last executing test programs: 6.931392837s ago: executing program 3 (id=334): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000400)={0xa000001c}) 6.876804116s ago: executing program 3 (id=335): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000002c0)={0xc, &(0x7f0000000180)={0x40, 0xe, 0x2, {0x2, 0xd}}, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 4.459011344s ago: executing program 4 (id=353): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f18e55afb9fd0800000000000000d2dfa8237788bb71f36b177a80fb78c7699c74e891a0c7"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 4.03608012s ago: executing program 4 (id=357): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0xffffffff, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 3.831976648s ago: executing program 2 (id=360): bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="8300040000000000400012800800010073697400340002800500090029000000060010000b00000008000c000000008006000d000900000008000300e000000106000e"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 3.810220261s ago: executing program 4 (id=362): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigqueueinfo(0x0, 0x1d, 0x0) 3.734516218s ago: executing program 0 (id=363): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0xa, {{0xa, 0x4e20, 0x6, @local}}}, 0x84) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000000), 0x0) open$dir(0x0, 0x1, 0x19d) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) 3.639685789s ago: executing program 3 (id=364): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x80, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8007}, 0x1c) 3.634804931s ago: executing program 2 (id=365): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000240)={0x0, 0xb863f1de44954ad5, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.403274088s ago: executing program 1 (id=366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 3.34809102s ago: executing program 3 (id=367): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) sendmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="ceca8a1dc120adab60d989ed34", 0xd}, {&(0x7f0000000340)='`av', 0x3}], 0x2}}], 0x1, 0xc0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x11}]) 3.07425627s ago: executing program 1 (id=368): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = epoll_create1(0x80000) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x4008810) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000041c0)={0x10}) 2.950647896s ago: executing program 3 (id=369): r0 = io_uring_setup(0x7b0c, &(0x7f0000000900)={0x0, 0x1246, 0x1000, 0x1, 0x1060}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000540)='0', 0x1}, {&(0x7f0000000580)='q', 0x1}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.84017103s ago: executing program 1 (id=370): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private2, 0x2, r1}) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) 2.465090781s ago: executing program 1 (id=371): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffffffffff3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 1.833082681s ago: executing program 0 (id=372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r1, 0xc11, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7, 0x1}, {0xbd, 0x6}, {0x3, 0x4}, {0x8, 0x1}], "d6eacaba4000"}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r3, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x38}}], 0x28}}], 0x1, 0x841) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 1.391052216s ago: executing program 0 (id=373): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)={0x14, r3, 0xb05, 0x10000000, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1.207456429s ago: executing program 4 (id=374): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x8b, 0x100000500) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 1.19350147s ago: executing program 1 (id=375): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000440)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty=0xe0000001}, {0x4e22, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) 1.049220465s ago: executing program 4 (id=376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0xfc, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x95db}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x3c}}}}}, 0x28}}, 0x20008010) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4ed}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 947.258423ms ago: executing program 0 (id=377): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) listen(r0, 0x8000) 946.937316ms ago: executing program 1 (id=378): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000001c0)={0x4, 0x2, 0x8001, 0x1, "bf99f7a0f281ca7cbeb8216bef5c543cf861aa6b6f005e00"}) 835.560657ms ago: executing program 0 (id=379): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000003c0)={0xb, 0x9, 0xffffffff}, 0xc) 784.487785ms ago: executing program 4 (id=380): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 723.9237ms ago: executing program 2 (id=381): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xa27, 0x0, &(0x7f0000000280)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x125, 0x9}) 656.171505ms ago: executing program 0 (id=382): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x0, 0x9}, 0x8) 536.383409ms ago: executing program 2 (id=383): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) sendto$inet(r0, 0x0, 0x0, 0x200047f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[], 0x6df0}, 0x1, 0x0, 0x0, 0x44008010}, 0x8005) 415.483698ms ago: executing program 3 (id=384): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f18e55afb9fd0800000000000000d2dfa8237788bb71f36b177a80fb78c7699c74e891a0c7"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 195.311091ms ago: executing program 2 (id=385): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x327, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xf, 0x4) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e", 0x5f, 0x4008044, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c9702", 0x5e, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a528", 0x2) r3 = dup2(r1, r1) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): [ 107.722932][ T799] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts. [ 113.313781][ T5809] cgroup: Unknown subsys name 'net' [ 113.425796][ T5809] cgroup: Unknown subsys name 'cpuset' [ 113.435573][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 115.421625][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 117.878679][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.892031][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.903714][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 117.915847][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.927986][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.939875][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.953771][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.962112][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 117.975158][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.977943][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.991782][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.004497][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 118.014505][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.021539][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.033791][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.048421][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.060404][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.074138][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.084306][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 118.095401][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 118.096466][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.117267][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 118.121264][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 118.136851][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.137242][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.958870][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 119.134070][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 119.200913][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 119.241269][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 119.380687][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 119.510761][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.519280][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.528645][ T5845] bridge_slave_0: entered allmulticast mode [ 119.538705][ T5845] bridge_slave_0: entered promiscuous mode [ 119.609419][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.620013][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.629422][ T5845] bridge_slave_1: entered allmulticast mode [ 119.639693][ T5845] bridge_slave_1: entered promiscuous mode [ 119.672551][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.683374][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.692661][ T5847] bridge_slave_0: entered allmulticast mode [ 119.703951][ T5847] bridge_slave_0: entered promiscuous mode [ 119.717271][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.726945][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.737434][ T5847] bridge_slave_1: entered allmulticast mode [ 119.746221][ T5847] bridge_slave_1: entered promiscuous mode [ 119.792645][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.801933][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.812392][ T5844] bridge_slave_0: entered allmulticast mode [ 119.822770][ T5844] bridge_slave_0: entered promiscuous mode [ 119.853950][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.868798][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.882592][ T5849] bridge_slave_0: entered allmulticast mode [ 119.895441][ T5849] bridge_slave_0: entered promiscuous mode [ 119.943692][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.955619][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.967199][ T5844] bridge_slave_1: entered allmulticast mode [ 119.978577][ T5844] bridge_slave_1: entered promiscuous mode [ 120.012958][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.023801][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.035190][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.045000][ T5849] bridge_slave_1: entered allmulticast mode [ 120.054656][ T5849] bridge_slave_1: entered promiscuous mode [ 120.066047][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.118598][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.163370][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.179300][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.191273][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.204929][ T5837] Bluetooth: hci3: command tx timeout [ 120.204935][ T5841] Bluetooth: hci1: command tx timeout [ 120.214499][ T5836] Bluetooth: hci2: command tx timeout [ 120.225392][ T5142] Bluetooth: hci0: command tx timeout [ 120.241269][ T5836] Bluetooth: hci4: command tx timeout [ 120.251908][ T5848] bridge_slave_0: entered allmulticast mode [ 120.262509][ T5848] bridge_slave_0: entered promiscuous mode [ 120.277720][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.345777][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.359444][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.371802][ T5848] bridge_slave_1: entered allmulticast mode [ 120.382366][ T5848] bridge_slave_1: entered promiscuous mode [ 120.405527][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.426328][ T5847] team0: Port device team_slave_0 added [ 120.437766][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.499341][ T5847] team0: Port device team_slave_1 added [ 120.515637][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.533669][ T5845] team0: Port device team_slave_0 added [ 120.590920][ T5844] team0: Port device team_slave_0 added [ 120.627402][ T5845] team0: Port device team_slave_1 added [ 120.637986][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.651697][ T5844] team0: Port device team_slave_1 added [ 120.675532][ T5849] team0: Port device team_slave_0 added [ 120.697506][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.721185][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.729424][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.763257][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.779134][ T5849] team0: Port device team_slave_1 added [ 120.825226][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.834639][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.871994][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.900122][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.908613][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.944652][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.970998][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.979150][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.013429][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.052521][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.066141][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.100194][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.118949][ T5848] team0: Port device team_slave_0 added [ 121.127479][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.138588][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.173618][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.197654][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.207014][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.239432][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.275997][ T5848] team0: Port device team_slave_1 added [ 121.312344][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.321836][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.353836][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.373265][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.382264][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.415348][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.467911][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.479748][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.514646][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.610678][ T5844] hsr_slave_0: entered promiscuous mode [ 121.619648][ T5844] hsr_slave_1: entered promiscuous mode [ 121.633718][ T5847] hsr_slave_0: entered promiscuous mode [ 121.641207][ T5847] hsr_slave_1: entered promiscuous mode [ 121.650263][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 121.657662][ T5847] Cannot create hsr debugfs directory [ 121.681655][ T5845] hsr_slave_0: entered promiscuous mode [ 121.688757][ T5845] hsr_slave_1: entered promiscuous mode [ 121.697061][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 121.703462][ T5845] Cannot create hsr debugfs directory [ 121.825104][ T5849] hsr_slave_0: entered promiscuous mode [ 121.832181][ T5849] hsr_slave_1: entered promiscuous mode [ 121.841633][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 121.851707][ T5849] Cannot create hsr debugfs directory [ 121.894565][ T5848] hsr_slave_0: entered promiscuous mode [ 121.904050][ T5848] hsr_slave_1: entered promiscuous mode [ 121.913291][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 121.922487][ T5848] Cannot create hsr debugfs directory [ 122.281096][ T5841] Bluetooth: hci4: command tx timeout [ 122.287999][ T5841] Bluetooth: hci0: command tx timeout [ 122.295850][ T5142] Bluetooth: hci3: command tx timeout [ 122.301168][ T5837] Bluetooth: hci2: command tx timeout [ 122.302806][ T5836] Bluetooth: hci1: command tx timeout [ 122.640234][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.656448][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.678192][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.690171][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.786038][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 122.814742][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 122.833422][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 122.867669][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 122.932865][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 122.949587][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 122.976869][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 123.009675][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 123.169162][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 123.183940][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 123.199696][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.217609][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 123.252824][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 123.334377][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.377577][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 123.420201][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 123.436706][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 123.454177][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.467788][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.486234][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 123.536275][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.547589][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.579504][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.643462][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.733951][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.755339][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.795888][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.803894][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.847404][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.856029][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.883160][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.893636][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.936627][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.947701][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.985722][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.129521][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.199089][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.257300][ T5845] veth0_vlan: entered promiscuous mode [ 124.268565][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.342405][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.358823][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.371088][ T5836] Bluetooth: hci2: command tx timeout [ 124.375825][ T5837] Bluetooth: hci4: command tx timeout [ 124.377936][ T5836] Bluetooth: hci1: command tx timeout [ 124.398840][ T5837] Bluetooth: hci0: command tx timeout [ 124.398872][ T5837] Bluetooth: hci3: command tx timeout [ 124.429642][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.458494][ T5845] veth1_vlan: entered promiscuous mode [ 124.499877][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.517195][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.526906][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.581806][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.597376][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.611355][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.634915][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.647031][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.744615][ T5845] veth0_macvtap: entered promiscuous mode [ 124.811319][ T5845] veth1_macvtap: entered promiscuous mode [ 124.828287][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.924438][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.957293][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.972801][ T5844] veth0_vlan: entered promiscuous mode [ 125.005213][ T5848] veth0_vlan: entered promiscuous mode [ 125.021469][ T136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.034200][ T136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.059139][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.078735][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.098059][ T136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.137067][ T5848] veth1_vlan: entered promiscuous mode [ 125.153949][ T5844] veth1_vlan: entered promiscuous mode [ 125.184091][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.331259][ T5844] veth0_macvtap: entered promiscuous mode [ 125.352226][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.366509][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.414790][ T5844] veth1_macvtap: entered promiscuous mode [ 125.468572][ T5849] veth0_vlan: entered promiscuous mode [ 125.502796][ T5848] veth0_macvtap: entered promiscuous mode [ 125.518318][ T5848] veth1_macvtap: entered promiscuous mode [ 125.536410][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.549742][ T5849] veth1_vlan: entered promiscuous mode [ 125.557177][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.583659][ T5847] veth0_vlan: entered promiscuous mode [ 125.602068][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.639273][ T5847] veth1_vlan: entered promiscuous mode [ 125.684838][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.698729][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.716681][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 125.745577][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.794594][ T136] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.821045][ T136] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.885860][ T136] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.906724][ T5849] veth0_macvtap: entered promiscuous mode [ 125.931322][ T136] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.953777][ T136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.969222][ T5847] veth0_macvtap: entered promiscuous mode [ 125.981724][ T136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.993408][ T136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.007916][ T5849] veth1_macvtap: entered promiscuous mode [ 126.031151][ T136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.043349][ T5847] veth1_macvtap: entered promiscuous mode [ 126.225224][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.257724][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.332223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 126.332270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 126.371949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.383814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.447088][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.453181][ T5836] Bluetooth: hci3: command tx timeout [ 126.462184][ T5841] Bluetooth: hci0: command tx timeout [ 126.470047][ T5841] Bluetooth: hci4: command tx timeout [ 126.476773][ T5837] Bluetooth: hci2: command tx timeout [ 126.476813][ T5837] Bluetooth: hci1: command tx timeout [ 126.571874][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.617465][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.681096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.743481][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.771606][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.792425][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.880651][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.905670][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.922448][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.967440][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.138976][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.187272][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.295237][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.306862][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.322934][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.337898][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.450704][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.484270][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.631375][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.660026][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.809510][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.840125][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.924562][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.020641][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.078069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 128.175293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 128.219945][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.253371][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.505864][ T5830] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.724118][ T5830] usb 1-1: device descriptor read/64, error -71 [ 128.751501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 128.800908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 129.097714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 129.213873][ T5830] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.500555][ T5830] usb 1-1: device descriptor read/64, error -71 [ 129.815465][ T5830] usb usb1-port1: attempt power cycle [ 129.986078][ T5950] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3'. [ 130.340433][ T5830] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.397782][ T5830] usb 1-1: device descriptor read/8, error -71 [ 130.830802][ T5830] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 131.113836][ T5830] usb 1-1: device not accepting address 5, error -71 [ 131.221097][ T5830] usb usb1-port1: unable to enumerate USB device [ 132.359463][ T5962] process 'syz.3.8' launched './file0' with NULL argv: empty string added [ 133.011773][ T5886] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 133.336115][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.369050][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.384199][ T5886] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 133.402533][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.455510][ T5886] usb 4-1: config 0 has no interface number 0 [ 133.526698][ T5886] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 133.585524][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.615357][ T5886] usb 4-1: Product: syz [ 133.664065][ T5886] usb 4-1: Manufacturer: syz [ 133.700993][ T5886] usb 4-1: SerialNumber: syz [ 133.795506][ T5886] usb 4-1: config 0 descriptor?? [ 133.959291][ T5969] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 135.223062][ T5886] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 135.301404][ T5886] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 135.402724][ T5886] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 135.470596][ T5886] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 135.535385][ T5886] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 135.701284][ T5886] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 135.799896][ T5886] usb 4-1: USB disconnect, device number 2 [ 136.010524][ T5886] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 136.421477][ T5886] keyspan 4-1:0.133: device disconnected [ 138.918895][ T5997] mmap: syz.2.12 (5997) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 139.375984][ T6002] binder: 5995:6002 ioctl 4018620d 0 returned -22 [ 139.387061][ T6002] binder: 5995:6002 ioctl 4018620d 0 returned -22 [ 139.406114][ T6002] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.190628][ T55] IPVS: starting estimator thread 0... [ 143.601629][ T6026] IPVS: using max 38 ests per chain, 91200 per kthread [ 143.760809][ T55] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 144.440567][ T55] usb 1-1: Using ep0 maxpacket: 32 [ 144.510381][ T55] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.553407][ T55] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 144.615356][ T55] usb 1-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 144.657405][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.754722][ T55] usb 1-1: config 0 descriptor?? [ 145.143803][ T6029] bridge_slave_0: left allmulticast mode [ 145.272774][ T6029] bridge_slave_0: left promiscuous mode [ 145.322436][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.385398][ T6029] bridge_slave_1: left allmulticast mode [ 145.397412][ T6029] bridge_slave_1: left promiscuous mode [ 145.840785][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.212604][ T6029] bond0: (slave bond_slave_0): Releasing backup interface [ 147.121295][ T6041] netlink: 40 bytes leftover after parsing attributes in process `syz.4.22'. [ 147.266621][ T6029] bond0: (slave bond_slave_1): Releasing backup interface [ 147.340260][ T6029] team0: Port device team_slave_0 removed [ 147.701147][ T6029] team0: Port device team_slave_1 removed [ 147.948951][ T6029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.973217][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.985602][ T6029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.021741][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.047242][ T6029] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 148.112856][ T6042] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 148.133753][ T6042] team0: Port device batadv1 added [ 148.277404][ T55] usb 1-1: USB disconnect, device number 6 [ 149.482136][ T6076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.666786][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 150.261701][ T6080] netlink: 'syz.2.30': attribute type 1 has an invalid length. [ 150.553006][ T799] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 150.872053][ T799] usb 5-1: Using ep0 maxpacket: 32 [ 150.933774][ T799] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 150.984316][ T799] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 151.015843][ T799] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 151.168972][ T799] usb 5-1: Product: syz [ 151.238645][ T799] usb 5-1: Manufacturer: syz [ 151.491858][ T799] usb 5-1: SerialNumber: syz [ 151.576014][ T799] usb 5-1: config 0 descriptor?? [ 151.583980][ T6084] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 151.637185][ T799] hub 5-1:0.0: bad descriptor, ignoring hub [ 151.664276][ T799] hub 5-1:0.0: probe with driver hub failed with error -5 [ 151.780528][ T5830] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 152.037013][ T5830] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.063768][ T5830] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 152.145383][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.167137][ T6096] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 152.259606][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'. [ 152.426946][ T5830] usb 3-1: config 0 descriptor?? [ 152.501620][ T5830] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 153.062498][ T55] usb 5-1: USB disconnect, device number 2 [ 153.262325][ T5841] Bluetooth: hci3: Invalid connection link type handle 0x00c9 [ 154.533003][ T5886] usb 3-1: USB disconnect, device number 2 [ 154.854479][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'. [ 154.870499][ T55] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 155.161945][ T55] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 155.266266][ T6130] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[6130] [ 155.277468][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.661352][ T55] usb 5-1: config 0 descriptor?? [ 157.381599][ T6138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.652235][ T6138] netlink: 40 bytes leftover after parsing attributes in process `syz.0.39'. [ 157.852687][ T55] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 157.888113][ T55] [drm:udl_init] *ERROR* Selecting channel failed [ 158.222561][ T55] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 158.263152][ T55] [drm] Initialized udl on minor 2 [ 158.298059][ T55] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 158.367181][ T6147] sctp: [Deprecated]: syz.4.41 (pid 6147) Use of int in maxseg socket option. [ 158.367181][ T6147] Use struct sctp_assoc_value instead [ 158.466483][ T55] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 158.501098][ T55] usb 5-1: USB disconnect, device number 3 [ 158.508552][ T5886] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 158.582088][ T5886] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 159.184476][ T6152] syz.1.40 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 160.190624][ T6158] netlink: 'syz.2.42': attribute type 1 has an invalid length. [ 161.436327][ T6167] Zero length message leads to an empty skb [ 162.680676][ T55] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 163.053104][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.110431][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.230423][ T55] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.268006][ T55] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.288469][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.342236][ T55] usb 2-1: config 0 descriptor?? [ 163.730531][ T6186] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.48'. [ 164.647833][ T55] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 164.986166][ T29] usb 2-1: USB disconnect, device number 2 [ 165.488729][ T6190] fido_id[6190]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 165.923256][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 166.850598][ T55] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 167.114160][ T55] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 167.161899][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 167.341031][ T55] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 167.425903][ T55] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 167.461204][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.490408][ T55] usb 2-1: Product: syz [ 167.515789][ T55] usb 2-1: Manufacturer: syz [ 167.530557][ T55] usb 2-1: SerialNumber: syz [ 167.889884][ T799] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 167.944464][ T55] usb 2-1: config 0 descriptor?? [ 167.963843][ T6203] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.092470][ T799] usb 3-1: not running at top speed; connect to a high speed hub [ 168.117593][ T799] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.388657][ T799] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 168.425825][ T6201] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.476906][ T799] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 168.541165][ T799] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 168.579860][ T799] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.651534][ T799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.701553][ T799] usb 3-1: Product: syz [ 168.731515][ T799] usb 3-1: Manufacturer: syz [ 168.736873][ T799] usb 3-1: SerialNumber: syz [ 169.359411][ T799] usb 3-1: 0:2 : does not exist [ 169.930801][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.56'. [ 170.051900][ T799] usb 3-1: USB disconnect, device number 3 [ 170.889653][ T55] usb 2-1: USB disconnect, device number 3 [ 170.995105][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 171.226642][ T6230] can: request_module (can-proto-3) failed. [ 171.419202][ T6238] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 172.277918][ T6247] netlink: 'syz.4.60': attribute type 4 has an invalid length. [ 172.305278][ T6247] netlink: 'syz.4.60': attribute type 4 has an invalid length. [ 172.750096][ T6229] [U] J"—E:ÀÆ" [ 173.675406][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 173.854331][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 173.921304][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 173.976471][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.292102][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 174.493093][ T24] usb 4-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 174.543477][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.599089][ T24] usb 4-1: Product: syz [ 174.625300][ T24] usb 4-1: Manufacturer: syz [ 174.641819][ T24] usb 4-1: SerialNumber: syz [ 174.699210][ T24] usb 4-1: config 0 descriptor?? [ 175.604911][ T6276] netlink: 'syz.1.63': attribute type 10 has an invalid length. [ 175.826694][ T5915] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 175.864164][ T6276] team0: Device vxcan1 is of different type [ 176.118685][ T6279] xt_TCPMSS: Only works on TCP SYN packets [ 176.164332][ T5915] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.192903][ T5915] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 176.206471][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 176.219198][ T5915] usb 3-1: Product: syz [ 176.224069][ T5915] usb 3-1: Manufacturer: syz [ 176.230445][ T5915] usb 3-1: SerialNumber: syz [ 176.287370][ T55] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 176.543631][ T55] usb 2-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 176.585336][ T55] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 176.639205][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.753340][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.806543][ T5915] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 176.875502][ T55] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.928943][ T55] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 177.000735][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.042845][ T5915] usb 4-1: USB disconnect, device number 3 [ 177.061578][ T55] usb 2-1: config 0 descriptor?? [ 177.460086][ C1] usblp0: nonzero write bulk status received: -71 [ 177.470640][ T5915] usb 3-1: USB disconnect, device number 4 [ 177.498641][ T6286] usblp0: removed [ 177.905121][ T6292] overlayfs: missing 'lowerdir' [ 178.361773][ T55] input: HID 28bd:0909 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0909.0002/input/input5 [ 178.721745][ T55] uclogic 0003:28BD:0909.0002: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.1-1/input0 [ 179.891987][ T5830] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 180.923015][ T5907] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 181.675908][ T5907] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 181.764063][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.814550][ T5907] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 182.176409][ T6326] netlink: 20 bytes leftover after parsing attributes in process `syz.3.73'. [ 182.292278][ T5907] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 182.342291][ T5907] usb 1-1: Manufacturer: syz [ 182.396739][ T5907] usb 1-1: config 0 descriptor?? [ 182.993610][ T5907] usb 1-1: can't set config #0, error -71 [ 183.058855][ T5907] usb 1-1: USB disconnect, device number 7 [ 184.951923][ T6339] can: request_module (can-proto-3) failed. [ 185.080868][ T5915] usb 2-1: USB disconnect, device number 4 [ 185.275921][ T6339] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 185.836293][ T6338] [U] J"—E:ÀÆ" [ 186.021857][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77'. [ 187.071285][ T5915] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 187.249617][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.297029][ T5915] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 187.409517][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 187.475831][ T5915] usb 5-1: Product: syz [ 187.507688][ T5915] usb 5-1: SerialNumber: syz [ 187.529496][ T5915] usb 5-1: config 0 descriptor?? [ 187.708984][ T5915] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 187.778920][ T5915] usb 5-1: Detected SIO [ 187.794410][ T5915] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 187.821886][ T5830] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 187.860038][ T5915] usb 5-1: USB disconnect, device number 4 [ 187.938221][ T5915] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 187.991526][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 188.015816][ T5915] ftdi_sio 5-1:0.0: device disconnected [ 188.028034][ T5830] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.045127][ T5830] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 188.202571][ T5830] usb 3-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 188.268073][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.546081][ T30] audit: type=1326 audit(1772590887.541:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.1.81" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe6f6c code=0x0 [ 188.648135][ T5830] usb 3-1: Product: syz [ 188.666690][ T5830] usb 3-1: Manufacturer: syz [ 188.685434][ T5830] usb 3-1: SerialNumber: syz [ 188.727138][ T5830] usb 3-1: config 0 descriptor?? [ 188.822645][ T6378] x_tables: duplicate underflow at hook 2 [ 188.986359][ T6380] vlan2: entered promiscuous mode [ 188.995818][ T6380] vlan2: entered allmulticast mode [ 189.018154][ T6380] hsr_slave_1: entered allmulticast mode [ 189.312245][ T6386] netlink: 15976 bytes leftover after parsing attributes in process `syz.4.83'. [ 189.518564][ T6380] netlink: 48 bytes leftover after parsing attributes in process `syz.0.82'. [ 189.845302][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'. [ 190.869193][ T6393] Cannot find add_set index 3 as target [ 191.742624][ T6398] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 191.776073][ T6398] netdevsim netdevsim4: Direct firmware load for / [ 191.776073][ T6398] failed with error -2 [ 191.857394][ T6398] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 191.857394][ T6398] [ 191.989573][ T799] usb 3-1: USB disconnect, device number 5 [ 192.649642][ T6395] delete_channel: no stack [ 192.788767][ T6401] netlink: 'syz.0.86': attribute type 6 has an invalid length. [ 192.832241][ T6401] loop6: detected capacity change from 0 to 7 [ 192.973677][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.985211][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.997616][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.010504][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.041336][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.052681][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.063032][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.075614][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.092944][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.107617][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.130260][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.143494][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.191536][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.204680][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.215498][ T6401] ldm_validate_partition_table(): Disk read failed. [ 193.230494][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.242154][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.255926][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.268401][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.290382][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.303184][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.324147][ T6401] Dev loop6: unable to read RDB block 0 [ 193.376815][ T6401] loop6: unable to read partition table [ 193.390921][ T6401] loop6: partition table beyond EOD, truncated [ 193.400694][ T6401] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 193.701454][ T6411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.804452][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.812568][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.900456][ T799] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 196.210570][ T799] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 196.296980][ T799] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 196.392704][ T799] usb 2-1: config 0 interface 0 has no altsetting 0 [ 196.547507][ T6433] hub 9-0:1.0: USB hub found [ 196.583026][ T6433] hub 9-0:1.0: 1 port detected [ 196.793996][ T799] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.125416][ T799] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 197.146809][ T799] usb 2-1: Product: syz [ 197.208231][ T799] usb 2-1: Manufacturer: syz [ 197.213231][ T799] usb 2-1: SerialNumber: syz [ 197.318618][ T799] usb 2-1: config 0 descriptor?? [ 197.413458][ T799] usb 2-1: selecting invalid altsetting 0 [ 198.662408][ T30] audit: type=1326 audit(1772590897.681:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63f6c code=0x7ffc0000 [ 198.905653][ T30] audit: type=1326 audit(1772590897.681:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=40000003 syscall=76 compat=1 ip=0xf7f63f6c code=0x7ffc0000 [ 198.967112][ T30] audit: type=1326 audit(1772590897.681:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63f6c code=0x7ffc0000 [ 199.067062][ T30] audit: type=1326 audit(1772590897.681:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63f6c code=0x7ffc0000 [ 199.203223][ T30] audit: type=1326 audit(1772590897.681:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f63f6c code=0x7ffc0000 [ 199.314969][ T30] audit: type=1326 audit(1772590897.681:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63f6c code=0x7ffc0000 [ 199.462728][ T30] audit: type=1326 audit(1772590897.681:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63f6c code=0x7ffc0000 [ 199.592392][ T30] audit: type=1326 audit(1772590897.681:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7165cab code=0x7ffc0000 [ 199.724423][ T6458] QAT: Invalid ioctl 21531 [ 199.819712][ T30] audit: type=1326 audit(1772590897.731:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7165cab code=0x7ffc0000 [ 199.849527][ T30] audit: type=1326 audit(1772590897.741:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63f6c code=0x7ffc0000 [ 200.022924][ T6462] syz.2.100 uses obsolete (PF_INET,SOCK_PACKET) [ 200.226273][ T6466] Cannot find add_set index 0 as target [ 200.258730][ T5915] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 200.274285][ T6464] netlink: 'syz.0.99': attribute type 4 has an invalid length. [ 200.575002][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 200.693334][ T6438] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 200.753977][ T5915] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 200.770823][ T5830] usb 2-1: USB disconnect, device number 5 [ 200.892817][ T5915] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 201.120549][ T5907] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 201.343935][ T6467] netlink: 203340 bytes leftover after parsing attributes in process `syz.3.97'. [ 201.400460][ T5915] usb 5-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 201.425094][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 201.458991][ T5907] usb 1-1: config 0 has no interfaces? [ 201.502511][ T5915] usb 5-1: config 166 has no interface number 0 [ 201.516404][ T5907] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 201.606877][ T5915] usb 5-1: config 166 has no interface number 1 [ 201.660785][ T5915] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 201.976259][ T5907] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 201.997150][ T5915] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 202.035882][ T5907] usb 1-1: Manufacturer: syz [ 202.049527][ T5915] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 202.059769][ T5907] usb 1-1: config 0 descriptor?? [ 202.070399][ T5830] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 202.188427][ T5915] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 202.294518][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 202.330428][ T5915] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0 [ 202.366725][ T5915] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 0 [ 202.396453][ T5915] usb 5-1: config 166 interface 177 has no altsetting 0 [ 202.410105][ T5830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.474279][ T5915] usb 5-1: config 166 interface 34 has no altsetting 0 [ 202.483748][ T5830] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 202.508017][ T5915] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 202.520599][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.530420][ T5915] usb 5-1: Product: syz [ 202.539283][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.550235][ T5915] usb 5-1: Manufacturer: syz [ 202.584687][ T5915] usb 5-1: SerialNumber: syz [ 202.594898][ T5830] usb 2-1: config 0 descriptor?? [ 202.624534][ T5830] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 203.343940][ T5915] usb 5-1: can't set config #166, error -71 [ 203.359648][ T5915] usb 5-1: USB disconnect, device number 5 [ 204.136607][ T6485] netlink: 'syz.4.103': attribute type 5 has an invalid length. [ 204.331784][ T6485] ip6erspan0: entered promiscuous mode [ 205.637594][ T5915] usb 1-1: USB disconnect, device number 8 [ 205.771812][ T55] usb 2-1: USB disconnect, device number 6 [ 206.846158][ T6498] netlink: 40 bytes leftover after parsing attributes in process `syz.2.105'. [ 206.901242][ T6510] capability: warning: `syz.1.108' uses deprecated v2 capabilities in a way that may be insecure [ 206.915508][ T6513] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 206.997719][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 207.073642][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 207.160459][ T5830] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 207.380537][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 207.438010][ T5830] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 207.496215][ T5830] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 207.528649][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.603545][ T5830] usb 1-1: Product: syz [ 207.623258][ T5830] usb 1-1: Manufacturer: syz [ 207.631726][ T5830] usb 1-1: SerialNumber: syz [ 207.661446][ T5830] usb 1-1: config 0 descriptor?? [ 207.751988][ T5830] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 207.804173][ T5830] usb 1-1: setting power ON [ 207.814081][ T5830] dvb-usb: bulk message failed: -22 (2/0) [ 207.904847][ T5830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 207.939725][ T6497] dvb-usb: bulk message failed: -22 (3/0) [ 207.949953][ T6497] dvb-usb: bulk message failed: -22 (4/0) [ 207.967724][ T5830] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 207.977953][ T6497] cxusb: i2c read failed [ 207.988183][ T5830] usb 1-1: media controller created [ 208.299276][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'. [ 208.335761][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 208.505860][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 208.519781][ T6519] netlink: 320 bytes leftover after parsing attributes in process `syz.4.110'. [ 209.086994][ T5830] usb 1-1: selecting invalid altsetting 6 [ 209.105962][ T5830] usb 1-1: digital interface selection failed (-22) [ 209.121883][ T5830] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 209.200062][ T5830] usb 1-1: setting power OFF [ 209.348501][ T5830] dvb-usb: bulk message failed: -22 (2/0) [ 209.389568][ T5830] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 209.460161][ T5830] (NULL device *): no alternate interface [ 210.055854][ T6527] bond1 (unregistering): Released all slaves [ 210.080430][ T5907] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 210.450438][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 210.476020][ T5907] usb 4-1: config 188 has an invalid descriptor of length 0, skipping remainder of the config [ 210.501829][ T5907] usb 4-1: config 188 has 0 interfaces, different from the descriptor's value: 1 [ 210.567151][ T5907] usb 4-1: New USB device found, idVendor=2040, idProduct=9950, bcdDevice=4f.54 [ 210.576605][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.585945][ T5830] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 210.597536][ T5907] usb 4-1: Product: syz [ 210.597563][ T5907] usb 4-1: Manufacturer: syz [ 210.597578][ T5907] usb 4-1: SerialNumber: syz [ 210.650504][ T5906] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 210.736153][ T5830] usb 1-1: USB disconnect, device number 9 [ 210.828146][ T5906] usb 2-1: config 18 has an invalid interface number: 144 but max is 0 [ 210.962453][ T5906] usb 2-1: config 18 has no interface number 0 [ 210.999533][ T5906] usb 2-1: config 18 interface 144 has no altsetting 0 [ 211.205850][ T5906] usb 2-1: New USB device found, idVendor=04dd, idProduct=9050, bcdDevice=92.5a [ 211.383303][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.456134][ T5906] usb 2-1: Product: syz [ 211.469753][ T5906] usb 2-1: Manufacturer: syz [ 211.518291][ T5906] usb 2-1: SerialNumber: syz [ 211.527270][ T6542] netlink: 'syz.2.116': attribute type 1 has an invalid length. [ 211.557245][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 212.018601][ T5906] usb 2-1: bad CDC descriptors [ 212.106234][ T6548] macsec1: entered promiscuous mode [ 212.124341][ T6548] macsec1: entered allmulticast mode [ 212.222856][ T5906] usb 2-1: USB disconnect, device number 7 [ 213.088316][ T5907] usb 4-1: USB disconnect, device number 4 [ 213.502022][ T5830] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 213.511864][ T5951] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 213.621033][ T6571] netlink: 320 bytes leftover after parsing attributes in process `syz.1.124'. [ 213.665647][ T5841] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 213.680261][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 213.680301][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 213.680315][ T5841] Workqueue: hci4 hci_rx_work [ 213.680355][ T5841] Call Trace: [ 213.680365][ T5841] [ 213.680375][ T5841] dump_stack_lvl+0xe8/0x150 [ 213.680412][ T5841] sysfs_create_dir_ns+0x271/0x2a0 [ 213.680450][ T5841] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 213.680484][ T5841] ? do_raw_spin_unlock+0xf5/0x210 [ 213.680512][ T5841] kobject_add_internal+0x62b/0xd00 [ 213.680549][ T5841] kobject_add+0x163/0x240 [ 213.680582][ T5841] ? __pfx_kobject_add+0x10/0x10 [ 213.680607][ T5841] ? _raw_spin_unlock+0x28/0x50 [ 213.680641][ T5841] ? get_device_parent+0x366/0x3a0 [ 213.680671][ T5841] device_add+0x408/0xb70 [ 213.680699][ T5841] hci_conn_add_sysfs+0xd5/0x210 [ 213.680739][ T5841] le_conn_complete_evt+0xf1d/0x1430 [ 213.680781][ T5841] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 213.680807][ T5841] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 213.680833][ T5841] ? __pfx___mutex_lock+0x10/0x10 [ 213.680856][ T5841] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 213.680877][ T5841] ? skb_pull_data+0xfb/0x200 [ 213.680915][ T5841] hci_le_enh_conn_complete_evt+0x189/0x490 [ 213.680948][ T5841] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 213.680990][ T5841] hci_event_packet+0x7af/0x12c0 [ 213.681020][ T5841] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 213.681047][ T5841] ? __pfx_hci_event_packet+0x10/0x10 [ 213.681074][ T5841] ? kcov_remote_start+0x49a/0x7a0 [ 213.681110][ T5841] ? hci_send_to_monitor+0xe2/0x590 [ 213.681144][ T5841] hci_rx_work+0x3ee/0x1030 [ 213.681174][ T5841] ? process_scheduled_works+0xa25/0x1830 [ 213.681205][ T5841] process_scheduled_works+0xb02/0x1830 [ 213.681266][ T5841] ? __pfx_process_scheduled_works+0x10/0x10 [ 213.681302][ T5841] ? assign_work+0x3d5/0x5e0 [ 213.681337][ T5841] worker_thread+0xa50/0xfc0 [ 213.681397][ T5841] kthread+0x388/0x470 [ 213.681417][ T5841] ? __pfx_worker_thread+0x10/0x10 [ 213.681444][ T5841] ? __pfx_kthread+0x10/0x10 [ 213.681467][ T5841] ret_from_fork+0x51e/0xb90 [ 213.681497][ T5841] ? __pfx_ret_from_fork+0x10/0x10 [ 213.681530][ T5841] ? __switch_to+0xc7d/0x1450 [ 213.681558][ T5841] ? __pfx_kthread+0x10/0x10 [ 213.681583][ T5841] ret_from_fork_asm+0x1a/0x30 [ 213.681634][ T5841] [ 213.972329][ T5841] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 213.990206][ T5841] Bluetooth: hci4: failed to register connection device [ 214.002019][ T5830] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 214.013823][ T5830] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 214.024061][ T5830] usb 3-1: config 0 interface 0 has no altsetting 0 [ 214.060469][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.071864][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.082480][ T5951] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 214.094617][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.107598][ T5951] usb 5-1: config 0 descriptor?? [ 214.113963][ T5830] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 214.130637][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 214.139215][ T5830] usb 3-1: Product: syz [ 214.144193][ T5830] usb 3-1: Manufacturer: syz [ 214.149091][ T5830] usb 3-1: SerialNumber: syz [ 214.202222][ T5830] usb 3-1: config 0 descriptor?? [ 214.287895][ T5830] usb 3-1: selecting invalid altsetting 0 [ 214.648050][ T5951] hid (null): report_id 0 is invalid [ 214.751383][ T5951] hid-steam 0003:28DE:1142.0003: report_id 0 is invalid [ 214.765941][ T5951] hid-steam 0003:28DE:1142.0003: item 0 1 1 8 parsing failed [ 214.841910][ T5951] hid-steam 0003:28DE:1142.0003: steam_probe:parse of hid interface failed [ 214.893446][ T5951] hid-steam 0003:28DE:1142.0003: probe with driver hid-steam failed with error -22 [ 215.076839][ T5951] usb 5-1: USB disconnect, device number 6 [ 216.467240][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 216.835593][ T6619] netlink: 'syz.3.147': attribute type 10 has an invalid length. [ 216.945295][ T6620] netlink: 'syz.3.147': attribute type 10 has an invalid length. [ 216.979702][ T6619] team0: Port device netdevsim0 added [ 217.029239][ T799] usb 3-1: USB disconnect, device number 6 [ 217.104214][ T6620] team0: Port device netdevsim0 removed [ 217.167350][ T6620] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 217.196109][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'. [ 217.303548][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'. [ 217.770507][ T5906] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 217.973238][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.020468][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.053117][ T6656] netlink: 'syz.2.162': attribute type 10 has an invalid length. [ 218.067500][ T6656] team0: Device vxcan1 is of different type [ 218.127778][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.181526][ T6657] netlink: 44 bytes leftover after parsing attributes in process `syz.1.165'. [ 218.190566][ T5906] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.190602][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.226235][ T5906] usb 4-1: config 0 descriptor?? [ 218.410626][ T799] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 218.480414][ T5830] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 218.551546][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 218.570572][ T799] usb 1-1: Using ep0 maxpacket: 8 [ 218.583280][ T799] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 218.632890][ T799] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 218.647841][ T5830] usb 3-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 218.657703][ T5830] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 218.789420][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.807295][ T799] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 218.821342][ T799] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 218.829011][ T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 218.842413][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.888314][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.908518][ T799] usb 1-1: New USB device found, idVendor=07b8, idProduct=b21d, bcdDevice=97.ae [ 218.919753][ T799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.944036][ T9] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 218.951514][ T799] usb 1-1: Product: syz [ 218.956558][ T5906] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 218.967933][ T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 218.980700][ T5906] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 218.988735][ T9] usb 5-1: config 220 has no interface number 2 [ 218.988761][ T799] usb 1-1: Manufacturer: syz [ 219.001767][ T5830] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 219.010996][ T5906] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 219.011077][ T5906] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 219.011104][ T5906] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 219.011132][ T5906] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 219.023007][ T9] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 219.065713][ T5906] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 219.113875][ T9] usb 5-1: config 220 interface 0 has no altsetting 0 [ 219.120893][ T799] usb 1-1: SerialNumber: syz [ 219.133864][ T5906] usb 4-1: USB disconnect, device number 5 [ 219.154199][ T9] usb 5-1: config 220 interface 76 has no altsetting 0 [ 219.158065][ T799] usb 1-1: config 0 descriptor?? [ 219.198544][ T9] usb 5-1: config 220 interface 1 has no altsetting 0 [ 219.224102][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.268455][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 219.286421][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.326708][ T9] usb 5-1: Product: syz [ 219.331376][ T9] usb 5-1: Manufacturer: syz [ 219.346224][ T9] usb 5-1: SerialNumber: syz [ 219.369511][ T5830] usb 3-1: config 0 descriptor?? [ 219.431288][ T5915] usb 1-1: USB disconnect, device number 10 [ 219.630935][ T6669] fido_id[6669]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 219.678878][ T9] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 219.716136][ T9] uvcvideo 5-1:220.0: No valid video chain found. [ 219.767815][ T9] usb 5-1: selecting invalid altsetting 0 [ 219.893602][ T9] usb 5-1: selecting invalid altsetting 0 [ 219.903990][ T5830] input: HID 28bd:0909 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0909.0005/input/input7 [ 219.951059][ T9] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 219.962917][ T5915] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 220.015474][ T9] usb 5-1: USB disconnect, device number 7 [ 220.127040][ T5830] uclogic 0003:28BD:0909.0005: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.2-1/input0 [ 220.190640][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 220.214184][ T5915] usb 1-1: New USB device found, idVendor=9022, idProduct=d421, bcdDevice=fc.77 [ 220.240397][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.285802][ T5915] usb 1-1: Product: syz [ 220.299449][ T5915] usb 1-1: Manufacturer: syz [ 220.315832][ T5915] usb 1-1: SerialNumber: syz [ 220.348187][ T5915] usb 1-1: config 0 descriptor?? [ 220.386504][ T5915] dvb-usb: found a 'TeVii S421 PCI' in warm state. [ 220.411441][ T5915] dw2102: su3000_power_ctrl: 1, initialized 0 [ 220.439726][ T5915] dvb-usb: bulk message failed: -22 (2/0) [ 220.566355][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 220.618217][ T5915] dvbdev: DVB: registering new adapter (TeVii S421 PCI) [ 220.628276][ T5915] usb 1-1: media controller created [ 220.640620][ T5915] dvb-usb: bulk message failed: -22 (6/0) [ 220.660230][ T5915] dw2102: i2c transfer failed. [ 220.720095][ T5915] dvb-usb: bulk message failed: -22 (6/0) [ 220.760126][ T5915] dw2102: i2c transfer failed. [ 220.790021][ T5915] dvb-usb: bulk message failed: -22 (6/0) [ 220.824231][ T5915] dw2102: i2c transfer failed. [ 220.853812][ T5915] dvb-usb: bulk message failed: -22 (6/0) [ 220.874420][ T5915] dw2102: i2c transfer failed. [ 220.901645][ T5915] dvb-usb: bulk message failed: -22 (6/0) [ 220.934500][ T5915] dw2102: i2c transfer failed. [ 220.960163][ T5915] dvb-usb: bulk message failed: -22 (6/0) [ 220.988503][ T5915] dw2102: i2c transfer failed. [ 221.010356][ T5915] dvb-usb: MAC address: 02:02:02:02:02:02 [ 221.126863][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.251216][ T5915] dvb-usb: bulk message failed: -22 (1/0) [ 221.259249][ T5915] dw2102: command 0x51 transfer failed. [ 221.280493][ T5951] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 221.578157][ T5915] DVB: Unable to find symbol m88rs2000_attach() [ 221.597814][ T5915] dvb-usb: no frontend was attached by 'TeVii S421 PCI' [ 221.630493][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 221.820659][ T5915] rc_core: IR keymap rc-su3000 not found [ 221.829358][ T5915] Registered IR keymap rc-empty [ 221.850902][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.878992][ T5915] rc rc0: TeVii S421 PCI as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 221.907912][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.954285][ T5915] input: TeVii S421 PCI as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input8 [ 221.982229][ T29] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 222.008640][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.027504][ T5915] dvb-usb: schedule remote query interval to 150 msecs. [ 222.056809][ T5915] dw2102: su3000_power_ctrl: 0, initialized 1 [ 222.101829][ T29] usb 5-1: config 0 descriptor?? [ 222.107168][ T5915] dvb-usb: TeVii S421 PCI successfully initialized and connected. [ 222.142274][ T29] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 222.172896][ T5915] usb 1-1: USB disconnect, device number 11 [ 222.684459][ T5915] dvb-usb: TeVii S421 PCI successfully deinitialized and disconnected. [ 222.724640][ T5830] usb 3-1: USB disconnect, device number 7 [ 223.090598][ T5915] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 223.272151][ T5915] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 223.283703][ T5915] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 223.301593][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 223.320570][ T5830] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 223.342562][ T5915] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 223.354709][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 223.365853][ T5915] usb 1-1: Product: syz [ 223.375433][ T5915] usb 1-1: Manufacturer: syz [ 223.381776][ T5915] usb 1-1: SerialNumber: syz [ 223.406487][ T5915] usb 1-1: config 0 descriptor?? [ 223.429818][ T5915] usb 1-1: selecting invalid altsetting 0 [ 223.484254][ T5830] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 223.502701][ T5830] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 223.534538][ T5830] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.555579][ T5830] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 223.581528][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.589884][ T5830] usb 4-1: Product: syz [ 223.594948][ T5830] usb 4-1: Manufacturer: syz [ 223.600668][ T5830] usb 4-1: SerialNumber: syz [ 223.716571][ T5830] usblp0: Disabling reads from problematic bidirectional printer [ 223.879476][ T5830] usblp 4-1:4.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 224.125113][ T5830] usb 4-1: USB disconnect, device number 6 [ 224.269966][ T6676] udevd[6676]: setting mode of /dev/usb/lp0 to 020660 failed: No such file or directory [ 224.282679][ T5830] usblp0: removed [ 224.379961][ T6676] udevd[6676]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: No such file or directory [ 225.229874][ T5830] usb 5-1: USB disconnect, device number 8 [ 226.252377][ T5915] usb 1-1: USB disconnect, device number 12 [ 226.584446][ T5830] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 226.766257][ T5830] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.795046][ T5830] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 226.853598][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.906664][ T5830] usb 4-1: config 0 descriptor?? [ 226.943219][ T5830] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 227.353238][ T6805] netlink: 'syz.4.224': attribute type 10 has an invalid length. [ 227.369783][ T6805] team0: Device vxcan1 is of different type [ 227.406812][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 227.600450][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 227.611804][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.623406][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.634611][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.655994][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.686496][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 227.700401][ T5830] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 227.830485][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.935443][ T5830] usb 5-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 227.944570][ T5830] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 227.986490][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.028556][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.062839][ T5830] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.078645][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 228.084575][ T9] usbtmc 3-1:16.0: can't read capabilities [ 228.106625][ T5830] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 228.129672][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.166616][ T5830] usb 5-1: config 0 descriptor?? [ 228.510736][ T5915] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 228.573022][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 228.622803][ T5830] input: HID 28bd:0909 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0909.0006/input/input9 [ 228.640945][ T5951] usb 3-1: USB disconnect, device number 8 [ 228.693812][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.717681][ T5915] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 228.768753][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.804944][ T5915] usb 2-1: config 0 descriptor?? [ 228.810905][ T5830] uclogic 0003:28BD:0909.0006: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.4-1/input0 [ 229.049623][ T6833] netlink: 192 bytes leftover after parsing attributes in process `syz.0.234'. [ 229.090823][ T5830] usb 2-1: USB disconnect, device number 8 [ 229.551835][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 229.651264][ T5830] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 229.771761][ T6841] netlink: 140 bytes leftover after parsing attributes in process `syz.0.237'. [ 229.781337][ T6841] netlink: 36 bytes leftover after parsing attributes in process `syz.0.237'. [ 229.794344][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 229.806070][ T9] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 229.829183][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.916283][ T9] usb 2-1: Product: syz [ 229.922557][ T9] usb 2-1: Manufacturer: syz [ 229.927411][ T9] usb 2-1: SerialNumber: syz [ 229.928790][ T5830] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 229.941609][ T5830] usb 3-1: config 0 has no interface number 0 [ 229.947869][ T5830] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 229.947968][ T9] usb 2-1: config 0 descriptor?? [ 229.965671][ T5907] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 229.985953][ T9] asix 2-1:0.0: probe with driver asix failed with error -22 [ 230.077746][ T9] usb 4-1: USB disconnect, device number 7 [ 230.169871][ T5830] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 230.202226][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.288955][ T5830] usb 3-1: Product: syz [ 230.308180][ T5830] usb 3-1: Manufacturer: syz [ 230.335404][ T5830] usb 3-1: SerialNumber: syz [ 230.388031][ T5951] usb 2-1: USB disconnect, device number 9 [ 230.406120][ T5830] usb 3-1: config 0 descriptor?? [ 230.421592][ T6838] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 230.509605][ T5830] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, be:23:4d:ea:1c:a4 [ 231.309589][ T6853] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 231.317212][ T6853] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 231.362222][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 231.574470][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 231.586846][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 231.634895][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.673885][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 232.160704][ T5907] usb 5-1: device descriptor read/64, error -71 [ 232.429296][ T5951] usb 3-1: USB disconnect, device number 9 [ 232.430726][ T55] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 232.454823][ T5907] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 232.491294][ T5907] usb 5-1: device reset changed ep0 maxpacket size! [ 232.502876][ T5951] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 232.510410][ T9] gspca_nw80x: reg_r err -71 [ 232.544596][ T5886] usb 5-1: USB disconnect, device number 9 [ 232.555580][ T9] nw80x 4-1:3.0: probe with driver nw80x failed with error -71 [ 232.634054][ T9] usb 4-1: USB disconnect, device number 8 [ 232.698762][ T55] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.736642][ T55] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 232.776347][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.797421][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 232.823839][ T5886] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 232.843749][ T6890] hsr_slave_0: left promiscuous mode [ 232.854219][ T55] usb 1-1: config 0 descriptor?? [ 232.880433][ T6890] hsr_slave_1: left promiscuous mode [ 232.897055][ T55] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 233.030398][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 233.039029][ T5886] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 233.077952][ T5886] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 233.103489][ T5886] usb 5-1: config 0 interface 0 has no altsetting 0 [ 233.121939][ T5886] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 233.165945][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.209385][ T5886] usb 5-1: Product: syz [ 233.223011][ T5886] usb 5-1: Manufacturer: syz [ 233.227997][ T5886] usb 5-1: SerialNumber: syz [ 233.257855][ T5886] usb 5-1: config 0 descriptor?? [ 233.262269][ T5951] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 233.423911][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.449459][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.495979][ T5951] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.540527][ T5951] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.557079][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.577689][ T5951] usb 3-1: config 0 descriptor?? [ 233.715845][ T5886] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 233.770678][ T29] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 233.918854][ T5886] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 233.934290][ T5886] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 233.962654][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 233.966603][ T5886] usb 5-1: USB disconnect, device number 10 [ 233.991804][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.004397][ T29] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.022513][ T5951] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 234.030947][ T29] usb 4-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=9a.5e [ 234.054864][ T5951] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 234.077927][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.089226][ T5951] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 234.100849][ T29] usb 4-1: config 0 descriptor?? [ 234.111707][ T5951] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 234.137299][ T5951] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 234.145655][ T5951] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 234.156415][ T5951] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 234.167712][ T5951] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 234.175550][ T5951] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 234.184639][ T5951] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 234.198506][ T5951] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 234.288268][ T9] usb 3-1: USB disconnect, device number 10 [ 234.339978][ T5886] usb 4-1: USB disconnect, device number 9 [ 234.381986][ T6923] fido_id[6923]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 235.570411][ T5886] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 235.599472][ T6965] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 235.760639][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 235.766764][ T6970] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 235.792194][ T5886] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 235.805679][ T6970] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 235.826931][ T5886] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 235.854648][ T6970] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 235.864285][ T5886] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.896302][ T5886] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 235.920354][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 235.929130][ T5886] usb 4-1: Product: syz [ 235.934102][ T5886] usb 4-1: Manufacturer: syz [ 235.938926][ T5886] usb 4-1: SerialNumber: syz [ 235.982371][ T5886] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input10 [ 236.048744][ T9] usb 1-1: USB disconnect, device number 13 [ 236.130445][ T29] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 236.215750][ T55] usb 4-1: USB disconnect, device number 10 [ 236.275601][ T55] appletouch 4-1:1.0: input: appletouch disconnected [ 236.300443][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 236.315991][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.344153][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.366383][ T29] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 236.392416][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.423008][ T29] usb 3-1: config 0 descriptor?? [ 236.443566][ T29] hub 3-1:0.0: USB hub found [ 236.487206][ T6985] netlink: 20 bytes leftover after parsing attributes in process `syz.1.290'. [ 236.524495][ T6985] vlan2: entered promiscuous mode [ 236.530087][ T6985] gretap0: entered promiscuous mode [ 236.650415][ T29] hub 3-1:0.0: 1 port detected [ 236.940706][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 237.089062][ T7000] erspan0: entered promiscuous mode [ 237.122897][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 237.157035][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.194068][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.222186][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 237.260718][ T29] hub 3-1:0.0: activate --> -90 [ 237.279867][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 237.299818][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 237.350228][ T9] usb 2-1: Manufacturer: syz [ 237.363945][ T9] usb 2-1: config 0 descriptor?? [ 237.370528][ T5886] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 237.462624][ T5915] usb 3-1: USB disconnect, device number 11 [ 237.583366][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 237.626716][ T5886] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 237.660509][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.682445][ T5886] usb 5-1: config 0 descriptor?? [ 237.737323][ T5886] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 237.941673][ T9] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 239.460454][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 239.460479][ T30] audit: type=1326 audit(1772590938.481:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.2.308" exe="/root/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf7fe5f6c code=0x0 [ 239.847917][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 239.873492][ T7043] hsr_slave_0: left promiscuous mode [ 239.880233][ T7043] hsr_slave_1: left promiscuous mode [ 239.934331][ T29] usb 2-1: USB disconnect, device number 10 [ 240.000412][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 240.163132][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.177368][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.215852][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 240.232755][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.261518][ T9] usb 1-1: config 0 descriptor?? [ 240.349128][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'. [ 240.692904][ T9] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 240.728110][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0009/input/input11 [ 240.888131][ T7039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.899759][ T7039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.938893][ T9] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 241.004545][ T9] usb 1-1: USB disconnect, device number 14 [ 241.035975][ T5886] usb 5-1: USB disconnect, device number 11 [ 241.059161][ T7068] fido_id[7068]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 241.096724][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880670e9400: rx timeout, send abort [ 241.107327][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880670e9400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 241.600504][ T5951] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 241.782647][ T5951] usb 2-1: Using ep0 maxpacket: 8 [ 241.797239][ T5951] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 241.818390][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.828687][ T5951] usb 2-1: Product: syz [ 241.833869][ T5951] usb 2-1: Manufacturer: syz [ 241.841668][ T5951] usb 2-1: SerialNumber: syz [ 241.849538][ T5951] usb 2-1: config 0 descriptor?? [ 241.863281][ T5951] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 242.290609][ T29] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 242.462202][ T7103] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 242.480944][ T5951] gspca_sonixj: reg_w1 err -71 [ 242.489143][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 242.500523][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 242.510597][ T5951] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 242.521804][ T29] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 242.547557][ T5951] usb 2-1: USB disconnect, device number 11 [ 242.554618][ T29] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.631584][ T29] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 242.656790][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.672124][ T29] usb 1-1: Product: syz [ 242.677982][ T29] usb 1-1: Manufacturer: syz [ 242.680758][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 242.684613][ T29] usb 1-1: SerialNumber: syz [ 242.704290][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 242.713526][ T7105] input: syz0 as /devices/virtual/input/input12 [ 242.721733][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 242.736749][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 242.741796][ T29] hub 1-1:1.0: bad descriptor, ignoring hub [ 242.756370][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 242.765840][ T29] hub 1-1:1.0: probe with driver hub failed with error -5 [ 242.784941][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.799758][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 242.816524][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.925111][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 242.931938][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 242.938309][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 242.950700][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 242.957560][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 243.018922][ T29] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 243.058327][ T9] usb 4-1: usb_control_msg returned -32 [ 243.086474][ T9] usbtmc 4-1:16.0: can't read capabilities [ 243.722096][ T7095] usb 1-1: reset high-speed USB device number 15 using dummy_hcd [ 243.903640][ T7095] usb 1-1: device firmware changed [ 243.924880][ T5951] usb 1-1: USB disconnect, device number 15 [ 243.956290][ T5951] usblp0: removed [ 244.113131][ T5951] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 244.303689][ T5951] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.334324][ T5951] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 244.355971][ T5951] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.389234][ T5951] usb 1-1: string descriptor 0 read error: -22 [ 244.400850][ T5951] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 244.420734][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.468991][ T5951] hub 1-1:1.0: bad descriptor, ignoring hub [ 244.490536][ T5951] hub 1-1:1.0: probe with driver hub failed with error -5 [ 244.694472][ T5951] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 244.713036][ T7143] netlink: 'syz.2.351': attribute type 3 has an invalid length. [ 244.771492][ T5951] usb 1-1: USB disconnect, device number 16 [ 244.790678][ T5951] usblp0: removed [ 244.894178][ T7145] raw_sendmsg: syz.4.353 forgot to set AF_INET. Fix it! [ 245.019213][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 245.160859][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.357'. [ 245.365549][ T9] usb 4-1: USB disconnect, device number 11 [ 245.942510][ T5886] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 246.122400][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 246.147294][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 246.175585][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 246.232654][ T5886] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 246.255207][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.350048][ T5886] usb 3-1: Product: syz [ 246.414910][ T5886] usb 3-1: Manufacturer: syz [ 246.422470][ T5886] usb 3-1: SerialNumber: syz [ 246.437287][ T5886] usb 3-1: config 0 descriptor?? [ 246.445894][ T5886] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 246.459944][ T5886] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 246.610459][ T5951] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 246.771371][ T5951] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 246.791242][ T5951] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.828103][ T5951] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.849389][ T5951] usb 4-1: config 0 interface 0 has no altsetting 0 [ 246.871094][ T5951] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.899602][ T5951] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.945027][ T5951] usb 4-1: config 0 interface 0 has no altsetting 0 [ 246.981857][ T5951] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.991616][ T5951] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.020415][ T5951] usb 4-1: config 0 interface 0 has no altsetting 0 [ 247.040793][ T5951] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.060101][ T5951] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.072912][ T5886] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 247.101810][ T5886] em28xx 3-1:0.0: Config register raw data: 0x9e [ 247.123011][ T5951] usb 4-1: config 0 interface 0 has no altsetting 0 [ 247.146398][ T5951] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.165967][ T5951] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.205706][ T5951] usb 4-1: config 0 interface 0 has no altsetting 0 [ 247.227876][ T5951] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.262071][ T5951] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.360494][ T5951] usb 4-1: config 0 interface 0 has no altsetting 0 [ 247.514290][ T5951] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.523777][ T5951] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.535709][ T5951] usb 4-1: config 0 interface 0 has no altsetting 0 [ 247.544974][ T5951] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.556392][ T5951] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.595286][ T5951] usb 4-1: config 0 interface 0 has no altsetting 0 [ 247.613528][ T5951] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 247.623573][ T5951] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 247.642591][ T5951] usb 4-1: Product: syz [ 247.657411][ T5951] usb 4-1: Manufacturer: syz [ 247.669683][ T5951] usb 4-1: SerialNumber: syz [ 247.698030][ T5951] usb 4-1: config 0 descriptor?? [ 247.742482][ T5951] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 247.743203][ T5886] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 247.787844][ T5886] em28xx 3-1:0.0: No AC97 audio processor [ 247.835511][ T5886] usb 3-1: USB disconnect, device number 12 [ 247.866460][ T5886] em28xx 3-1:0.0: Disconnecting em28xx [ 247.925053][ T5886] em28xx 3-1:0.0: Freeing device [ 248.027427][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 248.028932][ T9] usb 4-1: USB disconnect, device number 12 [ 248.073804][ T9] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 248.440770][ T5915] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 248.620440][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 248.663894][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.690394][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.710473][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 248.726454][ T5915] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 248.761666][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.828362][ T5915] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 248.838638][ T5915] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 248.859330][ T5915] usb 2-1: Manufacturer: syz [ 248.883344][ T5915] usb 2-1: config 0 descriptor?? [ 249.142118][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] SMP KASAN PTI [ 249.154109][ C1] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 249.162588][ C1] CPU: 1 UID: 0 PID: 7232 Comm: syz.4.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.173490][ C1] Tainted: [L]=SOFTLOCKUP [ 249.177901][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.188061][ C1] RIP: 0010:skb_segment+0x2b3f/0x4030 [ 249.193498][ C1] Code: 44 8b bc 24 a0 00 00 00 81 7c 24 1c ff ff 00 00 0f 85 dd e0 ff ff e8 90 02 4f f8 48 8b 04 24 48 8d 58 70 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 1a 09 00 00 44 8b 33 48 8b 9c 24 b0 00 [ 249.213329][ C1] RSP: 0018:ffffc90000a074c8 EFLAGS: 00010202 [ 249.219450][ C1] RAX: 000000000000000e RBX: 0000000000000070 RCX: ffff888029133d00 [ 249.227478][ C1] RDX: 0000000000000100 RSI: ffff88807ba4306e RDI: 000000000000ffff [ 249.235955][ C1] RBP: 000000000000004a R08: ffff888029133d00 R09: 0000000000000002 [ 249.243996][ C1] R10: 000000000000a888 R11: 0000000000000100 R12: dffffc0000000000 [ 249.252032][ C1] R13: 0000000000000000 R14: ffff8880554651f0 R15: 0000000000000003 [ 249.260278][ C1] FS: 0000000000000000(0000) GS:ffff888125564000(0063) knlGS:00000000f53e4b40 [ 249.269372][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 249.276004][ C1] CR2: 00000000f53e3ff4 CR3: 000000007c6f6000 CR4: 00000000003526f0 [ 249.284030][ C1] Call Trace: [ 249.287341][ C1] [ 249.290226][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 249.295274][ C1] tcp_gso_segment+0x424/0x1a40 [ 249.300168][ C1] ? __pfx_tcp_wfree+0x10/0x10 [ 249.305100][ C1] ipv6_gso_segment+0xb38/0x1840 [ 249.310320][ C1] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 249.315949][ C1] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 249.321483][ C1] skb_mac_gso_segment+0x31c/0x690 [ 249.326658][ C1] ? skb_mac_gso_segment+0x182/0x690 [ 249.332386][ C1] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 249.338356][ C1] ? __asan_memset+0x22/0x50 [ 249.343529][ C1] ? qdisc_pkt_len_segs_init+0x4a1/0x970 [ 249.350370][ C1] ? skb_network_protocol+0x23d/0x3f0 [ 249.356000][ C1] __skb_gso_segment+0x376/0x540 [ 249.360999][ C1] validate_xmit_skb+0xa21/0x14a0 [ 249.366240][ C1] __dev_queue_xmit+0x126d/0x3890 [ 249.371328][ C1] ? __dev_queue_xmit+0x277/0x3890 [ 249.376493][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 249.381484][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 249.386979][ C1] ? ip6_output+0x340/0x550 [ 249.391528][ C1] ? ip6_finish_output2+0xb38/0x13e0 [ 249.397225][ C1] ? __asan_memcpy+0x40/0x70 [ 249.401965][ C1] ? ip6_finish_output2+0xd39/0x13e0 [ 249.407537][ C1] ? ip6_output+0x126/0x550 [ 249.412176][ C1] ip6_output+0x340/0x550 [ 249.416562][ C1] ip6_xmit+0x1149/0x1980 [ 249.420949][ C1] ? ip6_xmit+0x283/0x1980 [ 249.425431][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 249.430256][ C1] ? lock_acquire+0xf0/0x2e0 [ 249.435124][ C1] ? __pfx_ip6_dst_check+0x10/0x10 [ 249.440650][ C1] inet6_csk_xmit+0x3bd/0x6c0 [ 249.445374][ C1] ? inet6_csk_xmit+0x110/0x6c0 [ 249.450262][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 249.455614][ C1] __tcp_transmit_skb+0x249b/0x43e0 [ 249.460971][ C1] ? __ia32_compat_sys_recvfrom+0xe4/0x100 [ 249.466841][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 249.472448][ C1] ? tcp_small_queue_check+0x1c1/0x3b0 [ 249.478243][ C1] tcp_write_xmit+0x16e8/0x6980 [ 249.483603][ C1] __tcp_push_pending_frames+0x97/0x380 [ 249.489202][ C1] tcp_rcv_established+0xfd8/0x2740 [ 249.494502][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 249.500712][ C1] ? ip6_dst_check+0xe2/0x7e0 [ 249.505498][ C1] ? ip6_dst_check+0x5e3/0x7e0 [ 249.510495][ C1] ? __pfx_ip6_dst_check+0x10/0x10 [ 249.515655][ C1] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 249.520419][ C1] tcp_v6_rcv+0x2653/0x2f60 [ 249.525084][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 249.529983][ C1] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 249.534787][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 249.540231][ C1] ? raw6_local_deliver+0x116/0x950 [ 249.545656][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 249.550594][ C1] ip6_protocol_deliver_rcu+0xa73/0x1600 [ 249.556305][ C1] ip6_input_finish+0x191/0x370 [ 249.561221][ C1] NF_HOOK+0x336/0x3c0 [ 249.565555][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 249.571053][ C1] ? NF_HOOK+0x9e/0x3c0 [ 249.575239][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 249.579865][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 249.585271][ C1] ip6_input+0x16a/0x270 [ 249.589543][ C1] ? ip6_input+0x23/0x270 [ 249.594025][ C1] NF_HOOK+0x336/0x3c0 [ 249.598244][ C1] ? skb_orphan+0xaf/0xd0 [ 249.602788][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 249.608124][ C1] ? NF_HOOK+0x9e/0x3c0 [ 249.612756][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 249.617386][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 249.622742][ C1] ? process_backlog+0x3eb/0x1950 [ 249.628016][ C1] process_backlog+0x7dd/0x1950 [ 249.633453][ C1] __napi_poll+0xae/0x340 [ 249.637832][ C1] ? skb_defer_free_flush+0x233/0x260 [ 249.643344][ C1] net_rx_action+0x627/0xf70 [ 249.648164][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 249.653424][ C1] handle_softirqs+0x22a/0x870 [ 249.658235][ C1] ? do_softirq+0x76/0xd0 [ 249.662697][ C1] ? sk_wait_data+0x20e/0x4d0 [ 249.667415][ C1] do_softirq+0x76/0xd0 [ 249.671614][ C1] [ 249.674765][ C1] [ 249.677866][ C1] __local_bh_enable_ip+0xf8/0x130 [ 249.683189][ C1] sk_wait_data+0x20e/0x4d0 [ 249.687757][ C1] ? __pfx_sk_wait_data+0x10/0x10 [ 249.692926][ C1] ? __pfx_woken_wake_function+0x10/0x10 [ 249.698598][ C1] ? __tcp_send_ack+0x21a/0x4f0 [ 249.703508][ C1] tcp_recvmsg_locked+0xd71/0x3600 [ 249.708684][ C1] ? stack_depot_save_flags+0x33/0x810 [ 249.714192][ C1] ? kasan_save_track+0x4f/0x80 [ 249.719095][ C1] ? kasan_save_free_info+0x46/0x50 [ 249.724365][ C1] ? kfree+0x1c1/0x630 [ 249.728655][ C1] ? do_fast_syscall_32+0x33/0x70 [ 249.733862][ C1] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 249.739632][ C1] ? file_ioctl+0x273/0x860 [ 249.744323][ C1] ? aa_label_sk_perm+0x532/0x6e0 [ 249.749391][ C1] ? __pfx_file_ioctl+0x10/0x10 [ 249.754310][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 249.759385][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 249.764807][ C1] ? tcp_recvmsg+0x1f2/0x7f0 [ 249.769459][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 249.774890][ C1] tcp_recvmsg+0x213/0x7f0 [ 249.779360][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 249.784608][ C1] ? aa_sk_perm+0x6d5/0x900 [ 249.789321][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 249.794292][ C1] inet6_recvmsg+0x13e/0x6c0 [ 249.798985][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 249.803883][ C1] ? __pfx_inet6_recvmsg+0x10/0x10 [ 249.809139][ C1] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 249.814476][ C1] ? security_socket_recvmsg+0x7e/0x2c0 [ 249.820081][ C1] sock_recvmsg+0x105/0x270 [ 249.824635][ C1] __sys_recvfrom+0x240/0x3c0 [ 249.829362][ C1] ? __pfx___sys_recvfrom+0x10/0x10 [ 249.834671][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.839947][ C1] ? __pfx___ia32_compat_sys_rt_sigprocmask+0x10/0x10 [ 249.846753][ C1] ? exc_page_fault+0x6a/0xc0 [ 249.851483][ C1] __ia32_compat_sys_recvfrom+0xe4/0x100 [ 249.857157][ C1] __do_fast_syscall_32+0x20d/0x640 [ 249.862456][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 249.867781][ C1] ? do_fast_syscall_32+0x33/0x70 [ 249.873011][ C1] ? irqentry_exit+0x10e/0x620 [ 249.877803][ C1] ? trace_irq_disable+0x3b/0x150 [ 249.882961][ C1] do_fast_syscall_32+0x33/0x70 [ 249.887942][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.894307][ C1] RIP: 0023:0xf7f63f6c [ 249.898415][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 249.918053][ C1] RSP: 002b:00000000f53e450c EFLAGS: 00000206 ORIG_RAX: 0000000000000173 [ 249.927064][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 249.935269][ C1] RDX: 00000000fffffd0b RSI: 00000000c9100120 RDI: 0000000000000000 [ 249.943962][ C1] RBP: 00000000fffffd25 R08: 0000000000000000 R09: 0000000000000000 [ 249.952678][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 249.960979][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.969535][ C1] [ 249.973401][ C1] Modules linked in: [ 249.977962][ C1] ---[ end trace 0000000000000000 ]--- [ 249.983536][ C1] RIP: 0010:skb_segment+0x2b3f/0x4030 [ 249.988988][ C1] Code: 44 8b bc 24 a0 00 00 00 81 7c 24 1c ff ff 00 00 0f 85 dd e0 ff ff e8 90 02 4f f8 48 8b 04 24 48 8d 58 70 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 1a 09 00 00 44 8b 33 48 8b 9c 24 b0 00 [ 250.009245][ C1] RSP: 0018:ffffc90000a074c8 EFLAGS: 00010202 [ 250.016101][ C1] RAX: 000000000000000e RBX: 0000000000000070 RCX: ffff888029133d00 [ 250.024504][ C1] RDX: 0000000000000100 RSI: ffff88807ba4306e RDI: 000000000000ffff [ 250.033013][ C1] RBP: 000000000000004a R08: ffff888029133d00 R09: 0000000000000002 [ 250.041063][ C1] R10: 000000000000a888 R11: 0000000000000100 R12: dffffc0000000000 [ 250.049247][ C1] R13: 0000000000000000 R14: ffff8880554651f0 R15: 0000000000000003 [ 250.057984][ C1] FS: 0000000000000000(0000) GS:ffff888125564000(0063) knlGS:00000000f53e4b40 [ 250.067257][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 250.074067][ C1] CR2: 00000000f53e3ff4 CR3: 000000007c6f6000 CR4: 00000000003526f0 [ 250.082874][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 250.091078][ C1] Kernel Offset: disabled [ 250.095439][ C1] Rebooting in 86400 seconds..