854556][ T7046] veth1_vlan: entered promiscuous mode [ 154.951415][ T30] audit: type=1326 audit(1747082579.566:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f55558 code=0x7ffc0000 [ 155.100774][ T7046] veth0_macvtap: entered promiscuous mode [ 155.160812][ T7046] veth1_macvtap: entered promiscuous mode [ 155.307830][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.361768][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.411032][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.462607][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.488959][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.521102][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.556091][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.610920][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.647147][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.695181][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.710665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 155.752463][ T7046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.820207][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.856259][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.896069][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.953005][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.982380][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.035520][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.070158][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.173519][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.195458][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.216883][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.246425][ T7046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.287393][ T7256] team0: entered promiscuous mode [ 156.308034][ T7256] team_slave_0: entered promiscuous mode [ 156.362921][ T7256] team_slave_1: entered promiscuous mode [ 156.401403][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 156.405898][ T7256] team0: Cannot enslave team device to itself [ 156.473491][ T7046] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.540894][ T7046] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.568103][ T7046] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.589347][ T10] usb 6-1: config 0 has no interfaces? [ 156.595027][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 156.619655][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.628944][ T7046] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.670778][ T10] usb 6-1: config 0 descriptor?? [ 156.837971][ T7265] netlink: 'syz.2.458': attribute type 10 has an invalid length. [ 156.897051][ T7265] veth0_vlan: entered allmulticast mode [ 156.932078][ T5833] usb 6-1: USB disconnect, device number 6 [ 156.998431][ T7265] veth0_vlan: left promiscuous mode [ 157.011627][ T7265] veth0_vlan: entered promiscuous mode [ 157.027053][ T7265] team0: Device veth0_vlan failed to register rx_handler [ 157.070488][ T3065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.088887][ T3065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.136795][ T7265] syz.2.458 (7265) used greatest stack depth: 20056 bytes left [ 157.187403][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.210842][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.391091][ T5831] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 157.544466][ T5831] usb 6-1: Using ep0 maxpacket: 16 [ 157.555218][ T5831] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.578939][ T5831] usb 6-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 157.611110][ T5831] usb 6-1: config 0 interface 0 has no altsetting 0 [ 157.618445][ T5831] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 157.638277][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.680324][ T5831] usb 6-1: config 0 descriptor?? [ 157.856026][ T7284] sctp: [Deprecated]: syz.0.465 (pid 7284) Use of int in maxseg socket option. [ 157.856026][ T7284] Use struct sctp_assoc_value instead [ 158.147379][ T5831] logitech-djreceiver 0003:046D:C71F.000A: hidraw0: USB HID v4.13 Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0 [ 158.368347][ T10] usb 6-1: USB disconnect, device number 7 [ 159.291154][ T5831] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 159.489856][ T5831] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 159.519760][ T5831] usb 6-1: config 179 has no interface number 0 [ 159.539052][ T5831] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 159.595576][ T5831] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 159.636546][ T5831] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 159.686373][ T5831] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 159.725902][ T5831] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 159.760913][ T5831] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 159.786670][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.801183][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 159.822891][ T7312] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 159.835356][ T7312] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 160.016014][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 160.061329][ T10] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 160.076599][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.106922][ T10] usb 1-1: config 0 has no interface number 0 [ 160.136289][ T10] usb 1-1: config 0 interface 49 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 160.186810][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 160.205046][ T5884] usb 6-1: USB disconnect, device number 8 [ 160.205074][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 160.220329][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 160.225288][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.271650][ T10] usb 1-1: Product: syz [ 160.275895][ T10] usb 1-1: Manufacturer: syz [ 160.308270][ T10] usb 1-1: SerialNumber: syz [ 160.333014][ T10] usb 1-1: config 0 descriptor?? [ 160.675265][ T10] qmi_wwan 1-1:0.49: probe with driver qmi_wwan failed with error -22 [ 160.704029][ T10] usb 1-1: USB disconnect, device number 7 [ 160.949041][ T7351] netlink: 'syz.4.490': attribute type 10 has an invalid length. [ 161.005817][ T7351] veth0_vlan: entered allmulticast mode [ 161.068121][ T7351] veth0_vlan: left promiscuous mode [ 161.112037][ T7351] veth0_vlan: entered promiscuous mode [ 161.151865][ T7351] team0: Device veth0_vlan failed to register rx_handler [ 161.351512][ T7359] syzkaller1: entered promiscuous mode [ 161.401178][ T7359] syzkaller1: entered allmulticast mode [ 162.661811][ T1206] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 162.766722][ T30] kauditd_printk_skb: 1187 callbacks suppressed [ 162.766741][ T30] audit: type=1326 audit(1747082588.346:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 162.828227][ T30] audit: type=1326 audit(1747082588.386:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 162.850286][ T1206] usb 6-1: Using ep0 maxpacket: 16 [ 162.865094][ T30] audit: type=1326 audit(1747082588.436:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 162.900116][ T1206] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 162.907815][ T7387] veth1_to_bond: entered allmulticast mode [ 162.922259][ T1206] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 162.930488][ T1206] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 162.943347][ T1206] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 162.966971][ T7387] veth1_to_bond: left allmulticast mode [ 162.972894][ T30] audit: type=1326 audit(1747082588.436:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 162.975366][ T1206] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 163.027883][ T1206] usb 6-1: config 0 has no interface number 0 [ 163.057099][ T1206] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 163.081203][ T30] audit: type=1326 audit(1747082588.436:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 163.121082][ T1206] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 163.156813][ T1206] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 163.169936][ T30] audit: type=1326 audit(1747082588.476:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 163.197005][ T1206] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.222477][ T1206] usb 6-1: config 0 interface 125 has no altsetting 0 [ 163.234012][ T7392] netlink: 'syz.0.507': attribute type 10 has an invalid length. [ 163.241991][ T1206] usb 6-1: config 0 interface 125 has no altsetting 2 [ 163.246501][ T30] audit: type=1326 audit(1747082588.476:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 163.250128][ T7392] veth0_vlan: entered allmulticast mode [ 163.285134][ T1206] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 163.298244][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.307729][ T1206] usb 6-1: Product: syz [ 163.323472][ T30] audit: type=1326 audit(1747082588.476:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 163.329664][ T1206] usb 6-1: Manufacturer: syz [ 163.360176][ T7392] veth0_vlan: left promiscuous mode [ 163.379105][ T30] audit: type=1326 audit(1747082588.506:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 163.412180][ T1206] usb 6-1: SerialNumber: syz [ 163.436030][ T1206] usb 6-1: config 0 descriptor?? [ 163.446005][ T30] audit: type=1326 audit(1747082588.506:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 163.462753][ T7392] veth0_vlan: entered promiscuous mode [ 163.484764][ T1206] usb 6-1: selecting invalid altsetting 2 [ 163.592519][ T7392] team0: Device veth0_vlan failed to register rx_handler [ 163.687825][ T7399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.637996][ T9] usb 6-1: USB disconnect, device number 9 [ 165.391326][ T5831] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 165.591785][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 165.602047][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.641078][ T9] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 165.641171][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.678944][ T5831] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 165.688426][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.717382][ T5831] usb 3-1: config 0 descriptor?? [ 165.822982][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 165.841068][ T9] usb 5-1: config 179 has no interface number 0 [ 165.861273][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 165.911081][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 166.001127][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 166.042042][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 166.096112][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 166.141114][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 166.170199][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.237305][ T5831] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.000B/input/input13 [ 166.238975][ T7433] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 166.321297][ T7433] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 166.493770][ T5831] appleir 0003:05AC:8241.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 166.636107][ T5831] usb 3-1: USB disconnect, device number 8 [ 166.860085][ T9] usb 5-1: USB disconnect, device number 9 [ 166.860148][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 166.874444][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 166.946202][ T7448] fido_id[7448]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 168.162471][ T7473] batadv_slave_1: entered promiscuous mode [ 168.194216][ T7471] batadv_slave_1: left promiscuous mode [ 169.025850][ T7499] netlink: 14528 bytes leftover after parsing attributes in process `syz.5.549'. [ 169.211194][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 169.247640][ T7509] netlink: 'syz.5.554': attribute type 10 has an invalid length. [ 169.270447][ T7509] veth0_vlan: entered allmulticast mode [ 169.301653][ T5884] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 169.326502][ T7509] veth0_vlan: left promiscuous mode [ 169.356964][ T7509] veth0_vlan: entered promiscuous mode [ 169.390204][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.399134][ T7509] team0: Device veth0_vlan failed to register rx_handler [ 169.404212][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 169.429935][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.450563][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.472975][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 169.497011][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 169.522287][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 169.536632][ T7496] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 169.557225][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 169.578343][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.612238][ T5884] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.665038][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.799401][ T9] usb 4-1: USB disconnect, device number 6 [ 169.811038][ T5884] usb 3-1: config 0 descriptor?? [ 169.959655][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.556'. [ 170.245403][ T5884] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 170.286819][ T5884] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 170.594724][ T5884] usb 3-1: USB disconnect, device number 9 [ 172.098264][ T7599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.577'. [ 172.212081][ T7602] netlink: 'syz.0.579': attribute type 11 has an invalid length. [ 172.224910][ T7599] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.233832][ T7599] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.242632][ T7599] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.251411][ T7599] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.270334][ T7599] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.279455][ T7599] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.289114][ T7599] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.299856][ T7599] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.445462][ T7607] netlink: 'syz.3.582': attribute type 10 has an invalid length. [ 172.497078][ T7607] veth0_vlan: left promiscuous mode [ 172.514556][ T7607] veth0_vlan: entered promiscuous mode [ 172.527268][ T7607] team0: Device veth0_vlan failed to register rx_handler [ 173.251147][ T1206] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 173.280778][ T7635] fuse: Bad value for 'fd' [ 173.423392][ T1206] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 173.462004][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 173.488002][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 173.523790][ T1206] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.564859][ T1206] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.599629][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.652355][ T1206] usb 1-1: config 0 descriptor?? [ 173.664319][ T7625] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 173.935558][ T7647] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 173.964904][ T5833] IPVS: starting estimator thread 0... [ 174.081373][ T7651] IPVS: using max 28 ests per chain, 67200 per kthread [ 174.108217][ T1206] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd [ 174.155269][ T1206] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 174.202264][ T1206] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 174.489706][ T1206] usb 1-1: USB disconnect, device number 8 [ 176.381342][ T976] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 176.551072][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 176.578328][ T976] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 176.588172][ T976] usb 4-1: config 179 has no interface number 0 [ 176.604384][ T976] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 176.625552][ T976] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 176.657892][ T976] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 176.677676][ T976] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 176.709682][ T976] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 176.743815][ T976] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 176.771011][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.813493][ T7712] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 176.879835][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.634'. [ 177.156081][ T976] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input16 [ 177.515889][ T7712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.539065][ T7712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.591269][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 177.741136][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 177.749353][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 177.763329][ T10] usb 1-1: config 0 has no interface number 0 [ 177.776132][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 177.809141][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.818134][ T5884] usb 4-1: USB disconnect, device number 7 [ 177.818184][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 177.832441][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 177.837356][ T10] usb 1-1: Product: syz [ 177.854753][ T10] usb 1-1: Manufacturer: syz [ 177.879744][ T10] usb 1-1: SerialNumber: syz [ 177.891450][ T10] usb 1-1: config 0 descriptor?? [ 177.922576][ T10] smsc95xx v2.0.0 [ 178.333875][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 178.359664][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 178.461112][ T976] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 178.601131][ T5890] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 178.641099][ T976] usb 6-1: Using ep0 maxpacket: 32 [ 178.652660][ T976] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 178.663039][ T976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.671902][ T976] usb 6-1: Product: syz [ 178.676196][ T976] usb 6-1: Manufacturer: syz [ 178.681481][ T976] usb 6-1: SerialNumber: syz [ 178.697731][ T976] usb 6-1: config 0 descriptor?? [ 178.737277][ T976] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 178.774330][ T5890] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 178.791157][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.803549][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 178.830581][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 178.830638][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.856990][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 178.878848][ T5890] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 178.882097][ T10] usb 1-1: USB disconnect, device number 9 [ 178.889397][ T5890] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 178.923510][ T5890] usb 5-1: Manufacturer: syz [ 178.939668][ T5890] usb 5-1: config 0 descriptor?? [ 179.021087][ T5884] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 179.171225][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 179.181196][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.196100][ T5884] usb 3-1: config 0 has no interfaces? [ 179.201744][ T5884] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 179.210851][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.226848][ T5884] usb 3-1: config 0 descriptor?? [ 179.341254][ T5831] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 179.396124][ T5890] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 179.404884][ T5890] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 179.419798][ T5890] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 179.521048][ T5831] usb 4-1: Using ep0 maxpacket: 16 [ 179.529093][ T5831] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.545055][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.559081][ T5884] usb 3-1: USB disconnect, device number 10 [ 179.576865][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 179.588256][ T5831] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 179.603886][ T5831] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.619377][ T5831] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 179.629202][ T5831] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 179.649721][ T5831] usb 4-1: Manufacturer: syz [ 179.668523][ T5831] usb 4-1: config 0 descriptor?? [ 179.754154][ T5890] usb 5-1: USB disconnect, device number 10 [ 179.770320][ T976] gspca_ov534_9: reg_w failed -71 [ 179.946214][ T5831] rc_core: IR keymap rc-hauppauge not found [ 179.952545][ T5831] Registered IR keymap rc-empty [ 179.957786][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 179.982754][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 180.003505][ T5831] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 180.017412][ T5831] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 180.035058][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 180.071143][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 180.088823][ C1] mceusb 4-1:0.0: long-range (0x14) receiver active [ 180.095947][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 180.111136][ T976] gspca_ov534_9: Unknown sensor 0000 [ 180.111333][ T976] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 180.151899][ T976] usb 6-1: USB disconnect, device number 10 [ 180.161407][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 180.196670][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 180.231150][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 180.255542][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 180.291375][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 180.321532][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 180.361752][ T5831] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 180.397276][ T5831] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 180.429177][ T5831] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x14 active) [ 180.482581][ T5831] usb 4-1: USB disconnect, device number 8 [ 180.567975][ T7787] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 180.727735][ T7778] gretap0: entered promiscuous mode [ 180.749711][ T7778] macsec1: entered promiscuous mode [ 180.776912][ T7778] macsec1: entered allmulticast mode [ 180.810307][ T7778] gretap0: entered allmulticast mode [ 182.380704][ T7832] netlink: 44 bytes leftover after parsing attributes in process `syz.2.677'. [ 183.431370][ T7872] [U] [ 183.434639][ T7872] [U] [ 183.437442][ T7872] [U] [ 183.440177][ T7872] [U] [ 183.444488][ T7872] [U] [ 183.447244][ T7872] [U] [ 183.449973][ T7872] [U] [ 183.452691][ T7872] [U] [ 183.456193][ T7872] [U] [ 183.458951][ T7872] [U] [ 183.461685][ T7872] [U] [ 183.520094][ T7871] [U] [ 183.781557][ T5884] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 183.948445][ T5884] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 183.991512][ T5884] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 184.015629][ T5884] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 184.031051][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.039125][ T5884] usb 6-1: Product: syz [ 184.080706][ T5884] usb 6-1: Manufacturer: syz [ 184.091079][ T5884] usb 6-1: SerialNumber: syz [ 184.098036][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'. [ 184.098725][ T5884] usb 6-1: config 0 descriptor?? [ 184.132502][ T7877] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 184.139841][ T7877] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 184.433034][ T7877] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 184.440394][ T7877] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 184.905748][ T5884] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 185.313905][ T5884] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 185.371501][ T5884] usb 6-1: USB disconnect, device number 11 [ 186.041081][ T5890] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 186.193236][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 186.204877][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.216354][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 186.244927][ T5890] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 186.258883][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.293712][ T5890] usb 5-1: config 0 descriptor?? [ 186.381176][ T5884] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 186.555018][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.591512][ T5884] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 186.608170][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.638776][ T5884] usb 6-1: config 0 descriptor?? [ 186.715657][ T5890] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 186.744280][ T5890] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 186.768409][ T5890] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 186.797285][ T5890] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 186.815543][ T5890] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 186.834153][ T5890] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 186.861443][ T5890] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 186.871068][ T5890] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 186.876179][ T5884] usbhid 6-1:0.0: can't add hid device: -71 [ 186.887584][ T5890] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 186.899254][ T5884] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 186.916303][ T5890] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 186.948765][ T5884] usb 6-1: USB disconnect, device number 12 [ 186.950501][ T5890] HID 045e:07da: Invalid code 65791 type 1 [ 186.976605][ T5890] HID 045e:07da: Invalid code 768 type 1 [ 186.998968][ T5890] HID 045e:07da: Invalid code 769 type 1 [ 187.015255][ T5890] HID 045e:07da: Invalid code 770 type 1 [ 187.032481][ T5890] HID 045e:07da: Invalid code 771 type 1 [ 187.040139][ T5890] HID 045e:07da: Invalid code 772 type 1 [ 187.058879][ T5890] HID 045e:07da: Invalid code 773 type 1 [ 187.078928][ T5890] HID 045e:07da: Invalid code 774 type 1 [ 187.086415][ T5890] HID 045e:07da: Invalid code 775 type 1 [ 187.119922][ T5890] HID 045e:07da: Invalid code 776 type 1 [ 187.142607][ T5890] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000F/input/input19 [ 187.197425][ T7953] sctp: [Deprecated]: syz.3.727 (pid 7953) Use of int in maxseg socket option. [ 187.197425][ T7953] Use struct sctp_assoc_value instead [ 187.251942][ T5890] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 187.423463][ T9] usb 5-1: USB disconnect, device number 11 [ 187.439717][ T5884] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 187.485754][ T7954] fido_id[7954]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 187.621244][ T5884] usb 6-1: Using ep0 maxpacket: 32 [ 187.645804][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.687242][ T5884] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 187.696825][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.722221][ T5884] usb 6-1: config 0 descriptor?? [ 187.740756][ T5884] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 187.769914][ T5884] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 187.977349][ T976] usb 6-1: USB disconnect, device number 13 [ 187.986958][ T976] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 188.051330][ T5890] psmouse serio2: Failed to reset mouse on : -5 [ 188.937402][ T7996] sock: sock_set_timeout: `syz.3.742' (pid 7996) tries to set negative timeout [ 189.151169][ T5884] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 189.351415][ T5884] usb 6-1: Using ep0 maxpacket: 16 [ 189.387176][ T5884] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 189.407374][ T5884] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.428720][ T5884] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.478933][ T5884] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 189.519554][ T5884] usb 6-1: config 7 interface 0 has no altsetting 0 [ 189.548609][ T5884] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 189.581524][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.080169][ T5884] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:7.0/0003:0458:5010.0010/input/input21 [ 190.111134][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 190.234504][ T5884] kye 0003:0458:5010.0010: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 190.305144][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 190.351931][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 190.386670][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 190.424184][ T5884] usb 6-1: USB disconnect, device number 14 [ 190.455903][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.487762][ T8028] fido_id[8028]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 190.504508][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.513737][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.549229][ T9] usb 5-1: config 0 descriptor?? [ 190.573947][ T8021] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 190.911988][ T8038] netlink: 'syz.0.763': attribute type 11 has an invalid length. [ 191.036231][ T9] plantronics 0003:047F:FFFF.0011: reserved main item tag 0xd [ 191.084724][ T9] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 191.119024][ T9] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 191.162485][ T5833] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 191.201710][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'. [ 191.283725][ T5831] usb 5-1: USB disconnect, device number 12 [ 191.331153][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 191.358661][ T5833] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 191.380456][ T8048] fido_id[8048]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 191.405726][ T5833] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 191.429368][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.460774][ T5833] usb 3-1: config 0 descriptor?? [ 191.502057][ T5833] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 191.702377][ T5890] misc userio: Buffer overflowed, userio client isn't keeping up [ 191.860543][ T5184] bcm5974 3-1:0.0: could not read from device [ 191.905293][ T5833] usb 3-1: USB disconnect, device number 11 [ 191.912741][ T5184] bcm5974 3-1:0.0: could not read from device [ 191.949899][ T5184] bcm5974 3-1:0.0: could not read from device [ 192.015273][ T5896] bcm5974 3-1:0.0: could not read from device [ 192.973768][ T5890] input: PS/2 Generic Mouse as /devices/serio2/input/input20 [ 193.242927][ T5890] psmouse serio2: Failed to enable mouse on [ 193.409640][ T8106] syzkaller1: entered promiscuous mode [ 193.430530][ T8106] syzkaller1: entered allmulticast mode [ 194.229706][ T8128] input input24: cannot allocate more than FF_MAX_EFFECTS effects [ 194.505929][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.512793][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.324107][ T8157] input: syz1 as /devices/virtual/input/input25 [ 195.897079][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.819'. [ 196.031475][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 196.094463][ T8181] syzkaller1: entered promiscuous mode [ 196.109684][ T8181] syzkaller1: entered allmulticast mode [ 196.226179][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.253461][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.288801][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 196.318666][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.363283][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.431348][ T9] usb 4-1: config 0 descriptor?? [ 196.525497][ T8187] loop8: detected capacity change from 0 to 7 [ 196.573856][ T8187] Dev loop8: unable to read RDB block 7 [ 196.579545][ T8187] loop8: unable to read partition table [ 196.607595][ T8187] loop8: partition table beyond EOD, truncated [ 196.638642][ T8187] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 196.878877][ T9] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd [ 196.909152][ T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 196.942044][ T9] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 197.001669][ T9] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 197.108052][ T8206] syzkaller1: entered promiscuous mode [ 197.127027][ T8206] syzkaller1: entered allmulticast mode [ 197.137254][ T8210] netlink: 72 bytes leftover after parsing attributes in process `syz.4.836'. [ 197.191213][ T9] usb 4-1: USB disconnect, device number 9 [ 197.243603][ T8213] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 197.254236][ T8205] fido_id[8205]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 197.631046][ T5833] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 197.823361][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.841351][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.853259][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.870369][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.847'. [ 197.880518][ T5833] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.914095][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.955336][ T5833] usb 1-1: config 0 descriptor?? [ 198.371311][ T5943] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 198.385404][ T5833] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 198.427695][ T5833] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 198.561197][ T5943] usb 5-1: Using ep0 maxpacket: 16 [ 198.574865][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.588088][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.608461][ T5943] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 198.645298][ T5943] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 198.676385][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.699593][ T5943] usb 5-1: config 0 descriptor?? [ 198.713530][ T9] usb 1-1: USB disconnect, device number 10 [ 199.149067][ T5943] hid_map_usage: 4377 callbacks suppressed [ 199.149086][ T5943] HID 045e:07da: Invalid code 65791 type 1 [ 199.216303][ T5943] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0014/input/input26 [ 199.281700][ T5943] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 199.380236][ T5943] usb 5-1: USB disconnect, device number 13 [ 199.505412][ T8270] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 199.512269][ T8270] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 199.522747][ T8267] fido_id[8267]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 199.543192][ T8270] vhci_hcd vhci_hcd.0: Device attached [ 199.783711][ T5890] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 199.811056][ T5831] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 199.998309][ T5831] usb 1-1: config 0 has no interfaces? [ 200.011615][ T5831] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 200.049931][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.099425][ T5831] usb 1-1: config 0 descriptor?? [ 200.381645][ T5943] usb 1-1: USB disconnect, device number 11 [ 200.391404][ T8272] vhci_hcd: connection closed [ 200.400905][ T12] vhci_hcd: stop threads [ 200.453050][ T12] vhci_hcd: release socket [ 200.477541][ T12] vhci_hcd: disconnect device [ 201.368917][ T8318] input: syz1 as /devices/virtual/input/input27 [ 201.919161][ T8332] ------------[ cut here ]------------ [ 201.925703][ T8332] WARNING: CPU: 1 PID: 8332 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0 [ 201.936284][ T8332] Modules linked in: [ 201.940582][ T8332] CPU: 1 UID: 0 PID: 8332 Comm: syz.3.887 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) [ 201.953167][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.963638][ T8332] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 201.969895][ T8332] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 90 8b 00 cc e8 42 7a f2 f6 90 0f 0b 90 eb e1 e8 37 7a f2 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 201.989791][ T8332] RSP: 0018:ffffc90003f5efa8 EFLAGS: 00010283 [ 201.997167][ T8332] RAX: ffffffff8acd7759 RBX: ffff888065978000 RCX: 0000000000080000 [ 202.005928][ T8332] RDX: ffffc9000c89d000 RSI: 0000000000000356 RDI: 0000000000000357 [ 202.014099][ T8332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.022252][ T8332] R10: 0000000000000000 R11: ffffffff8acd7273 R12: 1ffff1100cb2f00a [ 202.030290][ T8332] R13: ffff888023b20e40 R14: 0000000000000001 R15: ffffffff8acd7273 [ 202.038380][ T8332] FS: 0000000000000000(0000) GS:ffff8881261c7000(0063) knlGS:00000000f5076b40 [ 202.047801][ T8332] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 202.054565][ T8332] CR2: 0000000080001080 CR3: 0000000028f6a000 CR4: 00000000003526f0 [ 202.062892][ T8332] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 202.070912][ T8332] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 202.079005][ T8332] Call Trace: [ 202.082437][ T8332] [ 202.085414][ T8332] rate_control_rate_init_all_links+0x109/0x1a0 [ 202.091801][ T8332] sta_apply_auth_flags+0x1c2/0x400 [ 202.097987][ T8332] sta_apply_parameters+0xde1/0x14e0 [ 202.104098][ T8332] ieee80211_add_station+0x424/0x6a0 [ 202.109469][ T8332] rdev_add_station+0x105/0x290 [ 202.114517][ T8332] nl80211_new_station+0x16b6/0x1ab0 [ 202.119883][ T8332] ? __pfx_nl80211_new_station+0x10/0x10 [ 202.125644][ T8332] ? netdev_run_todo+0xe1d/0xea0 [ 202.130675][ T8332] ? nl80211_pre_doit+0x4f1/0x930 [ 202.135827][ T8332] genl_family_rcv_msg_doit+0x212/0x300 [ 202.141538][ T8332] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 202.148132][ T8332] ? bpf_lsm_capable+0x9/0x20 [ 202.153018][ T8332] ? security_capable+0x7e/0x2e0 [ 202.158207][ T8332] genl_rcv_msg+0x60e/0x790 [ 202.163010][ T8332] ? __pfx_genl_rcv_msg+0x10/0x10 [ 202.168093][ T8332] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 202.173607][ T8332] ? __pfx_nl80211_new_station+0x10/0x10 [ 202.179308][ T8332] ? __pfx_nl80211_post_doit+0x10/0x10 [ 202.185108][ T8332] ? ref_tracker_free+0x63a/0x7d0 [ 202.190208][ T8332] ? __copy_skb_header+0xa7/0x550 [ 202.195390][ T8332] netlink_rcv_skb+0x21c/0x490 [ 202.201128][ T8332] ? __pfx_genl_rcv_msg+0x10/0x10 [ 202.206238][ T8332] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 202.212388][ T8332] ? down_read+0x1ad/0x2e0 [ 202.216894][ T8332] genl_rcv+0x28/0x40 [ 202.221004][ T8332] netlink_unicast+0x758/0x8d0 [ 202.225837][ T8332] netlink_sendmsg+0x805/0xb30 [ 202.230677][ T8332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.236088][ T8332] ? __import_iovec+0x5d4/0x7f0 [ 202.241060][ T8332] ? aa_sock_msg_perm+0x94/0x160 [ 202.246051][ T8332] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 202.251530][ T8332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.256972][ T8332] __sock_sendmsg+0x21c/0x270 [ 202.262543][ T8332] ____sys_sendmsg+0x505/0x830 [ 202.267648][ T8332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.273647][ T8332] ? __pfx___futex_wait+0x10/0x10 [ 202.278840][ T8332] ___sys_sendmsg+0x21f/0x2a0 [ 202.283670][ T8332] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.288993][ T8332] ? __fget_files+0x2a/0x420 [ 202.293731][ T8332] ? __fget_files+0x3a0/0x420 [ 202.298501][ T8332] __sys_sendmsg+0x164/0x220 [ 202.304066][ T8332] ? __pfx___sys_sendmsg+0x10/0x10 [ 202.309261][ T8332] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 202.316687][ T8332] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.322032][ T8332] __do_fast_syscall_32+0xb4/0x110 [ 202.327210][ T8332] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.332585][ T8332] do_fast_syscall_32+0x34/0x80 [ 202.337583][ T8332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.344228][ T8332] RIP: 0023:0xf7f55539 [ 202.348545][ T8332] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 202.368401][ T8332] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 202.376954][ T8332] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001080 [ 202.385021][ T8332] RDX: 0000000000000044 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.393191][ T8332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.401290][ T8332] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 202.410322][ T8332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.419366][ T8332] [ 202.422626][ T8332] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 202.429967][ T8332] CPU: 1 UID: 0 PID: 8332 Comm: syz.3.887 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) [ 202.442939][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.453433][ T8332] Call Trace: [ 202.456751][ T8332] [ 202.459721][ T8332] dump_stack_lvl+0x99/0x250 [ 202.464463][ T8332] ? __asan_memcpy+0x40/0x70 [ 202.469084][ T8332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.474310][ T8332] ? __pfx__printk+0x10/0x10 [ 202.478932][ T8332] panic+0x2db/0x790 [ 202.482895][ T8332] ? __pfx_panic+0x10/0x10 [ 202.487335][ T8332] ? show_trace_log_lvl+0x4fb/0x550 [ 202.492575][ T8332] __warn+0x31b/0x4b0 [ 202.496596][ T8332] ? rate_control_rate_init+0x64a/0x6e0 [ 202.502169][ T8332] ? rate_control_rate_init+0x64a/0x6e0 [ 202.507837][ T8332] report_bug+0x2be/0x4f0 [ 202.512223][ T8332] ? rate_control_rate_init+0x64a/0x6e0 [ 202.517929][ T8332] ? rate_control_rate_init+0x64a/0x6e0 [ 202.523627][ T8332] ? rate_control_rate_init+0x64c/0x6e0 [ 202.529217][ T8332] handle_bug+0x84/0x160 [ 202.533604][ T8332] exc_invalid_op+0x1a/0x50 [ 202.538156][ T8332] asm_exc_invalid_op+0x1a/0x20 [ 202.543035][ T8332] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 202.549245][ T8332] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 90 8b 00 cc e8 42 7a f2 f6 90 0f 0b 90 eb e1 e8 37 7a f2 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 202.568913][ T8332] RSP: 0018:ffffc90003f5efa8 EFLAGS: 00010283 [ 202.575012][ T8332] RAX: ffffffff8acd7759 RBX: ffff888065978000 RCX: 0000000000080000 [ 202.583002][ T8332] RDX: ffffc9000c89d000 RSI: 0000000000000356 RDI: 0000000000000357 [ 202.591076][ T8332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.599057][ T8332] R10: 0000000000000000 R11: ffffffff8acd7273 R12: 1ffff1100cb2f00a [ 202.607077][ T8332] R13: ffff888023b20e40 R14: 0000000000000001 R15: ffffffff8acd7273 [ 202.615185][ T8332] ? rate_control_rate_init+0x163/0x6e0 [ 202.620761][ T8332] ? rate_control_rate_init+0x163/0x6e0 [ 202.626530][ T8332] ? rate_control_rate_init+0x649/0x6e0 [ 202.632104][ T8332] ? rate_control_rate_init+0x649/0x6e0 [ 202.637864][ T8332] rate_control_rate_init_all_links+0x109/0x1a0 [ 202.644138][ T8332] sta_apply_auth_flags+0x1c2/0x400 [ 202.649531][ T8332] sta_apply_parameters+0xde1/0x14e0 [ 202.654850][ T8332] ieee80211_add_station+0x424/0x6a0 [ 202.660189][ T8332] rdev_add_station+0x105/0x290 [ 202.665285][ T8332] nl80211_new_station+0x16b6/0x1ab0 [ 202.670680][ T8332] ? __pfx_nl80211_new_station+0x10/0x10 [ 202.676358][ T8332] ? netdev_run_todo+0xe1d/0xea0 [ 202.681370][ T8332] ? nl80211_pre_doit+0x4f1/0x930 [ 202.686428][ T8332] genl_family_rcv_msg_doit+0x212/0x300 [ 202.692305][ T8332] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 202.698416][ T8332] ? bpf_lsm_capable+0x9/0x20 [ 202.703156][ T8332] ? security_capable+0x7e/0x2e0 [ 202.708128][ T8332] genl_rcv_msg+0x60e/0x790 [ 202.712838][ T8332] ? __pfx_genl_rcv_msg+0x10/0x10 [ 202.717885][ T8332] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 202.723278][ T8332] ? __pfx_nl80211_new_station+0x10/0x10 [ 202.728927][ T8332] ? __pfx_nl80211_post_doit+0x10/0x10 [ 202.734411][ T8332] ? ref_tracker_free+0x63a/0x7d0 [ 202.739450][ T8332] ? __copy_skb_header+0xa7/0x550 [ 202.744593][ T8332] netlink_rcv_skb+0x21c/0x490 [ 202.749373][ T8332] ? __pfx_genl_rcv_msg+0x10/0x10 [ 202.754606][ T8332] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 202.759931][ T8332] ? down_read+0x1ad/0x2e0 [ 202.764552][ T8332] genl_rcv+0x28/0x40 [ 202.768590][ T8332] netlink_unicast+0x758/0x8d0 [ 202.773379][ T8332] netlink_sendmsg+0x805/0xb30 [ 202.778345][ T8332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.783653][ T8332] ? __import_iovec+0x5d4/0x7f0 [ 202.788547][ T8332] ? aa_sock_msg_perm+0x94/0x160 [ 202.793624][ T8332] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 202.798928][ T8332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.804324][ T8332] __sock_sendmsg+0x21c/0x270 [ 202.809120][ T8332] ____sys_sendmsg+0x505/0x830 [ 202.813941][ T8332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.819349][ T8332] ? __pfx___futex_wait+0x10/0x10 [ 202.824414][ T8332] ___sys_sendmsg+0x21f/0x2a0 [ 202.829225][ T8332] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.834802][ T8332] ? __fget_files+0x2a/0x420 [ 202.839504][ T8332] ? __fget_files+0x3a0/0x420 [ 202.844219][ T8332] __sys_sendmsg+0x164/0x220 [ 202.849653][ T8332] ? __pfx___sys_sendmsg+0x10/0x10 [ 202.854799][ T8332] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 202.861875][ T8332] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.867111][ T8332] __do_fast_syscall_32+0xb4/0x110 [ 202.872242][ T8332] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.877634][ T8332] do_fast_syscall_32+0x34/0x80 [ 202.882503][ T8332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.888851][ T8332] RIP: 0023:0xf7f55539 [ 202.892951][ T8332] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 202.913113][ T8332] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 202.922078][ T8332] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001080 [ 202.930983][ T8332] RDX: 0000000000000044 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.940672][ T8332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.948749][ T8332] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 202.956822][ T8332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.964825][ T8332] [ 202.968160][ T8332] Kernel Offset: disabled [ 202.972506][ T8332] Rebooting in 86400 seconds..