last executing test programs: 22.836958084s ago: executing program 2 (id=541): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@struct={0xfffffffd}, @var={0x1, 0x0, 0x0, 0xe, 0x4}]}}, &(0x7f0000000300)=""/209, 0x36, 0xd1, 0x2, 0x0, 0x0, @void, @value}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.578596166s ago: executing program 2 (id=544): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r4 = io_uring_setup(0x6db7, &(0x7f0000000180)) close_range(r4, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 22.256029031s ago: executing program 2 (id=547): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r0, @ANYRES16=r0], 0x1000f) 22.062972921s ago: executing program 2 (id=550): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 20.922391045s ago: executing program 2 (id=554): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000700)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000300)='./file0/../file0\x00') 20.501896868s ago: executing program 2 (id=557): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$kcm(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 12.109459207s ago: executing program 3 (id=592): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x6, 0x4, 0x9, 0xfb, 0x8, 0x501}, 0xc) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r10 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r8, 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r11, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r9, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp6=r2}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000050004000000090005000100060000000d000300686173683a6d616300000000050005000000000014000780080012400005000005"], 0x5c}}, 0x0) 11.38605094s ago: executing program 3 (id=593): syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d00011000000009040000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x30, 0x56a, 0x301, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfd, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0xdf, {0x9, 0x21, 0x7, 0xfe, 0x1, {0x22, 0x3f4}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x6, 0x5}}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}, 0x1, [{0x14, &(0x7f0000000240)=@string={0x14, 0x3, "05988ba924bd45963fab3eeef1bdcff34d1c"}}]}) 9.035203692s ago: executing program 3 (id=599): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x100, 0x0, 0x730, 0xbdff, 0x9, "fdffffffffffffff"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) 8.457756555s ago: executing program 3 (id=602): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="000001000000aa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001040)={0x84, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x5e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.524886499s ago: executing program 0 (id=610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 5.511368643s ago: executing program 1 (id=611): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f81"], 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="a1", 0x1}], 0x1, 0x8, 0x7, 0x4) 4.716299434s ago: executing program 32 (id=557): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$kcm(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 4.548408394s ago: executing program 0 (id=615): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x1c5040, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010100, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_ifreq(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$sock_proto_private(r0, 0xac9, &(0x7f0000006b00)) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = add_key$keyring(&(0x7f0000006e40), &(0x7f0000006e80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000006cc0)='cifs.idmap\x00', &(0x7f0000006d00)={'syz', 0x3}, 0x0, 0x0, r1) 4.348370064s ago: executing program 0 (id=616): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x6, 0x4, 0x9, 0xfb, 0x8, 0x501}, 0xc) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r10 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r8, 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r11, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r9, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp6=r2}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000050004000000090005000100060000000d000300686173683a6d6163000000000500050000000000140007800800124000050000050015000c00"], 0x5c}}, 0x0) 3.672264058s ago: executing program 1 (id=617): ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084504, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ppp(0xffffffffffffff9c, 0x0, 0x20400, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x5, @time={0xb, 0x8}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {0x8}, {0x20}, @raw8={"272be5806cd46d37ea9a65a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x7ffc, 0x8}, {}, {}, @result={0xbac, 0x28}}], 0x68) 2.733315993s ago: executing program 0 (id=618): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d00"], 0x8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x6f, 0x0, 0x0, 0x0, &(0x7f0000546000/0x2000)=nil, 0x2000, 0xe}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) io_uring_enter(r0, 0x47bc, 0x0, 0x24, 0x0, 0x0) 2.731025835s ago: executing program 4 (id=619): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xcc15, @dev, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) close(0x3) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x1ff) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) 2.675430124s ago: executing program 3 (id=620): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_IOCTL(r3, 0x0, 0x0) 1.869558799s ago: executing program 0 (id=621): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x0, r0, 0x2}) sendmsg$kcm(r1, 0x0, 0x44000) r2 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x100000001, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000140)={0x0, 0x30314752, 0x140, 0xb4}) sendmsg$key(r2, 0x0, 0x0) 1.823203698s ago: executing program 4 (id=622): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r3, &(0x7f0000007940), 0x55, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.792757385s ago: executing program 3 (id=623): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 1.752391738s ago: executing program 1 (id=624): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) 1.621706171s ago: executing program 4 (id=625): shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) sendmmsg(r3, &(0x7f0000006400)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000004c0)="6d78ce", 0x3}], 0x1}}], 0x1, 0x40080) splice(r3, 0x0, r2, 0x0, 0x800000000000045, 0x0) 1.500037685s ago: executing program 1 (id=626): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000640)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000a00)={'ip_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000f00)={'ip6_vti0\x00', &(0x7f0000000e80)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x3, 0xc, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x7, 0x5, 0x5}}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmmsg$inet(r0, &(0x7f0000006d00)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000400)="6768c3d642afe6004589124d30570417f61593588dadc0de052073cedd4923896820c02ed68049318c7a3e8a23528cd317633bf5806428094d56158a43a934a005034edc8660", 0x46}, {&(0x7f0000000480)="acebb143eec0e927d35de36ef65e0ce440d694f5733aca86b6a5177071576abdd742ad0511f20f8774a4e5cc9a3d3b4ec113fe66a2e3ee5674297f61a60c7c5e280282332caea9e609dd91f14e79fa0dd7f0576c8447e8ed52167c3f0ea7b3536544ddd2290e3358f457252ed0cbbf6551c18f361642c8370a8d02dd92c79e4a94", 0x81}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c00)="423502c653edf632b4bf935992b27eb90157", 0x12}, {&(0x7f0000000c40)="cadc6ed79fdd008e7c4f43e96678e9", 0xf}, {0x0}, {&(0x7f0000000cc0)="37dc46af7fee61addec3a767d9b86ba0a5b576a3fed2ea2cc8c5b698dff5c0b1", 0x20}, {&(0x7f0000000d00)="bfa28c2707ea32e913e75d150f172fa8218d11517750430d93ef01ec3d7c6341dcd96fca1858b6d58bdeefc21e5af96580e9d3ddf4a018cfc5184794a586b42c85d89b330f", 0x45}, {&(0x7f0000000d80)="6a1cacbf03cb092de42cd63ce5e80aec86e8c7de617d3702a881bc48d2996dbbf68ba3ec324ef76dd44b39a50af4c7b139195a1222f7805428f340cf", 0x3c}], 0x6, &(0x7f0000000f40)}}, {{&(0x7f0000001100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001280)=[{&(0x7f0000001140)="cf9e20f7c69eb3e741b247002fe06bae82411f54e3daede2cdd65e9475efe8073f2e8f319a54e2e6571a0d8bfecbf5c9e54e37451f522e83330fdae987157f4f1645e3cda36086", 0x47}, {&(0x7f00000011c0)="068ba06b1fcb89286c925e1e9fe944698ba0ceb09edd421e3d1e802fc3834608291e42407ee014694be1149e6a29462fc4512c66b2b756ff5afa8818378fded2c933a8b64f1aceb3278ea9c5b7929224c285ce809764660d39a3a1d62d91376e95566b3f904bdec9559dccf4f3e8b8a58c57e9d0b98f56630b45c010bc56717bfafe7d992c1b3608dcc5da8329cd31fca1a732fd536d7248", 0x98}], 0x2, &(0x7f0000001340)}}, {{&(0x7f0000001440)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000045c0)=[{&(0x7f0000001480)="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", 0x7b1}, {&(0x7f0000002480)="9bc7b81304b499e31ddd2e7b04d21bb6532a5dce05bd9fe3c5db209c0f21b87d63a35b5859c012174f0c8c3ea9cf579881299d3c25c7b883678a803474e6ab626097d069756153c5281b4db929cbb5bd1ba8a600acfeb7dd8e4926dd6b3bd61ca38d7ed5abb70631cfa1e1a6574c62ab5b19d34518cc8dfb617071866a7db6897b36be4b028610e8481f7befe36f1a5895c537cde13e308f9876c8bb751cf67db80388997247e163e5894ca467110edb08f6aa4b3695176b0c0f8bfaa674e54bb3d5c3d1ee", 0xc5}, {&(0x7f0000002580)="ba646d847cf706d884f842", 0xb}, {&(0x7f00000025c0)="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", 0xbc0}, {0x0}], 0x5, &(0x7f0000004640)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x5, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) 1.479173195s ago: executing program 4 (id=627): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x6, 0x4, 0x9, 0xfb, 0x8, 0x501}, 0xc) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r10 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r8, 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r11, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r9, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp6=r2}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000050004000000090005000100060000000d000300686173683a6d6163000000000500050000000000140007800800124000050000050015000c00"], 0x5c}}, 0x0) 257.362856ms ago: executing program 4 (id=628): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r0 = syz_open_dev$vivid(&(0x7f0000001040), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000001140)=@multiplanar_mmap={0x2, 0x8, 0x4, 0x1, 0xcb, {}, {0x3, 0x1, 0x8, 0xc9, 0x6d, 0x5, "0d40f36e"}, 0x401, 0x1, {0x0}, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) 256.956672ms ago: executing program 0 (id=629): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) fsopen(&(0x7f0000000500)='pstore\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904fffffd0000000009", @ANYRES64=r4, @ANYRES32=r3], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 87.484596ms ago: executing program 1 (id=630): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) close(r4) 7.861986ms ago: executing program 4 (id=631): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="401401"], 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=632): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x3) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000040)={0xf, 0x400, 0x2, 0x5, 0x2, 0x16, 0x20, "0ef003cdb500e5ae131674636cc82b0c5700", "ef0981ec4bda9676d71bc6d5808a2cff16d4b146"}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000800)='&', 0x1}], 0x1}}], 0x1, 0x2c000011) sendto(r2, 0x0, 0x0, 0x8000, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): etdevsim0 netdevsim2: renamed from eth2 [ 80.210218][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.238926][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.273851][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.302721][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.327788][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.350931][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.374486][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.412732][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.437707][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.495260][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.522883][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.530640][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.564804][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.587713][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.598346][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.642976][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.669288][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.676641][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.696698][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.715168][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.726149][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.733362][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.770856][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.794187][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.801356][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.816577][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.824365][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.853804][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.861081][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.883560][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.890748][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.941677][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.968638][ T5818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.979751][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.151368][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.162431][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.184576][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.191795][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.270696][ T5834] Bluetooth: hci0: command tx timeout [ 81.278041][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.285266][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.326639][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.349934][ T5834] Bluetooth: hci3: command tx timeout [ 81.355413][ T5834] Bluetooth: hci1: command tx timeout [ 81.366744][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.373958][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.417938][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.425162][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.442384][ T5834] Bluetooth: hci4: command tx timeout [ 81.447858][ T55] Bluetooth: hci2: command tx timeout [ 81.491551][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.538968][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.593574][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.633292][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.778277][ T5818] veth0_vlan: entered promiscuous mode [ 81.832832][ T5823] veth0_vlan: entered promiscuous mode [ 81.857123][ T5818] veth1_vlan: entered promiscuous mode [ 81.866395][ T5835] veth0_vlan: entered promiscuous mode [ 81.892830][ T5823] veth1_vlan: entered promiscuous mode [ 81.911741][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.921152][ T5835] veth1_vlan: entered promiscuous mode [ 81.940709][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.040045][ T5818] veth0_macvtap: entered promiscuous mode [ 82.066469][ T5818] veth1_macvtap: entered promiscuous mode [ 82.076224][ T5835] veth0_macvtap: entered promiscuous mode [ 82.103623][ T5835] veth1_macvtap: entered promiscuous mode [ 82.125332][ T5823] veth0_macvtap: entered promiscuous mode [ 82.161905][ T5829] veth0_vlan: entered promiscuous mode [ 82.178257][ T5823] veth1_macvtap: entered promiscuous mode [ 82.223946][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.238135][ T5829] veth1_vlan: entered promiscuous mode [ 82.245477][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.256709][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.267937][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.282374][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.298965][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.312232][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.324293][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.337850][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.347874][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.357344][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.366320][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.386703][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.395836][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.405447][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.414525][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.425354][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.436209][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.446224][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.456953][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.468347][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.492399][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.503760][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.514515][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.525247][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.536092][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.547241][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.557207][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.566095][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.574918][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.702212][ T5825] veth0_vlan: entered promiscuous mode [ 82.708553][ T5829] veth0_macvtap: entered promiscuous mode [ 82.746964][ T5829] veth1_macvtap: entered promiscuous mode [ 82.777058][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.779255][ T5825] veth1_vlan: entered promiscuous mode [ 82.796756][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.855817][ T799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.880835][ T799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.907802][ T5825] veth0_macvtap: entered promiscuous mode [ 82.915130][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.927241][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.937420][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.948152][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.958197][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.968928][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.980966][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.009854][ T799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.020078][ T5825] veth1_macvtap: entered promiscuous mode [ 83.027443][ T799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.049702][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.051858][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.057628][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.078688][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.090139][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.101865][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.112269][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.123161][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.134090][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.163574][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.177803][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.187142][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.197134][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.237293][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.249868][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.299311][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.317620][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.330385][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.342961][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.354684][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.359769][ T55] Bluetooth: hci0: command tx timeout [ 83.364845][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.383376][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.394157][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.404906][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.416263][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.429692][ T55] Bluetooth: hci1: command tx timeout [ 83.435152][ T55] Bluetooth: hci3: command tx timeout [ 83.442724][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.453839][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.467725][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.476012][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.486099][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.497587][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.507620][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.518463][ T55] Bluetooth: hci2: command tx timeout [ 83.525478][ T5834] Bluetooth: hci4: command tx timeout [ 83.531084][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.541006][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.551512][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.562597][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.577480][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.586660][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.595946][ T5825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.606182][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.898488][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.927585][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.960943][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.979738][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.024241][ T5915] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.075541][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.124572][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.191184][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.224753][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.865775][ T5929] tipc: Started in network mode [ 84.871360][ T5929] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 85.201713][ T5929] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 85.212495][ T5929] tipc: Enabled bearer , priority 10 [ 85.524207][ T55] Bluetooth: hci0: command tx timeout [ 85.529788][ T55] Bluetooth: hci3: command tx timeout [ 85.535300][ T55] Bluetooth: hci1: command tx timeout [ 85.709961][ T5834] Bluetooth: hci2: command tx timeout [ 85.715508][ T5834] Bluetooth: hci4: command tx timeout [ 86.331092][ T5873] tipc: Node number set to 1 [ 86.490305][ T5819] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.626300][ T5951] netlink: 64 bytes leftover after parsing attributes in process `syz.4.16'. [ 86.689628][ T5819] usb 4-1: Using ep0 maxpacket: 32 [ 86.717941][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.758387][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.789260][ T5819] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 86.819767][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.875360][ T5819] usb 4-1: config 0 descriptor?? [ 87.339841][ T5905] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.350488][ T5819] greenasia 0003:0E8F:0012.0001: item fetching failed at offset 2/3 [ 87.359084][ T5876] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.376142][ T5819] greenasia 0003:0E8F:0012.0001: parse failed [ 87.458316][ T5819] greenasia 0003:0E8F:0012.0001: probe with driver greenasia failed with error -22 [ 87.526806][ T9] usb 4-1: USB disconnect, device number 2 [ 87.539616][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 87.549522][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.575967][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.605680][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.626886][ T5905] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 87.638312][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.658350][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.666499][ T5876] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 87.688152][ T5905] usb 2-1: config 0 descriptor?? [ 87.695895][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.713738][ T5905] hub 2-1:0.0: USB hub found [ 87.740052][ T5876] usb 3-1: config 0 descriptor?? [ 87.929098][ T5905] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 87.985525][ T5876] usbhid 3-1:0.0: can't add hid device: -71 [ 88.012410][ T5876] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 88.070518][ T5876] usb 3-1: USB disconnect, device number 2 [ 88.146025][ T5905] usbhid 2-1:0.0: can't add hid device: -71 [ 88.155745][ T5905] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 88.210860][ T5905] usb 2-1: USB disconnect, device number 2 [ 88.686186][ T5988] bridge0: entered promiscuous mode [ 88.692174][ T5988] macvlan2: entered promiscuous mode [ 88.707291][ T5988] bridge0: port 3(macvlan2) entered blocking state [ 88.716217][ T5988] bridge0: port 3(macvlan2) entered disabled state [ 88.716645][ T5988] macvlan2: entered allmulticast mode [ 88.716666][ T5988] bridge0: entered allmulticast mode [ 88.729364][ T5988] macvlan2: left allmulticast mode [ 88.729389][ T5988] bridge0: left allmulticast mode [ 88.736632][ T5988] bridge0: left promiscuous mode [ 88.860414][ T5992] random: crng reseeded on system resumption [ 88.899719][ T975] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 89.071281][ T975] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 89.079634][ T975] usb 1-1: config 0 has no interface number 0 [ 89.085873][ T975] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 89.107544][ T975] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 89.129717][ T975] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 89.138844][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.168328][ T975] usb 1-1: config 0 descriptor?? [ 89.178935][ T5982] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 89.202955][ T975] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 89.412477][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 89.422961][ T5905] usb 1-1: USB disconnect, device number 2 [ 89.559741][ T975] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 89.570012][ T5876] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.578491][ T25] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 89.724982][ T975] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.735708][ T975] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 89.739726][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 89.748141][ T975] usb 4-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice= 0.00 [ 89.760939][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 89.764810][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.769221][ T975] usb 4-1: SerialNumber: syz [ 89.780550][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.795186][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.797320][ T975] usb 4-1: config 0 descriptor?? [ 89.805233][ T25] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 89.820215][ T5876] usb 3-1: New USB device found, idVendor=0408, idProduct=3001, bcdDevice= 0.00 [ 89.829311][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.839006][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.855488][ T25] usb 5-1: config 0 descriptor?? [ 89.862373][ T5876] usb 3-1: config 0 descriptor?? [ 89.942361][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.057133][ T5873] usb 4-1: USB disconnect, device number 3 [ 90.109918][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 90.123339][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 90.135816][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.150064][ T9] usb 2-1: Product: syz [ 90.164061][ T9] usb 2-1: Manufacturer: syz [ 90.168758][ T9] usb 2-1: SerialNumber: syz [ 90.194524][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 90.209897][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 90.304445][ T25] chicony 0003:04F2:1236.0003: item fetching failed at offset 4/5 [ 90.314032][ T5876] hid-generic 0003:0408:3001.0002: hidraw0: USB HID v0.00 Device [HID 0408:3001] on usb-dummy_hcd.2-1/input0 [ 90.326869][ T25] chicony 0003:04F2:1236.0003: Chicony hid parse failed: -22 [ 90.337888][ T25] chicony 0003:04F2:1236.0003: probe with driver chicony failed with error -22 [ 90.357508][ T975] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.511042][ T25] usb 3-1: USB disconnect, device number 3 [ 90.523009][ T5876] usb 5-1: USB disconnect, device number 2 [ 90.537722][ T975] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 90.551634][ T975] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 90.564145][ T975] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 90.593776][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.606285][ T6007] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 90.633295][ T9] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 90.646965][ T975] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 90.833258][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 90.905887][ T5876] usb 1-1: USB disconnect, device number 3 [ 91.067800][ T6017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.45'. [ 91.529891][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.920558][ T9] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 91.990132][ T29] audit: type=1326 audit(1739545526.346:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6026 comm="syz.1.49" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b7cf8cde9 code=0x0 [ 92.091060][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.129943][ T9] usb 4-1: Product: syz [ 92.134192][ T9] usb 4-1: Manufacturer: syz [ 92.138829][ T9] usb 4-1: SerialNumber: syz [ 92.177013][ T9] usb 4-1: config 0 descriptor?? [ 92.201264][ T9] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 004 [ 92.254355][ T47] cfg80211: failed to load regulatory.db [ 92.369686][ T5875] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 92.378060][ T6042] use of bytesused == 0 is deprecated and will be removed in the future, [ 92.387571][ T6042] use the actual size instead. [ 92.491518][ T29] audit: type=1326 audit(1739545526.856:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6044 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33edb8cde9 code=0x7ffc0000 [ 92.565684][ T5875] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 92.586141][ T29] audit: type=1326 audit(1739545526.856:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6044 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33edb8cde9 code=0x7ffc0000 [ 92.615343][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.629790][ T9] (null): failure reading functionality [ 92.652873][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 92.667273][ T29] audit: type=1326 audit(1739545526.866:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6044 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33edb8cde9 code=0x7ffc0000 [ 92.690859][ T5875] usb 3-1: config 0 descriptor?? [ 92.694930][ T5824] udevd[5824]: failed to send result of seq 10953 to main daemon: Connection refused [ 92.726834][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.55'. [ 92.739760][ T29] audit: type=1326 audit(1739545526.866:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6044 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33edb8cde9 code=0x7ffc0000 [ 92.820545][ T29] audit: type=1326 audit(1739545526.866:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6044 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33edb8cde9 code=0x7ffc0000 [ 92.927017][ T29] audit: type=1326 audit(1739545526.866:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6044 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33edb8cde9 code=0x7ffc0000 [ 92.969719][ T29] audit: type=1326 audit(1739545526.896:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6044 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33edb8cde9 code=0x7ffc0000 [ 92.994600][ T5876] usb 4-1: USB disconnect, device number 4 [ 93.042504][ T29] audit: type=1326 audit(1739545526.896:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6044 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33edb83da7 code=0x7ffc0000 [ 93.099691][ T29] audit: type=1326 audit(1739545526.896:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6044 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33edb28fb9 code=0x7ffc0000 [ 93.160535][ T5875] [drm:udl_init] *ERROR* Selecting channel failed [ 93.184818][ T5875] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 93.211497][ T5875] [drm] Initialized udl on minor 2 [ 93.218909][ T5875] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 93.300362][ T5875] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 93.329073][ T975] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 93.337819][ T5875] usb 3-1: USB disconnect, device number 4 [ 93.351976][ T975] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 93.433740][ T6060] netlink: 'syz.1.62': attribute type 10 has an invalid length. [ 93.471478][ T6060] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 93.506546][ T6060] Zero length message leads to an empty skb [ 93.521412][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 93.532650][ T6060] netlink: 164 bytes leftover after parsing attributes in process `syz.1.62'. [ 94.838274][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.69'. [ 95.098736][ T47] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 95.259639][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 95.271691][ T47] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.281863][ T47] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.306860][ T47] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.334814][ T47] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.355108][ T47] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.368320][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.857303][ T47] usb 3-1: GET_CAPABILITIES returned 0 [ 95.907186][ T47] usbtmc 3-1:16.0: can't read capabilities [ 96.270574][ T47] usb 3-1: USB disconnect, device number 5 [ 96.309682][ T975] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.440204][ T55] Bluetooth: hci4: unexpected event 0x03 length: 17 > 11 [ 96.440247][ T55] Bluetooth: hci4: Invalid handle: 0x8000 > 0x0eff [ 96.503381][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.519713][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.539053][ T975] usb 5-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 96.549394][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.566862][ T975] usb 5-1: config 0 descriptor?? [ 96.869634][ T5875] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.993774][ T6104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.009944][ T6104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.026977][ T975] wacom 0003:056A:0065.0004: unknown main item tag 0x7 [ 97.034447][ T975] wacom 0003:056A:0065.0004: unknown main item tag 0x4 [ 97.046709][ T5875] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 97.056823][ T975] wacom 0003:056A:0065.0004: Unknown device_type for 'HID 056a:0065'. Assuming pen. [ 97.066528][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.077848][ T975] wacom 0003:056A:0065.0004: hidraw0: USB HID v0.00 Device [HID 056a:0065] on usb-dummy_hcd.4-1/input0 [ 97.089130][ T5875] usb 2-1: Product: syz [ 97.093521][ T5875] usb 2-1: Manufacturer: syz [ 97.098151][ T5875] usb 2-1: SerialNumber: syz [ 97.104936][ T975] input: Wacom Bamboo Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0065.0004/input/input5 [ 97.128555][ T5875] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 97.159911][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 97.240229][ T975] usb 5-1: USB disconnect, device number 3 [ 97.402141][ T8] usb 2-1: USB disconnect, device number 4 [ 97.569639][ T5875] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 97.731203][ T5875] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 97.740669][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.754937][ T5875] usb 3-1: config 0 descriptor?? [ 97.765672][ T5875] cp210x 3-1:0.0: cp210x converter detected [ 97.789928][ T5876] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 97.827060][ T6149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.99'. [ 97.951563][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.951605][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 97.951658][ T5876] usb 4-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 97.951684][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.953937][ T5876] usb 4-1: config 0 descriptor?? [ 98.171158][ T5875] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 98.222365][ T5875] usb 3-1: cp210x converter now attached to ttyUSB0 [ 98.246591][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 98.256916][ T9] ath9k_htc: Failed to initialize the device [ 98.274575][ T8] usb 2-1: ath9k_htc: USB layer deinitialized [ 98.367877][ T5876] wacom 0003:056A:0027.0005: unknown main item tag 0x0 [ 98.380102][ T5876] wacom 0003:056A:0027.0005: unknown main item tag 0x0 [ 98.387287][ T5876] wacom 0003:056A:0027.0005: unknown main item tag 0x0 [ 98.397213][ T6167] netlink: 'syz.0.107': attribute type 10 has an invalid length. [ 98.407315][ T5876] wacom 0003:056A:0027.0005: unknown main item tag 0x0 [ 98.411661][ T5875] usb 3-1: USB disconnect, device number 6 [ 98.427853][ T5875] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 98.433480][ T5876] wacom 0003:056A:0027.0005: unknown main item tag 0x0 [ 98.444799][ T5876] wacom 0003:056A:0027.0005: unknown main item tag 0x0 [ 98.454298][ T5876] wacom 0003:056A:0027.0005: unknown main item tag 0x0 [ 98.462856][ T5876] wacom 0003:056A:0027.0005: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 98.463883][ T5875] cp210x 3-1:0.0: device disconnected [ 98.478008][ T5834] Bluetooth: hci4: command tx timeout [ 98.486100][ T5876] wacom 0003:056A:0027.0005: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.3-1/input0 [ 98.499210][ T5876] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0027.0005/input/input8 [ 98.520066][ T6167] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 98.568915][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 98.581407][ T6167] netlink: 164 bytes leftover after parsing attributes in process `syz.0.107'. [ 98.591264][ T5876] usb 4-1: USB disconnect, device number 5 [ 98.804609][ T6180] veth1_to_team: entered promiscuous mode [ 98.815208][ T6179] veth1_to_team: left promiscuous mode [ 98.929880][ T5875] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.959118][ T9] kernel write not supported for file /sg0 (pid: 9 comm: kworker/0:1) [ 99.053511][ T6190] netlink: 'syz.2.118': attribute type 3 has an invalid length. [ 99.089838][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 99.112434][ T5875] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 99.131476][ T5876] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.139452][ T5875] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 99.156567][ T5875] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.182051][ T5875] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.205391][ T5875] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.216640][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.477839][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 99.814457][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 99.836542][ T5876] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 99.859595][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.871229][ T5875] usb 5-1: GET_CAPABILITIES returned 0 [ 99.876557][ T5876] usb 2-1: config 0 descriptor?? [ 99.886354][ T5875] usbtmc 5-1:16.0: can't read capabilities [ 99.893560][ T5876] gspca_main: sq930x-2.14.0 probing 041e:403c [ 100.044752][ T6204] netlink: 216 bytes leftover after parsing attributes in process `syz.2.122'. [ 100.054399][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.122'. [ 100.063545][ T6204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.122'. [ 100.252270][ T5875] usb 5-1: USB disconnect, device number 4 [ 100.529786][ T47] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 100.717279][ T47] usb 4-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad [ 100.727554][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.774745][ T47] usb 4-1: config 0 descriptor?? [ 100.860499][ T47] gspca_main: tv8532-2.14.0 probing 0545:808b [ 101.405502][ T6220] hugetlbfs: Invalid gid '0x00000000ffffffff' [ 101.990845][ T5876] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 102.423765][ T6222] tipc: Started in network mode [ 102.429386][ T6222] tipc: Node identity 7f000001, cluster identity 4711 [ 102.449094][ T6222] tipc: Enabled bearer , priority 10 [ 103.020576][ T5876] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 103.035599][ T5876] usb 2-1: USB disconnect, device number 5 [ 103.080463][ T6224] netlink: 16 bytes leftover after parsing attributes in process `syz.4.128'. [ 103.560597][ T6227] tipc: Enabled bearer , priority 0 [ 103.896077][ T5876] usb 4-1: USB disconnect, device number 6 [ 103.975376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.979973][ T6239] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.689765][ T5876] tipc: Node number set to 2130706433 [ 104.735569][ T6243] netlink: 20 bytes leftover after parsing attributes in process `syz.1.134'. [ 105.008076][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 105.097873][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.137'. [ 105.204406][ T6252] netlink: 'syz.4.138': attribute type 2 has an invalid length. [ 105.239848][ T5876] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 105.275379][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 105.419354][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short [ 105.434634][ T5876] usb 4-1: config 247 has an invalid interface number: 141 but max is 0 [ 105.444652][ T5876] usb 4-1: config 247 has no interface number 0 [ 105.462999][ T5876] usb 4-1: config 247 interface 141 has no altsetting 0 [ 105.482549][ T6264] netlink: 'syz.1.142': attribute type 10 has an invalid length. [ 105.504503][ T5876] usb 4-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 105.515307][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.525588][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 105.533117][ T5876] usb 4-1: Product: syz [ 105.546662][ T5876] usb 4-1: Manufacturer: syz [ 105.557079][ T5876] usb 4-1: SerialNumber: syz [ 105.740591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.749643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 106.018027][ T5876] hso 4-1:247.141: Not our interface [ 106.125792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.130945][ T5876] usb 4-1: USB disconnect, device number 7 [ 106.228183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 106.510031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.368675][ T5875] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 107.486319][ T6296] tipc: Started in network mode [ 107.491624][ T6296] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 107.501556][ T6296] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 107.510976][ T6296] tipc: Enabled bearer , priority 10 [ 107.560199][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 107.668172][ T5875] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 107.837049][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.047872][ T5875] usb 5-1: Product: syz [ 108.058042][ T5875] usb 5-1: Manufacturer: syz [ 108.088560][ T5875] usb 5-1: SerialNumber: syz [ 108.153377][ T5875] usb 5-1: config 0 descriptor?? [ 108.211806][ T5875] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 108.459736][ T47] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.621310][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 108.629823][ T8] tipc: Node number set to 1 [ 108.631490][ T47] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.654200][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 108.672058][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 108.689309][ T47] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 108.702712][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.934858][ T47] usb 1-1: config 0 descriptor?? [ 108.940968][ T6300] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.949629][ T47] hub 1-1:0.0: USB hub found [ 108.981821][ T5875] gspca_stk1135: reg_w 0x5 err -71 [ 108.988072][ T5875] gspca_stk1135: serial bus timeout: status=0x00 [ 109.016715][ T5875] gspca_stk1135: Sensor write failed [ 109.116732][ T6323] hugetlbfs: Invalid gid '0x00000000ffffffff' [ 109.763314][ T5875] gspca_stk1135: serial bus timeout: status=0x00 [ 109.790384][ T5875] gspca_stk1135: Sensor write failed [ 109.795778][ T5875] gspca_stk1135: serial bus timeout: status=0x00 [ 109.816297][ T5904] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 109.837699][ T5875] gspca_stk1135: Sensor read failed [ 109.848846][ T5875] gspca_stk1135: serial bus timeout: status=0x00 [ 109.868108][ T5875] gspca_stk1135: Sensor read failed [ 109.884080][ T5875] gspca_stk1135: Detected sensor type unknown (0x0) [ 109.911675][ T5875] gspca_stk1135: serial bus timeout: status=0x00 [ 109.930780][ T5875] gspca_stk1135: Sensor read failed [ 109.939627][ T47] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 109.958779][ T5875] gspca_stk1135: serial bus timeout: status=0x00 [ 109.975587][ T5875] gspca_stk1135: Sensor read failed [ 109.985601][ T5875] gspca_stk1135: serial bus timeout: status=0x00 [ 110.008239][ T5875] gspca_stk1135: Sensor write failed [ 110.024146][ T5875] gspca_stk1135: serial bus timeout: status=0x00 [ 110.031549][ T5875] gspca_stk1135: Sensor write failed [ 110.037084][ T5875] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 110.056247][ T5875] usb 5-1: USB disconnect, device number 5 [ 110.121665][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.128402][ T5904] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 110.151948][ T47] usbhid 1-1:0.0: can't add hid device: -71 [ 110.158119][ T47] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 110.168207][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.194262][ T5904] usb 4-1: config 0 descriptor?? [ 110.211543][ T47] usb 1-1: USB disconnect, device number 4 [ 110.489615][ T5875] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 110.649825][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 110.681091][ T5875] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 110.689428][ T5875] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 110.717486][ T5875] usb 5-1: config 0 has no interface number 0 [ 110.723999][ T5875] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.736790][ T5875] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 110.748947][ T5875] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 110.788040][ T5875] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 110.798089][ T5875] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 110.820629][ T5875] usb 5-1: Product: syz [ 110.827721][ T5875] usb 5-1: Manufacturer: syz [ 110.847723][ T5875] usb 5-1: config 0 descriptor?? [ 110.857822][ T6343] netlink: 'syz.2.177': attribute type 10 has an invalid length. [ 110.887057][ T6332] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 110.934787][ T6343] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.987001][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 110.987020][ T29] audit: type=1326 audit(1739545545.356:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6349 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33edb83da7 code=0x7ffc0000 [ 111.018834][ T5904] video4linux radio48: keene_cmd_main failed (-71) [ 111.028420][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 111.048950][ T5904] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 111.057571][ T29] audit: type=1326 audit(1739545545.386:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6349 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33edb28fb9 code=0x7ffc0000 [ 111.087888][ T5904] usb 4-1: USB disconnect, device number 8 [ 111.116315][ T29] audit: type=1326 audit(1739545545.386:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6349 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33edb8cde9 code=0x7ffc0000 [ 111.164087][ T29] audit: type=1326 audit(1739545545.386:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6349 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33edb83da7 code=0x7ffc0000 [ 111.209686][ T47] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 111.240074][ T29] audit: type=1326 audit(1739545545.386:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6349 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33edb28fb9 code=0x7ffc0000 [ 111.276880][ T29] audit: type=1326 audit(1739545545.386:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6349 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33edb8b750 code=0x7ffc0000 [ 111.306500][ T29] audit: type=1326 audit(1739545545.386:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6349 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33edb83da7 code=0x7ffc0000 [ 111.328126][ T29] audit: type=1326 audit(1739545545.386:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6349 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33edb28fb9 code=0x7ffc0000 [ 111.350498][ T29] audit: type=1326 audit(1739545545.386:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6349 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33edb8b750 code=0x7ffc0000 [ 111.374755][ T29] audit: type=1326 audit(1739545545.396:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6349 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33edb83da7 code=0x7ffc0000 [ 111.407474][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.427209][ T47] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 111.438320][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.448992][ T47] usb 2-1: config 0 descriptor?? [ 111.579589][ T5875] usb 5-1: USB disconnect, device number 6 [ 111.900967][ T47] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 111.924809][ T47] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input12 [ 111.969609][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.023648][ T47] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 112.112851][ T6347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.125953][ T6347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.146700][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.157188][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.179676][ T5875] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 112.194495][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 112.194529][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 112.194551][ T8] usb 3-1: SerialNumber: syz [ 112.331848][ T5875] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 112.341282][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.356076][ T5875] usb 4-1: config 0 descriptor?? [ 112.371379][ T5875] cp210x 4-1:0.0: cp210x converter detected [ 112.416407][ T8] usb 3-1: 0:2 : does not exist [ 112.427248][ T6380] netlink: 'syz.0.193': attribute type 10 has an invalid length. [ 112.437065][ T8] usb 3-1: USB disconnect, device number 7 [ 112.464636][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 112.476134][ T6380] netlink: 164 bytes leftover after parsing attributes in process `syz.0.193'. [ 112.500111][ T47] usb 2-1: USB disconnect, device number 6 [ 112.530014][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 112.689876][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 112.715681][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.729091][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 112.746535][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.758851][ T9] usb 5-1: config 0 descriptor?? [ 112.959544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.983654][ T5875] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 113.211827][ T5875] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 113.432715][ T9] mcp2221 0003:04D8:00DD.0007: unbalanced delimiter at end of report description [ 113.442280][ T5875] usb 4-1: cp210x converter now attached to ttyUSB0 [ 113.459941][ T5875] usb 4-1: USB disconnect, device number 9 [ 113.498476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.520332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.585947][ T9] mcp2221 0003:04D8:00DD.0007: can't parse reports [ 113.598645][ T5875] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 113.649617][ T9] mcp2221 0003:04D8:00DD.0007: probe with driver mcp2221 failed with error -22 [ 113.660448][ T5875] cp210x 4-1:0.0: device disconnected [ 113.679215][ T9] usb 5-1: USB disconnect, device number 7 [ 113.768044][ T6400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.845453][ T6421] Illegal XDP return value 4294967283 on prog (id 21) dev syz_tun, expect packet loss! [ 114.859787][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 115.019594][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 115.034446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.091104][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.119539][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 115.260037][ T9] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 115.271782][ T55] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 115.281442][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 115.281485][ T9] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 115.281511][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.283734][ T9] usb 3-1: config 0 descriptor?? [ 115.289339][ T55] Bluetooth: hci3: Injecting HCI hardware error event [ 115.321972][ T55] Bluetooth: hci3: hardware error 0x00 [ 115.393945][ T6430] process 'syz.1.213' launched './file1' with NULL argv: empty string added [ 116.295170][ T6443] netlink: 'syz.0.217': attribute type 10 has an invalid length. [ 116.322819][ T6445] o2cb: This node has not been configured. [ 116.353881][ T6445] o2cb: Cluster check failed. Fix errors before retrying. [ 116.386670][ T6446] tipc: Started in network mode [ 116.392443][ T6446] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 116.402819][ T6446] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 116.412215][ T6446] tipc: Enabled bearer , priority 10 [ 116.476261][ T6445] (syz.4.218,6445,0):user_dlm_register:674 ERROR: status = -22 [ 116.625062][ T9] corsair-cpro 0003:1B1C:0C10.0008: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 116.669434][ T6445] (syz.4.218,6445,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 116.874033][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 116.915653][ T6443] netlink: 164 bytes leftover after parsing attributes in process `syz.0.217'. [ 117.401588][ T9] corsair-cpro 0003:1B1C:0C10.0008: probe with driver corsair-cpro failed with error -110 [ 117.415597][ T9] usb 3-1: USB disconnect, device number 8 [ 117.509662][ T55] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 117.547762][ T8] tipc: Node number set to 1 [ 118.584809][ T6475] syzkaller1: entered promiscuous mode [ 118.610258][ T6475] syzkaller1: entered allmulticast mode [ 118.724628][ T6484] syz.1.232 uses obsolete (PF_INET,SOCK_PACKET) [ 118.906230][ T6487] netlink: 'syz.0.233': attribute type 10 has an invalid length. [ 118.917505][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 118.927393][ T6487] netlink: 164 bytes leftover after parsing attributes in process `syz.0.233'. [ 119.058112][ T6489] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 119.067441][ T6489] tipc: Enabled bearer , priority 10 [ 119.704871][ T5904] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 119.859900][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 119.974694][ T5904] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 120.050823][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.138373][ T5904] usb 3-1: Product: syz [ 120.182136][ T5904] usb 3-1: Manufacturer: syz [ 120.187294][ T5904] usb 3-1: SerialNumber: syz [ 120.288574][ T5904] usb 3-1: config 0 descriptor?? [ 120.432407][ T5904] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 120.442926][ T5904] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 120.518958][ T6503] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.530977][ T6501] netlink: 'syz.1.238': attribute type 10 has an invalid length. [ 120.566475][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 120.610058][ T6501] netlink: 164 bytes leftover after parsing attributes in process `syz.1.238'. [ 120.638736][ T5904] usb 3-1: USB disconnect, device number 9 [ 120.675573][ T6509] CUSE: unknown device info "" [ 120.690264][ T6509] CUSE: zero length info key specified [ 122.731487][ T6542] netlink: 'syz.4.254': attribute type 10 has an invalid length. [ 122.837995][ T6542] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 123.217118][ T6557] netlink: 164 bytes leftover after parsing attributes in process `syz.4.254'. [ 123.794731][ T6559] syzkaller1: entered promiscuous mode [ 123.807902][ T6559] syzkaller1: entered allmulticast mode [ 123.847171][ T6568] syzkaller1: entered promiscuous mode [ 123.855157][ T6568] syzkaller1: entered allmulticast mode [ 124.866074][ T6589] Bluetooth: MGMT ver 1.23 [ 125.178276][ T6597] netlink: 'syz.4.273': attribute type 10 has an invalid length. [ 125.255821][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 125.291419][ T6597] netlink: 164 bytes leftover after parsing attributes in process `syz.4.273'. [ 125.829754][ T975] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 126.013260][ T975] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 126.033210][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.054595][ T975] usb 3-1: Product: syz [ 126.058857][ T975] usb 3-1: Manufacturer: syz [ 126.079643][ T975] usb 3-1: SerialNumber: syz [ 126.086443][ T975] usb 3-1: config 0 descriptor?? [ 126.338392][ T25] usb 3-1: USB disconnect, device number 10 [ 126.829593][ T5904] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.964952][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 126.989601][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 126.997231][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 127.011345][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.038924][ T5904] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.070104][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.103632][ T5904] usb 2-1: config 0 descriptor?? [ 127.149552][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 127.171115][ T25] usb 5-1: config 0 has an invalid interface number: 215 but max is 0 [ 127.184556][ T25] usb 5-1: config 0 has no interface number 0 [ 127.207377][ T25] usb 5-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 127.226977][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.250323][ T25] usb 5-1: Product: syz [ 127.254610][ T25] usb 5-1: Manufacturer: syz [ 127.299546][ T25] usb 5-1: SerialNumber: syz [ 127.319657][ T25] usb 5-1: config 0 descriptor?? [ 127.349360][ T25] io_ti 5-1:0.215: required endpoints missing [ 127.360965][ T5904] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 127.541909][ T5904] usb 5-1: USB disconnect, device number 8 [ 127.614037][ T6650] support for the xor transformation has been removed. [ 127.628302][ T6651] atomic_op ffff88807f291198 conn xmit_atomic 0000000000000000 [ 127.765521][ T5904] usb 2-1: USB disconnect, device number 7 [ 128.759583][ T5904] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 128.923619][ T5904] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 128.943921][ T5904] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.959591][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.977757][ T5904] usb 2-1: Product: syz [ 128.984092][ T5904] usb 2-1: Manufacturer: syz [ 128.988754][ T5904] usb 2-1: SerialNumber: syz [ 129.213940][ T6677] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.509775][ T5876] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 129.529833][ T8] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 129.663946][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.676099][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 129.688475][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 129.706564][ T5876] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 129.717450][ T5834] Bluetooth: hci4: unknown advertising packet type: 0x79 [ 129.718709][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.719156][ T8] usb 4-1: no configurations [ 129.728331][ T5876] usb 5-1: Product: syz [ 129.750618][ T8] usb 4-1: can't read configurations, error -22 [ 129.751136][ T5876] usb 5-1: Manufacturer: syz [ 129.788392][ T5876] usb 5-1: SerialNumber: syz [ 129.796113][ T5876] usb 5-1: config 0 descriptor?? [ 129.814752][ T5876] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 129.834903][ T6677] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 130.045289][ T5904] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 130.046577][ T6707] block device autoloading is deprecated and will be removed. [ 130.053119][ T5904] cdc_ncm 2-1:1.0: dwNtbInMaxSize=9 is too small. Using 2048 [ 130.060697][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 130.068417][ T5904] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 130.092072][ T6707] syz.4.320: attempt to access beyond end of device [ 130.092072][ T6707] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 130.115980][ T975] usb 5-1: USB disconnect, device number 9 [ 130.254207][ T5904] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 130.261803][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.283489][ T5904] cdc_ncm 2-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 130.288813][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.300833][ T5904] usb 2-1: USB disconnect, device number 8 [ 130.314107][ T5904] cdc_ncm 2-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 130.323286][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.323317][ T9] usb 3-1: Product: syz [ 130.323334][ T9] usb 3-1: Manufacturer: syz [ 130.323351][ T9] usb 3-1: SerialNumber: syz [ 130.419907][ T5876] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 130.508814][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 130.581680][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 130.599710][ T5876] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 130.608826][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.621999][ T5876] usb 1-1: config 0 descriptor?? [ 130.643937][ T5876] gspca_main: sq930x-2.14.0 probing 041e:403c [ 130.710996][ T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 130.719740][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.763408][ T6724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.789872][ T6724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.816818][ T6724] bond0 (unregistering): Released all slaves [ 131.456973][ T6738] tipc: Enabling of bearer rejected, already enabled [ 131.559095][ T6739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.330'. [ 132.187715][ T9] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 132.205291][ T9] cdc_ncm 3-1:1.0: dwNtbInMaxSize=20 is too small. Using 2048 [ 132.213013][ T9] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 132.246298][ T9] cdc_ncm 3-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 132.284353][ T9] usb 3-1: USB disconnect, device number 11 [ 132.290447][ T5876] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 132.296735][ T5876] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 132.297325][ T9] cdc_ncm 3-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 132.317794][ T5876] usb 1-1: USB disconnect, device number 5 [ 132.358874][ T6752] loop4: detected capacity change from 0 to 7 [ 132.375309][ T6752] Dev loop4: unable to read RDB block 7 [ 132.387870][ T6752] loop4: unable to read partition table [ 132.394832][ T6752] loop4: partition table beyond EOD, truncated [ 132.402075][ T6752] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 132.464017][ T6755] warning: `syz.1.336' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.750121][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 132.750143][ T29] audit: type=1804 audit(1739545567.116:72): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.339" name="/" dev="pidfs" ino=6763 res=1 errno=0 [ 132.953087][ T35] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 133.192984][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.199984][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.309720][ T5904] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 133.472619][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 133.493205][ T5904] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 133.507131][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.516803][ T5904] usb 4-1: Product: syz [ 133.525883][ T5904] usb 4-1: Manufacturer: syz [ 133.530952][ T5904] usb 4-1: SerialNumber: syz [ 133.539993][ T5904] r8152-cfgselector 4-1: Unknown version 0x0000 [ 133.550950][ T5904] r8152-cfgselector 4-1: config 0 descriptor?? [ 133.967228][ T29] audit: type=1804 audit(1739545568.326:73): pid=6799 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.353" name="/newroot/71/file1/file0" dev="ramfs" ino=11952 res=1 errno=0 [ 134.003029][ T5904] r8152-cfgselector 4-1: USB disconnect, device number 12 [ 134.499809][ T5904] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 134.692616][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.724251][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.741542][ T5904] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 134.759580][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.778183][ T5904] usb 5-1: config 0 descriptor?? [ 134.900395][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.069660][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 135.093091][ T25] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 135.109355][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.129881][ T25] usb 1-1: Product: syz [ 135.134242][ T25] usb 1-1: Manufacturer: syz [ 135.139085][ T25] usb 1-1: SerialNumber: syz [ 135.154042][ T25] usb 1-1: config 0 descriptor?? [ 135.157403][ T6830] loop8: detected capacity change from 0 to 7 [ 135.163625][ T25] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 135.197591][ T5904] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 135.198734][ T6830] Dev loop8: unable to read RDB block 7 [ 135.205965][ T5904] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 135.225637][ T5904] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0009/input/input13 [ 135.237232][ T6830] loop8: unable to read partition table [ 135.237407][ T6830] loop8: partition table beyond EOD, truncated [ 135.264638][ T5904] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 135.269565][ T6830] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 135.269565][ T6830] ) failed (rc=-5) [ 135.405968][ T9] usb 5-1: USB disconnect, device number 10 [ 135.798909][ T6849] netlink: 'syz.1.375': attribute type 1 has an invalid length. [ 135.879895][ T6851] netlink: 'syz.3.376': attribute type 10 has an invalid length. [ 135.944212][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 135.964708][ T6851] netlink: 164 bytes leftover after parsing attributes in process `syz.3.376'. [ 136.414471][ T25] gspca_ov534_9: reg_w failed -71 [ 136.709833][ T25] gspca_ov534_9: Unknown sensor 0000 [ 136.710263][ T25] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 136.733871][ T25] usb 1-1: USB disconnect, device number 6 [ 137.129963][ T975] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 137.305446][ T975] usb 4-1: Using ep0 maxpacket: 16 [ 137.312794][ T975] usb 4-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 137.324673][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24941, setting to 64 [ 137.337436][ T975] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.372135][ T975] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 137.399604][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.421760][ T975] usb 4-1: Product: syz [ 137.426105][ T975] usb 4-1: Manufacturer: syz [ 137.447854][ T975] usb 4-1: SerialNumber: syz [ 137.459041][ T975] usb 4-1: config 0 descriptor?? [ 137.471242][ T975] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 137.689832][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 137.841259][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.869835][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.880429][ T25] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 137.889584][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.901029][ T25] usb 5-1: config 0 descriptor?? [ 137.959681][ T5876] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 138.112091][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.123555][ T5876] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 138.132849][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.145625][ T5876] usb 2-1: config 0 descriptor?? [ 138.259673][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 138.302729][ T975] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 138.368109][ T5876] usbhid 2-1:0.0: can't add hid device: -71 [ 138.375412][ T5876] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 138.386510][ T5876] usb 2-1: USB disconnect, device number 9 [ 138.419991][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 138.434882][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 138.444280][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.452509][ T9] usb 3-1: Product: syz [ 138.456845][ T9] usb 3-1: Manufacturer: syz [ 138.461592][ T9] usb 3-1: SerialNumber: syz [ 138.468370][ T9] usb 3-1: config 0 descriptor?? [ 138.475909][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 138.485270][ T9] usb 3-1: Detected FT232H [ 138.513896][ T8] usb 4-1: USB disconnect, device number 13 [ 138.561658][ T25] hid-led 0003:0FC5:B080.000A: probe with driver hid-led failed with error -71 [ 138.573080][ T25] usb 5-1: USB disconnect, device number 11 [ 138.680319][ T975] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 138.829779][ T5904] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 138.862219][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.873452][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.886921][ T975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.900738][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 138.907756][ T975] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.917014][ T9] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 138.923737][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.932949][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 138.943146][ T975] usb 1-1: config 0 descriptor?? [ 138.954739][ T9] usb 3-1: USB disconnect, device number 12 [ 138.964753][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 138.974513][ T9] ftdi_sio 3-1:0.0: device disconnected [ 138.979839][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 138.987656][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.008387][ T5904] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 139.017583][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.027821][ T5904] usb 2-1: config 0 descriptor?? [ 139.042735][ T5904] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 139.059167][ T5904] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 139.363354][ T975] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 139.371781][ T975] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 139.387422][ T975] plantronics 0003:047F:FFFF.000B: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 139.399761][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 139.468046][ T975] usb 2-1: USB disconnect, device number 10 [ 139.482064][ T975] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 139.549626][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 139.570909][ T25] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 139.579086][ T25] usb 5-1: config 0 has no interface number 0 [ 139.596009][ T25] usb 5-1: config 0 interface 12 has no altsetting 0 [ 139.618290][ T25] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 139.629633][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.647497][ T25] usb 5-1: Product: syz [ 139.659553][ T25] usb 5-1: Manufacturer: syz [ 139.670272][ T25] usb 5-1: SerialNumber: syz [ 139.686077][ T25] usb 5-1: config 0 descriptor?? [ 141.053735][ T6955] trusted_key: syz.2.421 sent an empty control message without MSG_MORE. [ 141.171007][ T6960] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 141.178818][ T6960] overlayfs: failed to set xattr on upper [ 141.219550][ T6960] overlayfs: ...falling back to redirect_dir=nofollow. [ 141.232090][ T25] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 90 failed: -71 [ 141.241270][ T25] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 141.241806][ T6960] overlayfs: ...falling back to index=off. [ 141.249415][ T25] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 141.263785][ T25] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 141.277467][ T25] usb 5-1: USB disconnect, device number 12 [ 141.283267][ T6960] overlayfs: ...falling back to uuid=null. [ 141.289283][ T6960] overlayfs: ...falling back to xino=off. [ 141.454772][ T25] usb 1-1: USB disconnect, device number 7 [ 143.439729][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 143.616449][ T25] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 143.626229][ T975] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 144.118091][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.133200][ T25] usb 5-1: config 0 descriptor?? [ 144.270107][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 144.289386][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.307882][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.326915][ T975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.340333][ T975] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 144.349428][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.359729][ T5904] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 144.390851][ T25] usb 5-1: string descriptor 0 read error: -71 [ 144.408737][ T25] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 144.416559][ T975] usb 3-1: config 0 descriptor?? [ 144.419986][ T25] gspca_sunplus: reg_w_riv err -71 [ 144.441721][ T25] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 144.459845][ T25] usb 5-1: USB disconnect, device number 13 [ 144.529719][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 144.542189][ T5904] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 144.554828][ T5904] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 144.565332][ T5904] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 144.582433][ T5904] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.592147][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 144.622128][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 144.636408][ T5904] usb 2-1: SerialNumber: syz [ 144.720034][ T6996] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 145.340280][ T5904] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 145.380330][ T5904] usb 2-1: USB disconnect, device number 11 [ 145.383449][ T975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 145.407165][ T975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 145.417105][ T975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 145.424587][ T975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 145.432024][ T975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 145.439307][ T975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 145.446719][ T975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 145.460594][ T975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 145.468070][ T975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 145.482695][ T975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 145.497887][ T975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 145.520065][ T975] microsoft 0003:045E:07DA.000C: No inputs registered, leaving [ 145.532096][ T975] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 145.553940][ T975] microsoft 0003:045E:07DA.000C: no inputs found [ 145.560527][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 145.567749][ T975] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 145.578309][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.599193][ T975] usb 3-1: USB disconnect, device number 13 [ 145.605783][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.632284][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.647723][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.656989][ T8] usb 4-1: Product: syz [ 145.662853][ T8] usb 4-1: Manufacturer: syz [ 145.670570][ T8] usb 4-1: SerialNumber: syz [ 145.904759][ T8] usb 4-1: 0:2 : does not exist [ 145.921721][ T8] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 145.941202][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 145.961812][ T8] usb 4-1: USB disconnect, device number 14 [ 146.129777][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 146.167176][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 146.176489][ T9] usb 1-1: config 0 has no interface number 0 [ 146.193927][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 146.229743][ T9] usb 1-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 146.252705][ T9] usb 1-1: Product: syz [ 146.256951][ T9] usb 1-1: Manufacturer: syz [ 146.267631][ T9] usb 1-1: SerialNumber: syz [ 146.275178][ T9] usb 1-1: config 0 descriptor?? [ 146.282517][ T9] smsc95xx v2.0.0 [ 147.451039][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'. [ 147.469668][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 147.480798][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 147.729864][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 147.749733][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 147.780360][ T9] usb 1-1: USB disconnect, device number 8 [ 147.809628][ T5905] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 147.896218][ T7055] netlink: 216 bytes leftover after parsing attributes in process `syz.1.457'. [ 147.921795][ T7055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.457'. [ 147.950237][ T7055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.457'. [ 147.999653][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 148.006790][ T5905] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 148.026293][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.059580][ T5905] usb 4-1: config 0 has no interface number 0 [ 148.065760][ T5905] usb 4-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.099058][ T5905] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 148.112750][ T7057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.458'. [ 148.119578][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.140116][ T5905] usb 4-1: Product: syz [ 148.144361][ T5905] usb 4-1: Manufacturer: syz [ 148.149009][ T5905] usb 4-1: SerialNumber: syz [ 148.176081][ T5905] usb 4-1: config 0 descriptor?? [ 148.341868][ T7063] capability: warning: `syz.4.463' uses deprecated v2 capabilities in a way that may be insecure [ 149.262703][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.464668][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.617602][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.820225][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.899555][ T5905] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 150.069757][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 150.083230][ T5905] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 150.110893][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.119156][ T5905] usb 5-1: Product: syz [ 150.129856][ T11] bridge_slave_1: left allmulticast mode [ 150.156414][ T11] bridge_slave_1: left promiscuous mode [ 150.160863][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.162585][ T5905] usb 5-1: Manufacturer: syz [ 150.177861][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.178907][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.196476][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.203715][ T5905] usb 5-1: SerialNumber: syz [ 150.209114][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.217354][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.217842][ T5905] usb 5-1: config 0 descriptor?? [ 150.230039][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.274516][ T11] bridge_slave_0: left allmulticast mode [ 150.289693][ T11] bridge_slave_0: left promiscuous mode [ 150.295544][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.369577][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 150.507515][ T5905] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 150.519254][ T975] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 150.569172][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 150.581661][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.599569][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.611115][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 150.621012][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.637789][ T9] usb 3-1: config 0 descriptor?? [ 150.647870][ T5904] usb 4-1: USB disconnect, device number 15 [ 150.710483][ T975] usb 1-1: Using ep0 maxpacket: 32 [ 150.721407][ T975] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 150.739645][ T975] usb 1-1: config 0 has no interface number 0 [ 150.745864][ T975] usb 1-1: config 0 interface 12 has no altsetting 0 [ 150.758494][ T975] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 150.767836][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.778171][ T975] usb 1-1: Product: syz [ 150.782572][ T975] usb 1-1: Manufacturer: syz [ 150.787298][ T975] usb 1-1: SerialNumber: syz [ 150.794594][ T975] usb 1-1: config 0 descriptor?? [ 150.983269][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.999029][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.014292][ T11] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 151.031265][ T11] bond0 (unregistering): Released all slaves [ 151.078246][ T9] wacom 0003:056A:0325.000D: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.2-1/input0 [ 151.141731][ T11] tipc: Disabling bearer [ 151.159011][ T11] tipc: Left network mode [ 151.279779][ T9] usb 3-1: USB disconnect, device number 14 [ 151.769198][ T11] hsr_slave_0: left promiscuous mode [ 151.855058][ T11] hsr_slave_1: left promiscuous mode [ 152.000053][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.116715][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.236301][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.267946][ T5905] gspca_sunplus: reg_w_riv err -71 [ 152.273312][ T5905] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 152.283264][ T5905] usb 5-1: USB disconnect, device number 14 [ 152.294521][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.310486][ T55] Bluetooth: hci1: command tx timeout [ 152.404553][ T11] veth1_macvtap: left promiscuous mode [ 152.411663][ T11] veth0_macvtap: left promiscuous mode [ 152.417397][ T11] veth1_vlan: left promiscuous mode [ 152.423295][ T11] veth0_vlan: left promiscuous mode [ 152.584108][ T975] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 152.606264][ T975] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 152.634672][ T975] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 152.650863][ T975] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 152.676628][ T975] usb 1-1: USB disconnect, device number 9 [ 153.074036][ T7132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.114158][ T7132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.254677][ T7134] dccp_close: ABORT with 28 bytes unread [ 153.689082][ T11] team0 (unregistering): Port device team_slave_1 removed [ 153.766081][ T11] team0 (unregistering): Port device team_slave_0 removed [ 154.057552][ T7146] netlink: 40 bytes leftover after parsing attributes in process `syz.3.490'. [ 154.408110][ T55] Bluetooth: hci1: command tx timeout [ 155.284347][ T7093] chnl_net:caif_netlink_parms(): no params data found [ 155.304617][ T7137] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.574421][ T7160] netlink: 'syz.3.495': attribute type 10 has an invalid length. [ 155.650258][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 155.666855][ T7160] netlink: 164 bytes leftover after parsing attributes in process `syz.3.495'. [ 155.731095][ T7093] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.748757][ T7093] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.789882][ T7093] bridge_slave_0: entered allmulticast mode [ 155.797083][ T7093] bridge_slave_0: entered promiscuous mode [ 155.823552][ T7093] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.843352][ T7093] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.863434][ T7093] bridge_slave_1: entered allmulticast mode [ 155.880839][ T7093] bridge_slave_1: entered promiscuous mode [ 155.957525][ T7166] kvm: pic: level sensitive irq not supported [ 155.957935][ T7166] kvm: pic: non byte read [ 156.011520][ T7093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.034089][ T7093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.158045][ T7093] team0: Port device team_slave_0 added [ 156.213558][ T7093] team0: Port device team_slave_1 added [ 156.503977][ T55] Bluetooth: hci1: command tx timeout [ 156.931410][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.066453][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.113266][ T7093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.138749][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.148496][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.188046][ T7093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.660882][ T7093] hsr_slave_0: entered promiscuous mode [ 157.667858][ T7093] hsr_slave_1: entered promiscuous mode [ 157.675046][ T7093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.696975][ T7093] Cannot create hsr debugfs directory [ 157.849803][ T25] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 158.011297][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.022670][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.047829][ T25] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 158.057966][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.083256][ T25] usb 1-1: config 0 descriptor?? [ 158.181735][ T7127] Set syz1 is full, maxelem 65536 reached [ 158.478893][ T7093] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 158.493137][ T7093] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.505400][ T7093] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.518992][ T7093] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.549742][ T55] Bluetooth: hci1: command tx timeout [ 158.637799][ T7093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.667647][ T7093] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.687738][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.694957][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.714086][ T25] usb 1-1: string descriptor 0 read error: -22 [ 158.743507][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.750740][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.907858][ T25] uclogic 0003:256C:006D.000E: interface is invalid, ignoring [ 159.114018][ T7093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.128813][ T975] usb 1-1: USB disconnect, device number 10 [ 159.203948][ T7093] veth0_vlan: entered promiscuous mode [ 159.225056][ T7093] veth1_vlan: entered promiscuous mode [ 159.273766][ T7093] veth0_macvtap: entered promiscuous mode [ 159.285517][ T7093] veth1_macvtap: entered promiscuous mode [ 159.289854][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 159.305770][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.316871][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.327820][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.338498][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.354638][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.365272][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.375482][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.386381][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.397953][ T7093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.425479][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.443378][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.454207][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.464941][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.469825][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 159.475226][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.492182][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.492260][ T8] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 159.508921][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.521336][ T8] usb 5-1: config 0 has no interface number 0 [ 159.530647][ T8] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.536197][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.543896][ T8] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 159.558734][ T7093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.560132][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.575577][ T8] usb 5-1: Product: syz [ 159.580418][ T8] usb 5-1: Manufacturer: syz [ 159.585193][ T8] usb 5-1: SerialNumber: syz [ 159.593576][ T8] usb 5-1: config 0 descriptor?? [ 159.597160][ T7093] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.603608][ T8] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 159.618362][ T8] em28xx 5-1:0.132: Video interface 132 found: [ 159.629570][ T7093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.639059][ T7093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.651594][ T7093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.821674][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.850011][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.931617][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.951178][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.007768][ T8] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 160.200687][ T7228] netlink: 'syz.0.519': attribute type 9 has an invalid length. [ 160.457911][ T5874] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 160.541968][ T8] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 160.756050][ T8] em28xx 5-1:0.132: board has no eeprom [ 160.800070][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 160.831709][ T5874] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 160.857142][ T5874] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 160.866287][ T8] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 160.883187][ T5874] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 160.893503][ T8] em28xx 5-1:0.132: analog set to bulk mode. [ 160.902859][ T5873] em28xx 5-1:0.132: Registering V4L2 extension [ 160.910971][ T5874] usb 4-1: config 250 has no interface number 0 [ 160.917959][ T5874] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 160.957782][ T5874] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 160.981274][ T5874] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 48057, setting to 1024 [ 161.022628][ T5874] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 161.057074][ T5874] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 161.091863][ T5874] usb 4-1: config 250 interface 228 has no altsetting 0 [ 161.101598][ T5873] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 161.101978][ T25] usb 5-1: USB disconnect, device number 15 [ 161.132167][ T5873] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 161.157716][ T5873] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 161.167052][ T5874] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 161.183694][ T25] em28xx 5-1:0.132: Disconnecting em28xx [ 161.209630][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 161.218722][ T5874] usb 4-1: Product: syz [ 161.223061][ T5874] usb 4-1: SerialNumber: syz [ 161.255091][ T5874] hub 4-1:250.228: bad descriptor, ignoring hub [ 161.261628][ T5874] hub 4-1:250.228: probe with driver hub failed with error -5 [ 161.393855][ T5873] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 161.401446][ T5873] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 161.408637][ T5873] em28xx 5-1:0.132: No AC97 audio processor [ 161.436114][ T5873] usb 5-1: Decoder not found [ 161.449609][ T5873] em28xx 5-1:0.132: failed to create media graph [ 161.464350][ T5874] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 161.474468][ T7242] @: renamed from vlan0 (while UP) [ 161.478417][ T5873] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 161.506179][ T5873] em28xx 5-1:0.132: Remote control support is not available for this card. [ 161.531466][ T25] em28xx 5-1:0.132: Closing input extension [ 161.573619][ T25] em28xx 5-1:0.132: Freeing device [ 161.676618][ T55] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 161.890235][ T25] usb 4-1: USB disconnect, device number 16 [ 161.911657][ T25] usblp0: removed [ 161.995422][ T29] audit: type=1326 audit(1739545596.362:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7249 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33edb8cde9 code=0x7ffc0000 [ 162.033504][ T29] audit: type=1326 audit(1739545596.362:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7249 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33edb8cde9 code=0x7ffc0000 [ 162.048684][ T7253] netlink: 84 bytes leftover after parsing attributes in process `syz.1.528'. [ 162.064888][ T29] audit: type=1326 audit(1739545596.362:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7249 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f33edb8cde9 code=0x7ffc0000 [ 162.097584][ T29] audit: type=1326 audit(1739545596.362:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7249 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33edb8cde9 code=0x7ffc0000 [ 162.175453][ T29] audit: type=1326 audit(1739545596.362:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7249 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33edb8cde9 code=0x7ffc0000 [ 162.203174][ T29] audit: type=1326 audit(1739545596.372:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7249 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f33edb8cde9 code=0x7ffc0000 [ 162.229354][ T29] audit: type=1326 audit(1739545596.522:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7249 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33edb8cde9 code=0x7ffc0000 [ 162.252518][ T29] audit: type=1326 audit(1739545596.522:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7249 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33edb8cde9 code=0x7ffc0000 [ 162.274149][ T29] audit: type=1326 audit(1739545596.522:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7249 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33edb8cde9 code=0x7ffc0000 [ 162.295644][ T29] audit: type=1326 audit(1739545596.522:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7249 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33edb8cde9 code=0x7ffc0000 [ 163.230049][ T5905] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 163.370464][ T975] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 163.404796][ T5905] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 163.414229][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.422938][ T5905] usb 5-1: Product: syz [ 163.427690][ T5905] usb 5-1: Manufacturer: syz [ 163.436563][ T5905] usb 5-1: SerialNumber: syz [ 163.451815][ T5905] usb 5-1: config 0 descriptor?? [ 163.536113][ T7295] wg2: entered promiscuous mode [ 163.554249][ T975] usb 1-1: Using ep0 maxpacket: 32 [ 163.566342][ T7295] wg2: entered allmulticast mode [ 163.575997][ T975] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 163.604177][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.632866][ T975] usb 1-1: Product: syz [ 163.637117][ T975] usb 1-1: Manufacturer: syz [ 163.652405][ T975] usb 1-1: SerialNumber: syz [ 163.665913][ T975] usb 1-1: config 0 descriptor?? [ 163.677381][ T975] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 163.677418][ T5905] hso 5-1:0.0: Failed to find INT IN ep [ 163.700967][ T5905] usb-storage 5-1:0.0: USB Mass Storage device detected [ 164.119593][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'. [ 164.282921][ T5905] usb 5-1: USB disconnect, device number 16 [ 164.759609][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 164.922681][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 164.943653][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 164.968840][ T25] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 165.010042][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.020799][ T25] usb 2-1: Product: syz [ 165.048984][ T7329] cgroup: fork rejected by pids controller in /syz4 [ 165.050839][ T25] usb 2-1: Manufacturer: syz [ 165.079551][ T25] usb 2-1: SerialNumber: syz [ 165.084341][ T7329] [ 165.095426][ T25] usb 2-1: config 0 descriptor?? [ 165.105716][ T25] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 165.139573][ T25] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 165.359414][ T975] gspca_ov534_9: reg_r err -71 [ 165.669677][ T975] gspca_ov534_9: Unknown sensor 0000 [ 165.669785][ T975] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 165.693471][ T975] usb 1-1: USB disconnect, device number 11 [ 165.722098][ T25] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 165.751159][ T55] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 165.769748][ T55] Bluetooth: hci0: Injecting HCI hardware error event [ 165.778986][ T5834] Bluetooth: hci0: hardware error 0x00 [ 165.862036][ T1092] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.027904][ T1092] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.208649][ T1092] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.270140][ T5905] kernel write not supported for file bpf-prog (pid: 5905 comm: kworker/1:7) [ 166.331031][ T1092] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.547360][ T1092] bridge_slave_1: left allmulticast mode [ 166.555286][ T1092] bridge_slave_1: left promiscuous mode [ 166.562073][ T25] em28xx 2-1:0.0: write to i2c device at 0xa0 failed with unknown error (status=1) [ 166.568045][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.579602][ T25] em28xx 2-1:0.0: failed to read eeprom (err=-5) [ 166.591199][ T25] em28xx 2-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 166.601965][ T1092] bridge_slave_0: left allmulticast mode [ 166.607666][ T1092] bridge_slave_0: left promiscuous mode [ 166.624876][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.753754][ T7343] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 166.788304][ T7343] kvm: pic: non byte read [ 166.809571][ T25] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 166.819611][ T25] em28xx 2-1:0.0: dvb set to bulk mode. [ 166.825492][ T5905] em28xx 2-1:0.0: Binding DVB extension [ 166.844418][ T25] usb 2-1: USB disconnect, device number 12 [ 167.409283][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.447607][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.458235][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.487145][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.505162][ T5822] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.513351][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.552521][ T25] em28xx 2-1:0.0: Disconnecting em28xx [ 167.582522][ T5905] em28xx 2-1:0.0: Registering input extension [ 167.591874][ T25] em28xx 2-1:0.0: Closing input extension [ 167.613897][ T25] em28xx 2-1:0.0: Freeing device [ 167.910379][ T5834] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 168.081234][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.105138][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.124509][ T1092] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 168.145196][ T1092] bond0 (unregistering): Released all slaves [ 168.387424][ T1092] tipc: Disabling bearer [ 168.399933][ T1092] tipc: Disabling bearer [ 168.458403][ T1092] tipc: Disabling bearer [ 168.475482][ T1092] tipc: Left network mode [ 168.767733][ T7377] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 168.946066][ T7349] chnl_net:caif_netlink_parms(): no params data found [ 169.132471][ T7381] netlink: 'syz.3.570': attribute type 10 has an invalid length. [ 169.142658][ T1092] hsr_slave_0: left promiscuous mode [ 169.160939][ T1092] hsr_slave_1: left promiscuous mode [ 169.177874][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.199630][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.238787][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.246900][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.329746][ T1092] veth1_macvtap: left promiscuous mode [ 169.335369][ T1092] veth0_macvtap: left promiscuous mode [ 169.369658][ T1092] veth1_vlan: left promiscuous mode [ 169.375052][ T1092] veth0_vlan: left promiscuous mode [ 169.589970][ T5834] Bluetooth: hci2: command tx timeout [ 170.049777][ T5874] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 170.218676][ T5874] usb 2-1: config 0 has an invalid interface number: 149 but max is 0 [ 170.227400][ T5874] usb 2-1: config 0 has no interface number 0 [ 170.237593][ T5874] usb 2-1: New USB device found, idVendor=0cf3, idProduct=b003, bcdDevice=f0.4d [ 170.254783][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.270718][ T5874] usb 2-1: config 0 descriptor?? [ 170.277484][ T5874] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 170.325846][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 170.371861][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 170.489844][ T5874] usb 2-1: USB disconnect, device number 13 [ 170.865376][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'. [ 170.968039][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.977497][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.984869][ T7349] bridge_slave_0: entered allmulticast mode [ 170.993353][ T7349] bridge_slave_0: entered promiscuous mode [ 171.002506][ T7349] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.009909][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.027448][ T7349] bridge_slave_1: entered allmulticast mode [ 171.038579][ T7349] bridge_slave_1: entered promiscuous mode [ 171.159403][ T7349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.162060][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 171.162079][ T29] audit: type=1326 audit(1739545605.532:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7405 comm="syz.1.576" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f502218cde9 code=0x0 [ 171.207289][ T7349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.311051][ T7349] team0: Port device team_slave_0 added [ 171.328759][ T7349] team0: Port device team_slave_1 added [ 171.670422][ T5834] Bluetooth: hci2: command tx timeout [ 172.022271][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.029652][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.066180][ T7349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.154176][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.199533][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.288233][ T7349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.978493][ T7349] hsr_slave_0: entered promiscuous mode [ 172.985991][ T7349] hsr_slave_1: entered promiscuous mode [ 172.996906][ T7349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.004914][ T7349] Cannot create hsr debugfs directory [ 173.657881][ T7440] mmap: syz.3.588 (7440) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 173.751528][ T5834] Bluetooth: hci2: command tx timeout [ 173.769587][ T5905] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 173.917274][ T7349] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.931907][ T5905] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 173.944598][ T7349] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.956319][ T5905] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 173.969701][ T5905] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 173.982136][ T7349] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.990014][ T5905] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 174.001245][ T5905] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 174.018259][ T7349] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.027375][ T5905] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 174.037503][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 174.045861][ T5905] usb 2-1: Product: syz [ 174.050266][ T5905] usb 2-1: Manufacturer: syz [ 174.064173][ T5905] cdc_wdm 2-1:1.0: skipping garbage [ 174.610107][ T7449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.592'. [ 174.642175][ T5905] cdc_wdm 2-1:1.0: skipping garbage [ 174.663739][ T5905] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 174.677399][ T5905] cdc_wdm 2-1:1.0: Unknown control protocol [ 174.718735][ T5905] usb 2-1: USB disconnect, device number 14 [ 174.771243][ T7349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.802676][ T7349] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.843976][ T7349] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.855413][ T7349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.897518][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.904760][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.926494][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.933737][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.999635][ T47] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 175.070828][ T5905] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 175.111239][ T7349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.159663][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 175.168305][ T47] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 175.190824][ T47] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 175.209004][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.241855][ T5905] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 175.259671][ T5905] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 175.270307][ T5905] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 175.279639][ T5905] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 175.291955][ T5905] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 175.306806][ T5905] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 175.354597][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 175.368797][ T5905] usb 2-1: Product: syz [ 175.379359][ T5905] usb 2-1: Manufacturer: syz [ 175.396120][ T5905] cdc_wdm 2-1:1.0: skipping garbage [ 175.404054][ T5905] cdc_wdm 2-1:1.0: skipping garbage [ 175.498210][ T7473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.508668][ T7473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.695141][ T5905] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 175.719659][ T5905] cdc_wdm 2-1:1.0: Unknown control protocol [ 175.885686][ T5834] Bluetooth: hci2: command tx timeout [ 176.177919][ T5905] usb 4-1: USB disconnect, device number 17 [ 176.232444][ T7349] veth0_vlan: entered promiscuous mode [ 176.245879][ T7349] veth1_vlan: entered promiscuous mode [ 176.274489][ T7349] veth0_macvtap: entered promiscuous mode [ 176.285769][ T7349] veth1_macvtap: entered promiscuous mode [ 176.306467][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.318283][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.328761][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.347282][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.357620][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.368760][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.379846][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.394224][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.551183][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.639711][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.659940][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.951581][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.969677][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.999537][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.021107][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.047475][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.059940][ T7478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.081195][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.106017][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.109102][ T5905] usb 2-1: USB disconnect, device number 15 [ 177.126294][ T7349] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.137343][ T7349] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.178624][ T7349] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.192887][ T7349] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.333539][ T799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.355646][ T799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.394984][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.415316][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.826281][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 178.739744][ T5905] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 178.748420][ T47] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 178.958418][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.964365][ T7511] gfs2: not a GFS2 filesystem [ 179.020996][ T5905] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 179.099676][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 179.108011][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.137324][ T47] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 179.182131][ T5905] usb 5-1: config 0 descriptor?? [ 179.220058][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.236962][ T5905] pwc: Askey VC010 type 2 USB webcam detected. [ 179.319814][ T47] usb 4-1: config 0 descriptor?? [ 179.643400][ T5905] pwc: recv_control_msg error -32 req 02 val 2b00 [ 179.660393][ T5905] pwc: recv_control_msg error -32 req 02 val 2700 [ 179.670920][ T5905] pwc: recv_control_msg error -32 req 02 val 2c00 [ 179.745855][ T5905] pwc: recv_control_msg error -32 req 04 val 1000 [ 179.771618][ T5905] pwc: recv_control_msg error -32 req 04 val 1300 [ 179.780195][ T5905] pwc: recv_control_msg error -32 req 04 val 1400 [ 179.815004][ T5905] pwc: recv_control_msg error -32 req 02 val 2000 [ 180.084736][ T5905] pwc: recv_control_msg error -71 req 04 val 1500 [ 180.329425][ T5905] pwc: recv_control_msg error -71 req 02 val 2500 [ 180.436941][ T5905] pwc: recv_control_msg error -71 req 02 val 2400 [ 180.463584][ T5905] pwc: recv_control_msg error -71 req 02 val 2600 [ 180.476639][ T5905] pwc: recv_control_msg error -71 req 02 val 2900 [ 180.512793][ T5905] pwc: recv_control_msg error -71 req 02 val 2800 [ 180.531495][ T5905] pwc: recv_control_msg error -71 req 04 val 1100 [ 180.550767][ T5905] pwc: recv_control_msg error -71 req 04 val 1200 [ 180.568879][ T5905] pwc: Registered as video103. [ 180.583671][ T5905] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 180.618166][ T5905] usb 5-1: USB disconnect, device number 17 [ 181.723013][ T7534] xt_addrtype: ipv6 does not support BROADCAST matching [ 181.875303][ T47] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 181.966644][ T47] asix 4-1:0.0: probe with driver asix failed with error -71 [ 182.182960][ T47] usb 4-1: USB disconnect, device number 18 [ 182.508278][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.616'. [ 183.336898][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.354463][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.369745][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.381868][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.389823][ T5822] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 183.400492][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.554589][ T7550] dlm: no local IP address has been set [ 183.560600][ T7550] dlm: cannot start dlm midcomms -107 [ 184.250254][ T6029] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.508296][ T6029] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.648840][ T6029] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.749055][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.627'. [ 185.637198][ T5834] Bluetooth: hci3: command tx timeout [ 185.862641][ T6029] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.902874][ T7539] chnl_net:caif_netlink_parms(): no params data found [ 186.096814][ T5834] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 186.108415][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: kworker/u9:6 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 186.108438][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 186.108449][ T5834] Workqueue: hci1 hci_rx_work [ 186.108492][ T5834] Call Trace: [ 186.108497][ T5834] [ 186.108504][ T5834] dump_stack_lvl+0x241/0x360 [ 186.108526][ T5834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.108541][ T5834] ? __pfx__printk+0x10/0x10 [ 186.108569][ T5834] ? __kmalloc_cache_noprof+0x243/0x390 [ 186.108584][ T5834] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 186.108609][ T5834] sysfs_create_dir_ns+0x2ce/0x3a0 [ 186.108634][ T5834] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 186.108662][ T5834] kobject_add_internal+0x435/0x8d0 [ 186.108689][ T5834] kobject_add+0x152/0x220 [ 186.108708][ T5834] ? do_raw_spin_unlock+0x13c/0x8b0 [ 186.108726][ T5834] ? device_add+0x3e7/0xbf0 [ 186.108748][ T5834] ? __pfx_kobject_add+0x10/0x10 [ 186.108768][ T5834] ? _raw_spin_unlock+0x28/0x50 [ 186.108785][ T5834] ? get_device_parent+0x165/0x410 [ 186.108809][ T5834] device_add+0x4e5/0xbf0 [ 186.108835][ T5834] hci_conn_add_sysfs+0xe8/0x200 [ 186.108858][ T5834] le_conn_complete_evt+0xd1a/0x1360 [ 186.108885][ T5834] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 186.108901][ T5834] ? __mutex_unlock_slowpath+0x227/0x800 [ 186.108923][ T5834] ? __skb_clone+0x5c/0x6c0 [ 186.108948][ T5834] ? skb_pull_data+0x112/0x230 [ 186.108966][ T5834] hci_le_conn_complete_evt+0x18c/0x420 [ 186.108988][ T5834] hci_event_packet+0xa54/0x1540 [ 186.109013][ T5834] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 186.109034][ T5834] ? __pfx_hci_event_packet+0x10/0x10 [ 186.109055][ T5834] ? do_raw_spin_unlock+0x13c/0x8b0 [ 186.109082][ T5834] ? kcov_remote_start+0x3f0/0x7d0 [ 186.109103][ T5834] ? exc_double_fault+0xc0/0x1b0 [ 186.109126][ T5834] ? hci_send_to_monitor+0xdc/0x530 [ 186.109146][ T5834] hci_rx_work+0x3f3/0xdb0 [ 186.109176][ T5834] ? process_scheduled_works+0x9c6/0x18e0 [ 186.109194][ T5834] process_scheduled_works+0xabe/0x18e0 [ 186.109232][ T5834] ? __pfx_process_scheduled_works+0x10/0x10 [ 186.109257][ T5834] ? assign_work+0x364/0x3d0 [ 186.109279][ T5834] worker_thread+0x870/0xd30 [ 186.109310][ T5834] ? __kthread_parkme+0x169/0x1d0 [ 186.109332][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 186.109351][ T5834] kthread+0x7a9/0x920 [ 186.109371][ T5834] ? __pfx_kthread+0x10/0x10 [ 186.109394][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 186.109413][ T5834] ? __pfx_kthread+0x10/0x10 [ 186.109444][ T5834] ? __pfx_kthread+0x10/0x10 [ 186.109475][ T5834] ? __pfx_kthread+0x10/0x10 [ 186.109503][ T5834] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.109522][ T5834] ? lockdep_hardirqs_on+0x99/0x150 [ 186.109544][ T5834] ? __pfx_kthread+0x10/0x10 [ 186.109574][ T5834] ret_from_fork+0x4b/0x80 [ 186.109599][ T5834] ? __pfx_kthread+0x10/0x10 [ 186.109629][ T5834] ret_from_fork_asm+0x1a/0x30 [ 186.109668][ T5834] [ 186.392847][ T5834] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 186.408382][ T5834] Bluetooth: hci1: failed to register connection device [ 186.420787][ T5834] ================================================================== [ 186.428903][ T5834] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0xd7/0x140 [ 186.436924][ T5834] Read of size 8 at addr ffff888034bc7188 by task kworker/u9:6/5834 [ 186.444912][ T5834] [ 186.447240][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: kworker/u9:6 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 186.447262][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 186.447275][ T5834] Workqueue: hci1 hci_rx_work [ 186.447305][ T5834] Call Trace: [ 186.447312][ T5834] [ 186.447321][ T5834] dump_stack_lvl+0x241/0x360 [ 186.447342][ T5834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.447358][ T5834] ? __pfx__printk+0x10/0x10 [ 186.447383][ T5834] ? _printk+0xd5/0x120 [ 186.447407][ T5834] ? __virt_addr_valid+0x183/0x530 [ 186.447433][ T5834] ? __virt_addr_valid+0x183/0x530 [ 186.447459][ T5834] print_report+0x169/0x550 [ 186.447484][ T5834] ? __virt_addr_valid+0x183/0x530 [ 186.447508][ T5834] ? __virt_addr_valid+0x183/0x530 [ 186.447530][ T5834] ? __virt_addr_valid+0x45f/0x530 [ 186.447554][ T5834] ? __phys_addr+0xba/0x170 [ 186.447578][ T5834] ? l2cap_sock_ready_cb+0xd7/0x140 [ 186.447601][ T5834] kasan_report+0x143/0x180 [ 186.447625][ T5834] ? l2cap_sock_ready_cb+0xd7/0x140 [ 186.447650][ T5834] l2cap_sock_ready_cb+0xd7/0x140 [ 186.447674][ T5834] l2cap_le_start+0x515/0x17c0 [ 186.447692][ T5834] ? __cancel_work+0x24a/0x390 [ 186.447715][ T5834] ? __mutex_unlock_slowpath+0x227/0x800 [ 186.447736][ T5834] ? l2cap_connect_cfm+0x626/0x1090 [ 186.447757][ T5834] ? __pfx_l2cap_le_start+0x10/0x10 [ 186.447775][ T5834] ? l2cap_global_fixed_chan+0x2dd/0x370 [ 186.447798][ T5834] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 186.447821][ T5834] ? l2cap_chan_put+0x11b/0x250 [ 186.447844][ T5834] l2cap_connect_cfm+0x668/0x1090 [ 186.447867][ T5834] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 186.447888][ T5834] ? hci_cb_lookup+0x3a0/0x3c0 [ 186.447904][ T5834] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 186.447925][ T5834] hci_connect_cfm+0x162/0x240 [ 186.447942][ T5834] ? __pfx_hci_connect_cfm+0x10/0x10 [ 186.447961][ T5834] ? hci_conn_add_sysfs+0x122/0x200 [ 186.447983][ T5834] le_conn_complete_evt+0xda8/0x1360 [ 186.448007][ T5834] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 186.448024][ T5834] ? __mutex_unlock_slowpath+0x227/0x800 [ 186.448052][ T5834] ? __skb_clone+0x5c/0x6c0 [ 186.448077][ T5834] ? skb_pull_data+0x112/0x230 [ 186.448094][ T5834] hci_le_conn_complete_evt+0x18c/0x420 [ 186.448115][ T5834] hci_event_packet+0xa54/0x1540 [ 186.448142][ T5834] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 186.448161][ T5834] ? __pfx_hci_event_packet+0x10/0x10 [ 186.448185][ T5834] ? do_raw_spin_unlock+0x13c/0x8b0 [ 186.448207][ T5834] ? kcov_remote_start+0x3f0/0x7d0 [ 186.448229][ T5834] ? exc_double_fault+0xc0/0x1b0 [ 186.448252][ T5834] ? hci_send_to_monitor+0xdc/0x530 [ 186.448273][ T5834] hci_rx_work+0x3f3/0xdb0 [ 186.448300][ T5834] ? process_scheduled_works+0x9c6/0x18e0 [ 186.448319][ T5834] process_scheduled_works+0xabe/0x18e0 [ 186.448349][ T5834] ? __pfx_process_scheduled_works+0x10/0x10 [ 186.448372][ T5834] ? assign_work+0x364/0x3d0 [ 186.448392][ T5834] worker_thread+0x870/0xd30 [ 186.448417][ T5834] ? __kthread_parkme+0x169/0x1d0 [ 186.448439][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 186.448459][ T5834] kthread+0x7a9/0x920 [ 186.448481][ T5834] ? __pfx_kthread+0x10/0x10 [ 186.448506][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 186.448526][ T5834] ? __pfx_kthread+0x10/0x10 [ 186.448548][ T5834] ? __pfx_kthread+0x10/0x10 [ 186.448572][ T5834] ? __pfx_kthread+0x10/0x10 [ 186.448594][ T5834] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.448610][ T5834] ? lockdep_hardirqs_on+0x99/0x150 [ 186.448628][ T5834] ? __pfx_kthread+0x10/0x10 [ 186.448651][ T5834] ret_from_fork+0x4b/0x80 [ 186.448671][ T5834] ? __pfx_kthread+0x10/0x10 [ 186.448694][ T5834] ret_from_fork_asm+0x1a/0x30 [ 186.448718][ T5834] [ 186.448725][ T5834] [ 186.801166][ T5834] Allocated by task 7586: [ 186.805528][ T5834] kasan_save_track+0x3f/0x80 [ 186.810241][ T5834] __kasan_kmalloc+0x98/0xb0 [ 186.814839][ T5834] __kmalloc_noprof+0x285/0x4c0 [ 186.819711][ T5834] sk_prot_alloc+0xe0/0x210 [ 186.824240][ T5834] sk_alloc+0x38/0x370 [ 186.828319][ T5834] bt_sock_alloc+0x3c/0x340 [ 186.832828][ T5834] l2cap_sock_create+0x13d/0x300 [ 186.837777][ T5834] bt_sock_create+0x161/0x230 [ 186.842473][ T5834] __sock_create+0x4c0/0xa30 [ 186.847078][ T5834] __sys_socket+0x150/0x3c0 [ 186.851588][ T5834] __x64_sys_socket+0x7a/0x90 [ 186.856274][ T5834] do_syscall_64+0xf3/0x230 [ 186.860787][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.866689][ T5834] [ 186.869018][ T5834] Freed by task 7587: [ 186.872996][ T5834] kasan_save_track+0x3f/0x80 [ 186.877719][ T5834] kasan_save_free_info+0x40/0x50 [ 186.882752][ T5834] __kasan_slab_free+0x59/0x70 [ 186.887525][ T5834] kfree+0x196/0x430 [ 186.891433][ T5834] __sk_destruct+0x479/0x5f0 [ 186.896031][ T5834] l2cap_sock_release+0x15b/0x1d0 [ 186.901061][ T5834] sock_close+0xbc/0x240 [ 186.905304][ T5834] __fput+0x3e9/0x9f0 [ 186.909288][ T5834] task_work_run+0x24f/0x310 [ 186.913891][ T5834] syscall_exit_to_user_mode+0x13f/0x340 [ 186.919537][ T5834] do_syscall_64+0x100/0x230 [ 186.924147][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.930056][ T5834] [ 186.932379][ T5834] The buggy address belongs to the object at ffff888034bc7000 [ 186.932379][ T5834] which belongs to the cache kmalloc-2k of size 2048 [ 186.946441][ T5834] The buggy address is located 392 bytes inside of [ 186.946441][ T5834] freed 2048-byte region [ffff888034bc7000, ffff888034bc7800) [ 186.960331][ T5834] [ 186.962659][ T5834] The buggy address belongs to the physical page: [ 186.969136][ T5834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34bc0 [ 186.977985][ T5834] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 186.986498][ T5834] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 186.994137][ T5834] page_type: f5(slab) [ 186.998210][ T5834] raw: 00fff00000000040 ffff88801b042000 ffffea000079a200 dead000000000002 [ 187.006796][ T5834] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 187.015386][ T5834] head: 00fff00000000040 ffff88801b042000 ffffea000079a200 dead000000000002 [ 187.024065][ T5834] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 187.032745][ T5834] head: 00fff00000000003 ffffea0000d2f001 ffffffffffffffff 0000000000000000 [ 187.041421][ T5834] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 187.050092][ T5834] page dumped because: kasan: bad access detected [ 187.056516][ T5834] page_owner tracks the page as allocated [ 187.062232][ T5834] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 975, tgid 975 (kworker/0:2), ts 87759649555, free_ts 87547038042 [ 187.083438][ T5834] post_alloc_hook+0x1f4/0x240 [ 187.088214][ T5834] get_page_from_freelist+0x3651/0x37a0 [ 187.093770][ T5834] __alloc_frozen_pages_noprof+0x292/0x710 [ 187.099587][ T5834] alloc_pages_mpol+0x311/0x660 [ 187.104453][ T5834] allocate_slab+0x8f/0x3a0 [ 187.108964][ T5834] ___slab_alloc+0xc27/0x14a0 [ 187.113662][ T5834] __slab_alloc+0x58/0xa0 [ 187.118004][ T5834] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 187.124425][ T5834] kmalloc_reserve+0x111/0x2a0 [ 187.129198][ T5834] __alloc_skb+0x1f3/0x440 [ 187.133713][ T5834] mld_newpack+0x17c/0xc70 [ 187.138162][ T5834] add_grec+0x1492/0x19a0 [ 187.142499][ T5834] mld_send_initial_cr+0x228/0x4b0 [ 187.147616][ T5834] mld_dad_work+0x44/0x500 [ 187.152045][ T5834] process_scheduled_works+0xabe/0x18e0 [ 187.157598][ T5834] worker_thread+0x870/0xd30 [ 187.162197][ T5834] page last free pid 5196 tgid 5196 stack trace: [ 187.168527][ T5834] free_frozen_pages+0xe04/0x10e0 [ 187.173564][ T5834] __put_partials+0x160/0x1c0 [ 187.178248][ T5834] put_cpu_partial+0x17c/0x250 [ 187.183020][ T5834] __slab_free+0x290/0x380 [ 187.187444][ T5834] qlist_free_all+0x9a/0x140 [ 187.192038][ T5834] kasan_quarantine_reduce+0x14f/0x170 [ 187.197501][ T5834] __kasan_slab_alloc+0x23/0x80 [ 187.202365][ T5834] __kmalloc_cache_noprof+0x1d9/0x390 [ 187.207741][ T5834] kernfs_fop_open+0x3e0/0xd10 [ 187.212511][ T5834] do_dentry_open+0xdec/0x1960 [ 187.217287][ T5834] vfs_open+0x3b/0x370 [ 187.221369][ T5834] path_openat+0x2c81/0x3590 [ 187.225965][ T5834] do_filp_open+0x27f/0x4e0 [ 187.230489][ T5834] do_sys_openat2+0x13e/0x1d0 [ 187.235176][ T5834] __x64_sys_openat+0x247/0x2a0 [ 187.240032][ T5834] do_syscall_64+0xf3/0x230 [ 187.244543][ T5834] [ 187.246866][ T5834] Memory state around the buggy address: [ 187.252581][ T5834] ffff888034bc7080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.260644][ T5834] ffff888034bc7100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.268705][ T5834] >ffff888034bc7180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.276765][ T5834] ^ [ 187.281098][ T5834] ffff888034bc7200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.289160][ T5834] ffff888034bc7280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.297217][ T5834] ================================================================== [ 187.319618][ T5905] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 187.329131][ T5834] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 187.336393][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: kworker/u9:6 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 187.347273][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 187.357374][ T5834] Workqueue: hci1 hci_rx_work [ 187.362115][ T5834] Call Trace: [ 187.365422][ T5834] [ 187.368381][ T5834] dump_stack_lvl+0x241/0x360 [ 187.373084][ T5834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.378296][ T5834] ? __pfx__printk+0x10/0x10 [ 187.382909][ T5834] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 187.388915][ T5834] ? vscnprintf+0x5d/0x90 [ 187.393265][ T5834] panic+0x349/0x880 [ 187.397176][ T5834] ? check_panic_on_warn+0x21/0xb0 [ 187.402299][ T5834] ? __pfx_panic+0x10/0x10 [ 187.406732][ T5834] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 187.412728][ T5834] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 187.419065][ T5834] check_panic_on_warn+0x86/0xb0 [ 187.424019][ T5834] ? l2cap_sock_ready_cb+0xd7/0x140 [ 187.429237][ T5834] end_report+0x77/0x160 [ 187.433498][ T5834] kasan_report+0x154/0x180 [ 187.438020][ T5834] ? l2cap_sock_ready_cb+0xd7/0x140 [ 187.443241][ T5834] l2cap_sock_ready_cb+0xd7/0x140 [ 187.448285][ T5834] l2cap_le_start+0x515/0x17c0 [ 187.453167][ T5834] ? __cancel_work+0x24a/0x390 [ 187.457975][ T5834] ? __mutex_unlock_slowpath+0x227/0x800 [ 187.463639][ T5834] ? l2cap_connect_cfm+0x626/0x1090 [ 187.468857][ T5834] ? __pfx_l2cap_le_start+0x10/0x10 [ 187.474064][ T5834] ? l2cap_global_fixed_chan+0x2dd/0x370 [ 187.480058][ T5834] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 187.486053][ T5834] ? l2cap_chan_put+0x11b/0x250 [ 187.490920][ T5834] l2cap_connect_cfm+0x668/0x1090 [ 187.495993][ T5834] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 187.501460][ T5834] ? hci_cb_lookup+0x3a0/0x3c0 [ 187.506227][ T5834] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 187.511693][ T5834] hci_connect_cfm+0x162/0x240 [ 187.516465][ T5834] ? __pfx_hci_connect_cfm+0x10/0x10 [ 187.521759][ T5834] ? hci_conn_add_sysfs+0x122/0x200 [ 187.526972][ T5834] le_conn_complete_evt+0xda8/0x1360 [ 187.532272][ T5834] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 187.538031][ T5834] ? __mutex_unlock_slowpath+0x227/0x800 [ 187.543691][ T5834] ? __skb_clone+0x5c/0x6c0 [ 187.548215][ T5834] ? skb_pull_data+0x112/0x230 [ 187.552992][ T5834] hci_le_conn_complete_evt+0x18c/0x420 [ 187.558547][ T5834] hci_event_packet+0xa54/0x1540 [ 187.563498][ T5834] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 187.568791][ T5834] ? __pfx_hci_event_packet+0x10/0x10 [ 187.574175][ T5834] ? do_raw_spin_unlock+0x13c/0x8b0 [ 187.579382][ T5834] ? kcov_remote_start+0x3f0/0x7d0 [ 187.584505][ T5834] ? exc_double_fault+0xc0/0x1b0 [ 187.589458][ T5834] ? hci_send_to_monitor+0xdc/0x530 [ 187.594677][ T5834] hci_rx_work+0x3f3/0xdb0 [ 187.599120][ T5834] ? process_scheduled_works+0x9c6/0x18e0 [ 187.604854][ T5834] process_scheduled_works+0xabe/0x18e0 [ 187.610416][ T5834] ? __pfx_process_scheduled_works+0x10/0x10 [ 187.616407][ T5834] ? assign_work+0x364/0x3d0 [ 187.621009][ T5834] worker_thread+0x870/0xd30 [ 187.625637][ T5834] ? __kthread_parkme+0x169/0x1d0 [ 187.630706][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 187.635855][ T5834] kthread+0x7a9/0x920 [ 187.639961][ T5834] ? __pfx_kthread+0x10/0x10 [ 187.644581][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 187.649712][ T5834] ? __pfx_kthread+0x10/0x10 [ 187.654314][ T5834] ? __pfx_kthread+0x10/0x10 [ 187.658919][ T5834] ? __pfx_kthread+0x10/0x10 [ 187.663524][ T5834] ? _raw_spin_unlock_irq+0x23/0x50 [ 187.668729][ T5834] ? lockdep_hardirqs_on+0x99/0x150 [ 187.673935][ T5834] ? __pfx_kthread+0x10/0x10 [ 187.678563][ T5834] ret_from_fork+0x4b/0x80 [ 187.682997][ T5834] ? __pfx_kthread+0x10/0x10 [ 187.687603][ T5834] ret_from_fork_asm+0x1a/0x30 [ 187.692397][ T5834] [ 187.695760][ T5834] Kernel Offset: disabled [ 187.700128][ T5834] Rebooting in 86400 seconds..