last executing test programs: 4m14.328074622s ago: executing program 3 (id=180): munmap(&(0x7f0000eac000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0) munmap(&(0x7f0000647000/0x1000)=nil, 0x1000) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e85000/0x4000)=nil, 0x4000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 4m12.923963631s ago: executing program 2 (id=181): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000004}, 0x50) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 4m12.710748094s ago: executing program 3 (id=182): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x2f38, 0xa) write(r1, &(0x7f0000000240)="94", 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) clock_nanosleep(0x0, 0x1, 0x0, 0x0) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0xc4}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfad", 0x9b}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x0) write(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) 4m10.769664995s ago: executing program 2 (id=184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 4m9.69836638s ago: executing program 3 (id=187): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffe, 0x0, 0xdae, 0x5}) capset(&(0x7f0000000dc0)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000e00)={0x9f, 0xffff, 0x4, 0x17, 0x65, 0x40}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r0, 0x4004743c, 0x0) syz_clone(0x200, &(0x7f00000000c0), 0x0, &(0x7f0000000000), &(0x7f0000000c80), &(0x7f0000000cc0)="95d11d8061885d76a0354068880b98257c32f271f7d4d2263ecc7a3528feba295b14ed3fade0a6f9f3ea9d343c53192ba103f007bfb13620225dfe262bf26a8809433cbc90cc6f032a294a93620260aa2825de61c417f24d49877071dd5ed7fd971aa5e36f1693a6cbc47282a5d5e4747584cdc8a34df7a67ad631e07a7ef3310e6bd9c28d5c8289418f99bb93251c56cf7fa87cc0026fd83a1896081d4787470fcd7e68cb48842db299f080e2fd102d23c6862a142fe985cc98b1e9be6e3eae0fffb74ea11338") r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000240)={@loopback, @broadcast}, 0x8) r2 = syz_open_dev$video4linux(&(0x7f0000000380), 0x5, 0x0) poll(&(0x7f0000000480)=[{r2, 0x220}], 0x1, 0x7f) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00094000010009040002010035040009058dff"], 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa1d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x40, 0x23, 0xe0, {0xe0, 0x30, "b78d2823cf40c94685c8251d3f54f07d1be3da32c70fb1e65c96d04a4c484aa7d180599e9c7878b2d895d48b5d2a0e23056ac52cfb29bd87ff97daf4fc4d66a0ee758e95f5a8cbe8b386e95cd7990903e594506918866b8641c18cd242787bf9620bb1da6058cfef6c92392b472665c22541cd7772911c723efb0d3c91981e4a2c9d31155491170a598bc3c117b625ee4fb3d8be718e941ad3568728f060a3fd73744ac677170324b5196be8d7eb8d91fdc7b3d218b94efdda94c3d8ee0725922fcc342aa7635ceed852dccb8b07245bff1b68fbdfb41f57ae9f5a6b5e5f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) 4m8.054548533s ago: executing program 2 (id=188): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$evdev(0x0, 0x0, 0x822b01) ioctl$EVIOCGKEY(r5, 0x40044583, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 4m4.538610029s ago: executing program 2 (id=192): socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000700)=0x31) 4m3.13550163s ago: executing program 3 (id=193): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x4a, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x12, &(0x7f00000024c0)={@broadcast, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@generic={0x88f7}}}, 0x0) r2 = getpid() prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x102}}}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) 4m1.733994285s ago: executing program 2 (id=194): r0 = syz_open_dev$media(&(0x7f00000000c0), 0x1000002, 0x400) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000400)={0x0, 0xffffffffffffff80, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 3m59.54677471s ago: executing program 2 (id=196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c000180060001"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3m59.101512445s ago: executing program 3 (id=198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000012300)={0x2020}, 0x2020) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) syz_io_uring_setup(0x4836, &(0x7f0000000080)={0x0, 0x38f2, 0x4000, 0x2, 0x140}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x20060960) io_uring_setup(0x72c7, &(0x7f0000000500)={0x0, 0x1035, 0x800, 0x3, 0x381}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b0, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000740)={0x0}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f00000006c0)={0x20, 0x1, &(0x7f0000000780), 0x2, 0x5}) 3m56.939536639s ago: executing program 3 (id=200): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x64c842, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x400, 0x34}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x4000000) io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0xfffffffd, 0x4}) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) unshare(0x28000600) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) ioctl$RTC_AIE_ON(r3, 0x7001) 3m42.733597972s ago: executing program 32 (id=196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c000180060001"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3m41.365828584s ago: executing program 33 (id=200): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x64c842, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x400, 0x34}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x4000000) io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0xfffffffd, 0x4}) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522"], 0x0}, 0x94) unshare(0x28000600) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) ioctl$RTC_AIE_ON(r3, 0x7001) 4.868304401s ago: executing program 6 (id=1340): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) setresuid(0x0, 0xee00, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 4.676089119s ago: executing program 6 (id=1343): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r3, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) read(r0, 0x0, 0x0) 4.4890431s ago: executing program 6 (id=1346): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000003c0)}], 0x3}], 0x1, 0x40800) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 4.256977699s ago: executing program 6 (id=1351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/45, 0x2d}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 4.223872095s ago: executing program 4 (id=1352): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="77541b79b2cdf236214d5c6030f56bcc81099bf4eca4a4c279db4b7e8e4d550f39cc1ad60ae65497be28f71730088548", 0x30}], 0x1, 0x0, 0x0, 0x20004080}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f0000000980)=""/146, 0x92}], 0x2}, 0x20) 4.095716511s ago: executing program 4 (id=1354): r0 = getpgid(0x0) syz_clone3(&(0x7f0000000180)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_pidfd_open(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) 3.914485731s ago: executing program 4 (id=1357): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) 3.458822442s ago: executing program 6 (id=1361): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close(r1) 3.397773253s ago: executing program 6 (id=1364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) 2.998146296s ago: executing program 4 (id=1371): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0x19a54000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) read(r0, &(0x7f00000002c0)=""/153, 0x99) 2.978668038s ago: executing program 5 (id=1372): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(r1, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) sendmmsg$inet(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="dcd194c7a1368b004482fdda972507ff87e4d02fe1faf91700d8b96bdb526ce5f45fe7005d9d1f1dab81b2d1cfb3d62e3d1ec256415cc6f74277ed008c90ee91a59bac301a553da10aa22827dbc9122ed609b5620d1c7010c22865f3f32640815d86cdb582dffa68f4f9ebc803fd090e77e5fcd2", 0x74}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003480)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000004a40)=[{0x0}, {&(0x7f0000004880)="098c858fdb", 0x5}], 0x2}}], 0x4, 0x4c040) 2.68562808s ago: executing program 4 (id=1376): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000180)=0x1) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000280)={0x0, 0x0}) 2.567670738s ago: executing program 4 (id=1378): mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2092) write$FUSE_INIT(r0, &(0x7f00000046c0)={0x50, 0x0, r1, {0x7, 0x9, 0x4, 0x403a1810, 0xfffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0xffffffffffffffff, 0x1}}, 0x30) 2.406297767s ago: executing program 5 (id=1380): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.245439288s ago: executing program 0 (id=1396): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) unshare(0x60600) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1.167061774s ago: executing program 5 (id=1398): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) dup2(r0, r1) 1.014468848s ago: executing program 0 (id=1400): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') syz_clone(0xa2a06011, 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(r1, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) 664.874927ms ago: executing program 1 (id=1405): r0 = open(&(0x7f0000000000)='./file0\x00', 0x108242, 0x78e22799f4a46fa9) write$FUSE_INIT(r0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) 610.816394ms ago: executing program 0 (id=1406): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x5, 0x0, 0x0, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, 0x0) 553.481603ms ago: executing program 1 (id=1407): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 520.780427ms ago: executing program 0 (id=1408): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x16c3, &(0x7f0000000140)={0x0, 0x80cb61, 0x0, 0xffffffff, 0xffe00000}, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 382.770884ms ago: executing program 1 (id=1409): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x100001, 0x80001) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x4, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x1, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x1}) 382.417713ms ago: executing program 0 (id=1410): openat$random(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x2da, 0x4000, &(0x7f0000000180)=@caif=@rfm={0x25, 0x107ff, "6798c48f000000ec00"}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0x2020) 314.123468ms ago: executing program 5 (id=1411): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2165], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r1, 0x10e, 0x2, &(0x7f0000000300)=r0, 0x4) 286.348328ms ago: executing program 1 (id=1412): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000440)=""/28, 0x1c}], 0x1}, 0x2b}], 0x1, 0x2120, 0x0) 168.240716ms ago: executing program 1 (id=1413): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x7, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) 167.801328ms ago: executing program 0 (id=1414): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca04, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, "cf"}, @global=@item_4={0x3, 0x1, 0x3, "367c35f0"}]}}, 0x0}, 0x0) 167.079597ms ago: executing program 5 (id=1415): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0xfffffffc}}, 0x2f) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x2, 0x1}, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 30.696545ms ago: executing program 1 (id=1416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x494, 0x0, 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open(&(0x7f0000000c00)='./file0\x00', 0x202180, 0xf3) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1, 0x8f, 0x3b16) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000800)="5b85", 0x2, 0x7) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, 0x0, 0x0, 0x2000c8a2) fanotify_init(0xf00, 0x0) 0s ago: executing program 5 (id=1417): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x6, 0x0, 0x88ba5c8f19cacbb0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) kernel console output (not intermixed with test programs): etooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.240636][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 210.639593][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 210.705687][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.732272][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 210.732340][ T9] usb 2-1: media controller created [ 210.889156][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.999297][ T6718] kvm: kvm [6717]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100005126 [ 211.449008][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 211.449377][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 211.449450][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 211.449483][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 211.588931][ T9] usb 2-1: USB disconnect, device number 2 [ 211.983105][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 212.929880][ T5802] Bluetooth: hci5: command tx timeout [ 212.932184][ T5802] Bluetooth: hci6: command tx timeout [ 214.385045][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms [ 214.385136][ C1] lec:lec_tx_timeout: lec0 [ 214.390778][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 217.435032][ T5809] Bluetooth: hci3: command 0x0406 tx timeout [ 217.436148][ T5809] Bluetooth: hci6: command tx timeout [ 217.436179][ T5809] Bluetooth: hci5: command tx timeout [ 217.450809][ T5115] Bluetooth: hci0: command 0x0406 tx timeout [ 219.727313][ T5802] Bluetooth: hci1: command 0x0406 tx timeout [ 219.727504][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 219.727534][ T5802] Bluetooth: hci5: command tx timeout [ 219.727557][ T5802] Bluetooth: hci6: command tx timeout [ 219.962672][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 219.962705][ C1] lec:lec_tx_timeout: lec0 [ 219.963067][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 223.003179][ T5809] Bluetooth: hci6: command tx timeout [ 223.003218][ T5809] Bluetooth: hci5: command tx timeout [ 225.098139][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5130 ms [ 225.098174][ C1] lec:lec_tx_timeout: lec0 [ 225.102815][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 230.822075][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5720 ms [ 230.822115][ C1] lec:lec_tx_timeout: lec0 [ 230.863798][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 235.960501][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 235.960538][ C1] lec:lec_tx_timeout: lec0 [ 235.966466][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 236.953884][ T6832] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x7 [ 237.887277][ T6714] chnl_net:caif_netlink_parms(): no params data found [ 240.657392][ T6713] chnl_net:caif_netlink_parms(): no params data found [ 241.063006][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 241.063046][ C1] lec:lec_tx_timeout: lec0 [ 241.063417][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 242.266861][ T6858] fuse: Bad value for 'fd' [ 242.556099][ T6714] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.556318][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.556533][ T6714] bridge_slave_0: entered allmulticast mode [ 242.559547][ T6714] bridge_slave_0: entered promiscuous mode [ 242.676904][ T6714] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.677068][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.677336][ T6714] bridge_slave_1: entered allmulticast mode [ 242.696696][ T6714] bridge_slave_1: entered promiscuous mode [ 245.043426][ T6713] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.043557][ T6713] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.104339][ T6713] bridge_slave_0: entered allmulticast mode [ 245.997652][ T6713] bridge_slave_0: entered promiscuous mode [ 246.032893][ T6714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.067070][ T6713] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.067205][ T6713] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.067449][ T6713] bridge_slave_1: entered allmulticast mode [ 246.071556][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 246.071589][ C1] lec:lec_tx_timeout: lec0 [ 246.071708][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 246.143123][ T6713] bridge_slave_1: entered promiscuous mode [ 246.271670][ T6714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.417645][ T1184] bridge_slave_1: left allmulticast mode [ 246.417791][ T1184] bridge_slave_1: left promiscuous mode [ 246.424675][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.573784][ T1184] bridge_slave_0: left allmulticast mode [ 246.573809][ T1184] bridge_slave_0: left promiscuous mode [ 246.574040][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.753442][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5680 ms [ 251.753470][ C1] lec:lec_tx_timeout: lec0 [ 251.753927][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 252.321480][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.391510][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.411258][ T1184] bond0 (unregistering): Released all slaves [ 252.669437][ T6713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.675129][ T6714] team0: Port device team_slave_0 added [ 255.245722][ T6713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.248713][ T6714] team0: Port device team_slave_1 added [ 256.000650][ T6916] dummy0: entered promiscuous mode [ 256.000937][ T6916] macvlan2: entered promiscuous mode [ 256.128087][ T6916] macvlan2: entered allmulticast mode [ 256.128106][ T6916] dummy0: entered allmulticast mode [ 256.173594][ T6713] team0: Port device team_slave_0 added [ 256.174666][ T6714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.174684][ T6714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.174713][ T6714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.287436][ T6714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.287455][ T6714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.287485][ T6714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.361966][ T6713] team0: Port device team_slave_1 added [ 258.906843][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 258.907347][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 259.097686][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 7340 ms [ 259.097722][ C1] lec:lec_tx_timeout: lec0 [ 259.098457][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 261.328441][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.328515][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.715517][ T6713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.715536][ T6713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.715565][ T6713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.506477][ T6713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.506497][ T6713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.506529][ T6713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.660708][ T37] kauditd_printk_skb: 57 callbacks suppressed [ 262.660729][ T37] audit: type=1326 audit(1769369187.675:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aae5acb9 code=0x7ffc0000 [ 262.660781][ T37] audit: type=1326 audit(1769369187.675:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aae5acb9 code=0x7ffc0000 [ 262.662082][ T37] audit: type=1326 audit(1769369187.675:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f97aae5acb9 code=0x7ffc0000 [ 262.662129][ T37] audit: type=1326 audit(1769369187.675:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aae5acb9 code=0x7ffc0000 [ 262.662174][ T37] audit: type=1326 audit(1769369187.675:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aae5acb9 code=0x7ffc0000 [ 262.664423][ T37] audit: type=1326 audit(1769369187.675:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f97aae5acb9 code=0x7ffc0000 [ 262.664475][ T37] audit: type=1326 audit(1769369187.675:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aae5acb9 code=0x7ffc0000 [ 262.664522][ T37] audit: type=1326 audit(1769369187.675:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aae5acb9 code=0x7ffc0000 [ 262.665569][ T37] audit: type=1326 audit(1769369187.675:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f97aae5acb9 code=0x7ffc0000 [ 262.665619][ T37] audit: type=1326 audit(1769369187.675:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aae5acb9 code=0x7ffc0000 [ 263.220952][ T1184] hsr_slave_0: left promiscuous mode [ 263.261763][ T1184] hsr_slave_1: left promiscuous mode [ 263.267787][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.312538][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.495697][ T5805] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 263.670334][ T5805] usb 2-1: Using ep0 maxpacket: 16 [ 263.672805][ T5805] usb 2-1: config 2 has an invalid interface number: 131 but max is 0 [ 263.672836][ T5805] usb 2-1: config 2 has no interface number 0 [ 263.672871][ T5805] usb 2-1: config 2 interface 131 has no altsetting 0 [ 263.691141][ T5805] usb 2-1: New USB device found, idVendor=2c42, idProduct=1636, bcdDevice=66.99 [ 263.691256][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.691319][ T5805] usb 2-1: Product: syz [ 263.691361][ T5805] usb 2-1: Manufacturer: syz [ 263.691404][ T5805] usb 2-1: SerialNumber: syz [ 264.025312][ T5805] f81232 2-1:2.131: f81534a converter detected [ 264.060096][ T5805] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 264.060129][ T5805] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 264.145091][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5050 ms [ 264.145127][ C1] lec:lec_tx_timeout: lec0 [ 264.145245][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 264.197293][ T5805] usb 2-1: USB disconnect, device number 3 [ 264.200681][ T5805] f81232 2-1:2.131: device disconnected [ 265.013448][ T5805] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 265.300751][ T5805] usb 2-1: Using ep0 maxpacket: 16 [ 265.301864][ T5805] usb 2-1: too many configurations: 72, using maximum allowed: 8 [ 265.303447][ T5805] usb 2-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 265.303473][ T5805] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 265.305681][ T5805] usb 2-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 265.305706][ T5805] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 265.307104][ T5805] usb 2-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 265.307128][ T5805] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 265.308829][ T5805] usb 2-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 265.308854][ T5805] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 265.310543][ T5805] usb 2-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 265.310568][ T5805] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 265.502025][ T5805] usb 2-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 265.502047][ T5805] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 265.503654][ T5805] usb 2-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 265.503672][ T5805] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 265.583157][ T5805] usb 2-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 265.583188][ T5805] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 265.659515][ T5805] usb 2-1: string descriptor 0 read error: -71 [ 265.659673][ T5805] usb 2-1: New USB device found, idVendor=1608, idProduct=000e, bcdDevice=ed.b1 [ 265.659699][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=70 [ 265.724153][ T5805] usb 2-1: rejected 8 configurations due to insufficient available bus power [ 265.724176][ T5805] usb 2-1: no configuration chosen from 8 choices [ 265.788156][ T5805] usb 2-1: USB disconnect, device number 4 [ 267.293106][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 267.923259][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 267.943508][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 267.946488][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 267.948955][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 268.431112][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.453064][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.454331][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.481377][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.506011][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.567206][ T5208] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 268.732510][ T5208] usb 2-1: Using ep0 maxpacket: 16 [ 268.738367][ T5208] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 268.738398][ T5208] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.738424][ T5208] usb 2-1: config 0 has no interface number 0 [ 268.748469][ T5208] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 268.748564][ T5208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.748620][ T5208] usb 2-1: Product: syz [ 268.748664][ T5208] usb 2-1: Manufacturer: syz [ 268.748706][ T5208] usb 2-1: SerialNumber: syz [ 268.785898][ T5208] usb 2-1: config 0 descriptor?? [ 268.864081][ T5208] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 268.864128][ T5208] uvcvideo 2-1:0.105: No valid video chain found. [ 269.032315][ T5814] usb 2-1: USB disconnect, device number 5 [ 269.358143][ T1184] team0 (unregistering): Port device team_slave_1 removed [ 269.692042][ T1184] team0 (unregistering): Port device team_slave_0 removed [ 270.015479][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 270.015498][ T37] audit: type=1326 audit(1769369193.865:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7016 comm="syz.1.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027297acb9 code=0x7ffc0000 [ 270.015758][ T37] audit: type=1326 audit(1769369193.865:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7016 comm="syz.1.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027297acb9 code=0x7ffc0000 [ 270.026467][ T37] audit: type=1326 audit(1769369193.875:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7016 comm="syz.1.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f027297acb9 code=0x7ffc0000 [ 270.026514][ T37] audit: type=1326 audit(1769369193.875:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7016 comm="syz.1.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027297acb9 code=0x7ffc0000 [ 270.026549][ T37] audit: type=1326 audit(1769369193.875:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7016 comm="syz.1.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027297acb9 code=0x7ffc0000 [ 270.129194][ T5809] Bluetooth: hci2: command tx timeout [ 270.776139][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6450 ms [ 270.776171][ C1] lec:lec_tx_timeout: lec0 [ 270.776491][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 270.787168][ T5809] Bluetooth: hci4: command tx timeout [ 271.486366][ T7030] mmap: syz.0.291 (7030) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 272.261032][ T5809] Bluetooth: hci2: command tx timeout [ 273.036509][ T5809] Bluetooth: hci4: command tx timeout [ 274.557590][ T5809] Bluetooth: hci2: command tx timeout [ 274.641209][ T7049] MPI: mpi too large (107144 bits) [ 275.108752][ T5809] Bluetooth: hci4: command tx timeout [ 276.116150][ T6714] hsr_slave_0: entered promiscuous mode [ 276.117608][ T6714] hsr_slave_1: entered promiscuous mode [ 276.118656][ T6714] debugfs: 'hsr0' already exists in 'hsr' [ 276.118683][ T6714] Cannot create hsr debugfs directory [ 276.375074][ T7053] dummy0: mtu less than device minimum [ 276.560505][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5690 ms [ 276.560541][ C1] lec:lec_tx_timeout: lec0 [ 276.560667][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 276.645750][ T5809] Bluetooth: hci2: command tx timeout [ 277.210087][ T5809] Bluetooth: hci4: command tx timeout [ 279.326160][ T7074] loop7: detected capacity change from 0 to 16384 [ 279.628194][ C1] I/O error, dev loop7, sector 16368 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 279.632297][ C1] I/O error, dev loop7, sector 16368 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.632542][ C1] Buffer I/O error on dev loop7, logical block 2046, async page read [ 279.677681][ C0] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 279.679905][ C0] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 279.681708][ C0] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.681861][ C0] Buffer I/O error on dev loop7, logical block 32, async page read [ 279.719800][ T7079] loop7: detected capacity change from 16384 to 0 [ 280.285082][ T7097] netlink: 'syz.1.310': attribute type 11 has an invalid length. [ 280.285108][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 281.900038][ T7113] lo speed is unknown, defaulting to 1000 [ 281.906704][ T7113] lo speed is unknown, defaulting to 1000 [ 281.981980][ T7113] lo speed is unknown, defaulting to 1000 [ 282.168051][ T7113] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 282.178909][ T7113] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 282.215168][ T7113] lo speed is unknown, defaulting to 1000 [ 282.219713][ T7113] lo speed is unknown, defaulting to 1000 [ 282.221888][ T7113] lo speed is unknown, defaulting to 1000 [ 282.223999][ T7113] lo speed is unknown, defaulting to 1000 [ 282.226014][ T7113] lo speed is unknown, defaulting to 1000 [ 282.228098][ T7113] lo speed is unknown, defaulting to 1000 [ 282.233016][ T7113] lo speed is unknown, defaulting to 1000 [ 282.236214][ T7113] lo speed is unknown, defaulting to 1000 [ 282.391704][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 282.391740][ C1] lec:lec_tx_timeout: lec0 [ 282.392204][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 285.325297][ T7002] chnl_net:caif_netlink_parms(): no params data found [ 285.830089][ T1184] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.007097][ T7169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.333'. [ 286.007122][ T7169] tc_dump_action: action bad kind [ 286.673025][ T7186] capability: warning: `syz.1.337' uses deprecated v2 capabilities in a way that may be insecure [ 287.465905][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 287.465941][ C1] lec:lec_tx_timeout: lec0 [ 287.466318][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 287.553882][ T1184] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.757450][ T827] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 287.796631][ T7008] chnl_net:caif_netlink_parms(): no params data found [ 287.928233][ T827] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 287.928293][ T827] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 287.932085][ T827] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 287.932143][ T827] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 287.933288][ T827] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 287.933340][ T827] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 287.941761][ T827] usb 2-1: string descriptor 0 read error: -22 [ 287.941884][ T827] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 287.941908][ T827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.088679][ T827] adutux 2-1:168.0: interrupt endpoints not found [ 288.179592][ T1184] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.488113][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.488328][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.488578][ T7002] bridge_slave_0: entered allmulticast mode [ 288.545905][ T7002] bridge_slave_0: entered promiscuous mode [ 288.783173][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.352'. [ 288.861824][ T1184] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.916296][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.916436][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.916704][ T7002] bridge_slave_1: entered allmulticast mode [ 288.920803][ T7002] bridge_slave_1: entered promiscuous mode [ 288.975584][ T7213] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 288.975617][ T7213] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 289.040445][ T7213] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 289.240170][ T7002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.496247][ T5805] usb 2-1: USB disconnect, device number 6 [ 289.543031][ T7002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.711876][ T7008] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.712019][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.712309][ T7008] bridge_slave_0: entered allmulticast mode [ 289.738674][ T7008] bridge_slave_0: entered promiscuous mode [ 289.796004][ T7008] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.796138][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.796334][ T7008] bridge_slave_1: entered allmulticast mode [ 289.800353][ T7008] bridge_slave_1: entered promiscuous mode [ 289.835044][ T7002] team0: Port device team_slave_0 added [ 289.848748][ T7002] team0: Port device team_slave_1 added [ 289.956683][ T7008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.034634][ T7008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.035569][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.035585][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.035613][ T7002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.755338][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.755358][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.755387][ T7002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.011285][ T7008] team0: Port device team_slave_0 added [ 292.047734][ T7008] team0: Port device team_slave_1 added [ 292.390437][ T7002] hsr_slave_0: entered promiscuous mode [ 292.391955][ T7002] hsr_slave_1: entered promiscuous mode [ 292.392885][ T7002] debugfs: 'hsr0' already exists in 'hsr' [ 292.392922][ T7002] Cannot create hsr debugfs directory [ 292.396788][ T1184] bridge_slave_1: left allmulticast mode [ 292.396855][ T1184] bridge_slave_1: left promiscuous mode [ 292.397530][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.506640][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 292.506673][ C1] lec:lec_tx_timeout: lec0 [ 292.506760][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 292.538995][ T1184] bridge_slave_0: left allmulticast mode [ 292.539019][ T1184] bridge_slave_0: left promiscuous mode [ 292.539245][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.625573][ T1184] bridge_slave_1: left allmulticast mode [ 292.625608][ T1184] bridge_slave_1: left promiscuous mode [ 292.625786][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.688824][ T1184] bridge_slave_0: left allmulticast mode [ 292.688848][ T1184] bridge_slave_0: left promiscuous mode [ 292.689175][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.754658][ T1184] bridge_slave_1: left allmulticast mode [ 292.754684][ T1184] bridge_slave_1: left promiscuous mode [ 292.754870][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.820362][ T1184] bridge_slave_0: left allmulticast mode [ 292.820386][ T1184] bridge_slave_0: left promiscuous mode [ 292.820567][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.422339][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.502492][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.584534][ T1184] bond0 (unregistering): Released all slaves [ 293.844214][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.925164][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.987363][ T1184] bond0 (unregistering): Released all slaves [ 294.861655][ T7303] ptrace attach of "./syz-executor exec"[7304] was attempted by "./syz-executor exec"[7303] [ 295.121634][ T7310] netlink: 'syz.0.388': attribute type 10 has an invalid length. [ 295.361430][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.421527][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.465966][ T1184] bond0 (unregistering): Released all slaves [ 295.518026][ T7008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.518046][ T7008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.518076][ T7008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.578048][ T7290] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 295.578080][ T7290] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 295.652954][ T7290] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 295.911474][ T7310] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 295.944222][ T7008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.944244][ T7008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.944276][ T7008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.953429][ T7313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.190002][ T7316] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 296.395226][ T1184] tipc: Disabling bearer [ 296.399582][ T1184] tipc: Left network mode [ 296.599520][ T7008] hsr_slave_0: entered promiscuous mode [ 296.600817][ T7008] hsr_slave_1: entered promiscuous mode [ 296.601711][ T7008] debugfs: 'hsr0' already exists in 'hsr' [ 296.601737][ T7008] Cannot create hsr debugfs directory [ 297.539417][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 297.539453][ C1] lec:lec_tx_timeout: lec0 [ 297.539617][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 298.523108][ T7384] netlink: 72 bytes leftover after parsing attributes in process `syz.1.423'. [ 298.523146][ T7384] netlink: 72 bytes leftover after parsing attributes in process `syz.1.423'. [ 298.531043][ T7384] netlink: 72 bytes leftover after parsing attributes in process `syz.1.423'. [ 298.531084][ T7384] netlink: 72 bytes leftover after parsing attributes in process `syz.1.423'. [ 298.531582][ T7384] netlink: 72 bytes leftover after parsing attributes in process `syz.1.423'. [ 298.531611][ T7384] netlink: 72 bytes leftover after parsing attributes in process `syz.1.423'. [ 298.532018][ T7384] netlink: 72 bytes leftover after parsing attributes in process `syz.1.423'. [ 298.532045][ T7384] netlink: 72 bytes leftover after parsing attributes in process `syz.1.423'. [ 298.532582][ T7384] netlink: 72 bytes leftover after parsing attributes in process `syz.1.423'. [ 298.532611][ T7384] netlink: 72 bytes leftover after parsing attributes in process `syz.1.423'. [ 298.700452][ T7384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.747923][ T5805] lo speed is unknown, defaulting to 1000 [ 299.205386][ T1184] hsr_slave_0: left promiscuous mode [ 299.293140][ T1184] hsr_slave_1: left promiscuous mode [ 299.294168][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.338175][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.391796][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.429267][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.626897][ T1184] hsr_slave_0: left promiscuous mode [ 299.647549][ T1184] hsr_slave_1: left promiscuous mode [ 299.648749][ T1184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.649047][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.710588][ T1184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.710619][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.838294][ T1184] veth1_macvtap: left promiscuous mode [ 299.838551][ T1184] veth0_macvtap: left promiscuous mode [ 299.838745][ T1184] veth1_vlan: left promiscuous mode [ 299.838955][ T1184] veth0_vlan: left promiscuous mode [ 300.390699][ T1184] team0 (unregistering): Port device team_slave_1 removed [ 300.512625][ T1184] team0 (unregistering): Port device team_slave_0 removed [ 301.282749][ T1184] team0 (unregistering): Port device team_slave_1 removed [ 301.413232][ T1184] team0 (unregistering): Port device team_slave_0 removed [ 302.565684][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 302.565723][ C1] lec:lec_tx_timeout: lec0 [ 302.565858][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 304.412227][ T1184] team0 (unregistering): Port device team_slave_1 removed [ 304.632785][ T1184] team0 (unregistering): Port device team_slave_0 removed [ 307.215478][ T7002] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 307.293455][ T7002] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 307.302153][ T5805] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 307.368653][ T7433] netlink: 'syz.0.444': attribute type 21 has an invalid length. [ 307.375946][ T7431] __nla_validate_parse: 29 callbacks suppressed [ 307.375970][ T7431] netlink: 36 bytes leftover after parsing attributes in process `syz.1.445'. [ 307.448114][ T7002] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 307.526807][ T5805] usb 5-1: config 0 has an invalid interface number: 197 but max is 0 [ 307.526839][ T5805] usb 5-1: config 0 has no interface number 0 [ 307.526887][ T5805] usb 5-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 307.526916][ T5805] usb 5-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 307.574536][ T5805] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 307.574573][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.574597][ T5805] usb 5-1: Product: syz [ 307.574614][ T5805] usb 5-1: Manufacturer: syz [ 307.574631][ T5805] usb 5-1: SerialNumber: syz [ 307.587490][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 307.587522][ C1] lec:lec_tx_timeout: lec0 [ 307.587624][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 307.634369][ T5805] usb 5-1: config 0 descriptor?? [ 307.646181][ T7422] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 307.646397][ T7422] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 307.909370][ T7002] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 308.236301][ T7008] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 308.446910][ T7008] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 308.533954][ T7008] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 308.537827][ T37] audit: type=1326 audit(1769369232.068:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7460 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027297acb9 code=0x7ffc0000 [ 308.537885][ T37] audit: type=1326 audit(1769369232.068:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7460 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027297acb9 code=0x7ffc0000 [ 308.553933][ T37] audit: type=1326 audit(1769369232.078:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7460 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f027297acb9 code=0x7ffc0000 [ 308.554076][ T37] audit: type=1326 audit(1769369232.088:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7460 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027297acb9 code=0x7ffc0000 [ 308.554192][ T37] audit: type=1326 audit(1769369232.088:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7460 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027297acb9 code=0x7ffc0000 [ 308.840028][ T7008] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 309.215872][ T5877] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 309.373040][ T5877] usb 2-1: config 4 has an invalid interface number: 58 but max is 0 [ 309.373072][ T5877] usb 2-1: config 4 has no interface number 0 [ 309.373120][ T5877] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=3e.4a [ 309.373145][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.494766][ T7002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.642858][ T5877] usb 2-1: string descriptor 0 read error: -71 [ 309.683172][ T5877] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 309.683622][ T5877] dvb-usb: bulk message failed: -22 (3/0) [ 309.724816][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 309.727057][ T5877] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 309.727117][ T5877] usb 2-1: media controller created [ 309.727197][ T5877] dvb-usb: bulk message failed: -22 (5/0) [ 309.727272][ T5877] dvb-usb: MAC address reading failed. [ 309.804768][ T7008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.819007][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 309.847029][ T7002] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.847060][ T5877] dvb-usb: bulk message failed: -22 (6/0) [ 309.847343][ T5877] dvb-usb: bulk message failed: -22 (6/0) [ 309.847441][ T5877] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 309.888606][ T5877] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 309.931031][ T5877] dvb-usb: schedule remote query interval to 100 msecs. [ 309.931057][ T5877] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 309.953940][ T5877] usb 2-1: USB disconnect, device number 7 [ 310.032440][ T5208] usb 5-1: USB disconnect, device number 6 [ 310.075462][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.075645][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.159845][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.189806][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.250483][ T7008] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.327521][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.327671][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.440752][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.440931][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.958335][ T7008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 311.020979][ T5877] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 312.202170][ T7002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.244089][ T7008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.606293][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 312.606328][ C1] lec:lec_tx_timeout: lec0 [ 312.606427][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 312.789638][ T7566] netlink: 48 bytes leftover after parsing attributes in process `syz.1.479'. [ 312.806178][ T7567] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 313.281358][ T7008] veth0_vlan: entered promiscuous mode [ 313.331585][ T7008] veth1_vlan: entered promiscuous mode [ 313.540985][ T7008] veth0_macvtap: entered promiscuous mode [ 313.542528][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.486'. [ 313.607740][ T7002] veth0_vlan: entered promiscuous mode [ 313.630026][ T7008] veth1_macvtap: entered promiscuous mode [ 313.664656][ T7002] veth1_vlan: entered promiscuous mode [ 313.772489][ T7008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.834176][ T7008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.903832][ T4544] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.906023][ T4544] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.907627][ T4544] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.935629][ T4544] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.039643][ T7002] veth0_macvtap: entered promiscuous mode [ 314.104763][ T7002] veth1_macvtap: entered promiscuous mode [ 314.346670][ T7614] tmpfs: Bad value for 'mpol' [ 314.408275][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.461743][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.468726][ T2348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.468749][ T2348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.546178][ T1184] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.560218][ T1184] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.589006][ T1184] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.594635][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.736048][ T6621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.736070][ T6621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.739621][ T5814] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 314.970710][ T5814] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 314.970744][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 314.970768][ T5814] usb 5-1: Product: syz [ 314.970785][ T5814] usb 5-1: Manufacturer: syz [ 314.970801][ T5814] usb 5-1: SerialNumber: syz [ 315.034015][ T5814] usb 5-1: config 0 descriptor?? [ 315.072805][ T5814] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 315.087845][ T5814] dvb-usb: bulk message failed: -22 (2/0) [ 315.110568][ T5814] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 315.111175][ T5814] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 315.111216][ T5814] usb 5-1: media controller created [ 315.192213][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 315.347087][ T5814] dvb-usb: bulk message failed: -22 (1/0) [ 315.347420][ T2348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.347439][ T2348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.455281][ T5814] DVB: Unable to find symbol mt352_attach() [ 315.455652][ T5814] dvb-usb: bulk message failed: -22 (5/0) [ 315.455678][ T5814] zl10353_read_register: readreg error (reg=127, ret==-121) [ 315.455729][ T5814] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 315.757676][ T5814] rc_core: IR keymap rc-dvico-mce not found [ 315.757701][ T5814] Registered IR keymap rc-empty [ 315.804153][ T5814] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 315.807423][ T5814] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input7 [ 315.907591][ T5814] dvb-usb: schedule remote query interval to 100 msecs. [ 315.907620][ T5814] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 315.942643][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.942669][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.007493][ T5814] usb 5-1: USB disconnect, device number 7 [ 316.524405][ T7647] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 317.622237][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 317.622274][ C1] lec:lec_tx_timeout: lec0 [ 317.622357][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 318.154365][ T7677] netlink: 'syz.5.211': attribute type 10 has an invalid length. [ 318.154391][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.211'. [ 318.154424][ T7677] openvswitch: netlink: Flow actions attr not present in new flow. [ 318.161275][ T5814] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 318.197139][ T827] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 318.363436][ T827] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 318.363473][ T827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.363496][ T827] usb 2-1: Product: syz [ 318.363513][ T827] usb 2-1: Manufacturer: syz [ 318.363530][ T827] usb 2-1: SerialNumber: syz [ 318.418583][ T827] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 318.539337][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 319.820929][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 319.823513][ T9] ath9k_htc: Failed to initialize the device [ 319.977075][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 320.095633][ T5885] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 320.139980][ T5884] usb 2-1: USB disconnect, device number 8 [ 320.288404][ T5885] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 320.288465][ T5885] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 320.292989][ T5885] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 320.293038][ T5885] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 320.296215][ T5885] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 320.296270][ T5885] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 320.313360][ T5885] usb 7-1: string descriptor 0 read error: -22 [ 320.313771][ T5885] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 320.313838][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.463846][ T5885] adutux 7-1:168.0: interrupt endpoints not found [ 321.546238][ T5884] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 321.756190][ T5885] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 321.767794][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 321.767827][ T5884] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 321.767855][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 321.767879][ T5884] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 321.840084][ T5884] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 321.840120][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.840143][ T5884] usb 5-1: Product: syz [ 321.840160][ T5884] usb 5-1: Manufacturer: syz [ 321.840176][ T5884] usb 5-1: SerialNumber: syz [ 321.904923][ T9] usb 7-1: USB disconnect, device number 2 [ 321.929022][ T5884] usb 5-1: config 0 descriptor?? [ 321.977127][ T5884] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 321.984443][ T5885] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 321.984474][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.036292][ T5885] usb 2-1: config 0 descriptor?? [ 322.214942][ T5884] scsi host1: usb-storage 5-1:0.0 [ 322.258261][ T5885] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 322.322877][ T5884] usb 5-1: USB disconnect, device number 8 [ 322.459059][ T5885] [drm:udl_init] *ERROR* Selecting channel failed [ 322.564220][ T5885] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 322.564249][ T5885] [drm] Initialized udl on minor 2 [ 322.591186][ T5885] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 322.618520][ T5885] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 322.640069][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 322.640106][ C1] lec:lec_tx_timeout: lec0 [ 322.640231][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 322.669248][ T5885] usb 2-1: USB disconnect, device number 9 [ 322.674383][ T5208] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 322.676249][ T5208] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 322.863972][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.864049][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.325442][ T7773] netlink: 24 bytes leftover after parsing attributes in process `syz.5.548'. [ 323.789961][ T7790] netlink: 'syz.4.553': attribute type 23 has an invalid length. [ 325.870793][ T7829] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 326.029607][ T7829] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 327.120108][ T5884] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 327.195112][ T7845] netlink: 'syz.6.574': attribute type 4 has an invalid length. [ 327.195138][ T7845] netlink: 17 bytes leftover after parsing attributes in process `syz.6.574'. [ 327.276517][ T5884] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 327.276582][ T5884] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 327.277706][ T5884] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 327.277848][ T5884] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 327.278971][ T5884] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 327.279048][ T5884] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 327.353871][ T5884] usb 5-1: string descriptor 0 read error: -22 [ 327.354031][ T5884] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 327.354058][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.393128][ T5884] adutux 5-1:168.0: interrupt endpoints not found [ 327.519007][ T7850] netlink: 256 bytes leftover after parsing attributes in process `syz.1.577'. [ 328.664063][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6020 ms [ 328.664105][ C1] lec:lec_tx_timeout: lec0 [ 328.667307][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 329.830851][ T5884] usb 5-1: USB disconnect, device number 9 [ 330.061963][ T5885] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 330.230414][ T5885] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 330.230476][ T5885] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 330.232347][ T5885] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 330.232404][ T5885] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 330.233533][ T5885] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 330.233585][ T5885] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 330.270503][ T5885] usb 2-1: string descriptor 0 read error: -22 [ 330.270931][ T5885] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 330.271007][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.384218][ T5885] adutux 2-1:168.0: interrupt endpoints not found [ 332.320678][ T827] usb 2-1: USB disconnect, device number 10 [ 332.400901][ T7948] Bluetooth: MGMT ver 1.23 [ 332.463436][ T5814] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 332.634724][ T5814] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 332.634811][ T5814] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 332.635991][ T5814] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 332.636056][ T5814] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 332.637235][ T5814] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 332.637289][ T5814] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 332.640817][ T5814] usb 5-1: string descriptor 0 read error: -22 [ 332.640977][ T5814] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 332.641003][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.774345][ T5814] adutux 5-1:168.0: interrupt endpoints not found [ 333.016940][ T7966] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode [ 333.021968][ T7966] macsec1: entered promiscuous mode [ 333.163558][ T7969] autofs: Bad value for 'fd' [ 333.469848][ T7979] nbd: must specify an index to disconnect [ 334.186095][ T5884] usb 5-1: USB disconnect, device number 10 [ 335.023454][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6360 ms [ 335.023625][ C1] lec:lec_tx_timeout: lec0 [ 335.025540][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 335.646793][ T827] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 335.703815][ T5814] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 335.796079][ T827] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 335.796144][ T827] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 335.796175][ T827] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 335.796204][ T827] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 335.796242][ T827] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 335.798941][ T827] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 335.799030][ T827] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 335.799061][ T827] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 335.799089][ T827] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 335.799118][ T827] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 335.801939][ T827] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 335.802002][ T827] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 335.802032][ T827] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 335.802060][ T827] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 335.802089][ T827] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 335.967004][ T5814] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 335.967522][ T5814] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 335.975833][ T5814] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 336.010861][ T827] usb 6-1: string descriptor 0 read error: -22 [ 336.011035][ T827] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 336.011063][ T827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.038770][ T5814] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 336.040870][ T5814] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 336.040948][ T5814] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 336.082366][ T5814] usb 7-1: string descriptor 0 read error: -22 [ 336.082520][ T5814] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 336.082548][ T5814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.999039][ T5814] adutux 7-1:168.0: interrupt endpoints not found [ 337.163390][ T827] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 337.263943][ T5808] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 337.416075][ T5808] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 337.416144][ T5808] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 337.417512][ T5808] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 337.417571][ T5808] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 337.418699][ T5808] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 337.418752][ T5808] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 337.422270][ T5808] usb 5-1: string descriptor 0 read error: -22 [ 337.422386][ T5808] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 337.422404][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.560478][ T5808] adutux 5-1:168.0: interrupt endpoints not found [ 337.591675][ T8043] ======================================================= [ 337.591675][ T8043] WARNING: The mand mount option has been deprecated and [ 337.591675][ T8043] and is ignored by this kernel. Remove the mand [ 337.591675][ T8043] option from the mount to silence this warning. [ 337.591675][ T8043] ======================================================= [ 337.824637][ T8052] netlink: 'syz.1.657': attribute type 10 has an invalid length. [ 337.901377][ T8054] tmpfs: Cannot disable swap on remount [ 338.150972][ T5885] usb 7-1: USB disconnect, device number 3 [ 338.260473][ T8052] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 338.383969][ T8050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.542747][ T9] usb 5-1: USB disconnect, device number 11 [ 339.552927][ T5808] usb 6-1: USB disconnect, device number 2 [ 339.646234][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.662'. [ 339.936856][ T8068] : entered promiscuous mode [ 340.097550][ T37] audit: type=1326 audit(1769369263.583:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8079 comm="syz.5.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55f2aacb9 code=0x7ffc0000 [ 340.097616][ T37] audit: type=1326 audit(1769369263.603:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8079 comm="syz.5.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55f2aacb9 code=0x7ffc0000 [ 340.179895][ T37] audit: type=1326 audit(1769369263.683:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8079 comm="syz.5.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc55f2aacb9 code=0x7ffc0000 [ 340.179966][ T37] audit: type=1326 audit(1769369263.683:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8079 comm="syz.5.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55f2aacb9 code=0x7ffc0000 [ 340.180014][ T37] audit: type=1326 audit(1769369263.683:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8079 comm="syz.5.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55f2aacb9 code=0x7ffc0000 [ 340.180724][ T37] audit: type=1326 audit(1769369263.683:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8079 comm="syz.5.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fc55f2aacb9 code=0x7ffc0000 [ 340.367383][ T37] audit: type=1326 audit(1769369263.873:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8079 comm="syz.5.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55f2aacb9 code=0x7ffc0000 [ 340.367441][ T37] audit: type=1326 audit(1769369263.873:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8079 comm="syz.5.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55f2aacb9 code=0x7ffc0000 [ 340.789739][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 340.789774][ C1] lec:lec_tx_timeout: lec0 [ 340.791408][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 341.725652][ T8101] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 341.775052][ T9] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 341.827259][ T5885] kernel write not supported for file /uhid (pid: 5885 comm: kworker/1:6) [ 341.927039][ T9] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 341.927102][ T9] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 341.928259][ T9] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 341.928319][ T9] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 341.929506][ T9] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 341.929561][ T9] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 341.932899][ T9] usb 2-1: string descriptor 0 read error: -22 [ 341.933053][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 341.933081][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.081640][ T9] adutux 2-1:168.0: interrupt endpoints not found [ 342.755332][ T5208] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 342.908446][ T5208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.908484][ T5208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.908526][ T5208] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 342.908552][ T5208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.962396][ T5208] usb 5-1: config 0 descriptor?? [ 343.438873][ T5208] hkems 0003:2006:0118.0001: ignoring exceeding usage max [ 343.654861][ T5208] hkems 0003:2006:0118.0001: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.4-1/input0 [ 343.654900][ T5208] hkems 0003:2006:0118.0001: no inputs found [ 343.654921][ T5208] hkems 0003:2006:0118.0001: force feedback init failed [ 343.699343][ T5814] usb 2-1: USB disconnect, device number 11 [ 343.901160][ T5208] usb 5-1: USB disconnect, device number 12 [ 344.212933][ T8146] fido_id[8146]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 344.728514][ T8173] ptrace attach of "./syz-executor exec"[5797] was attempted by ""[8173] [ 344.756534][ T8175] usb usb5: usbfs: process 8175 (syz.6.699) did not claim interface 0 before use [ 345.138141][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.704'. [ 345.305865][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 345.464907][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 345.486461][ T9] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 345.486496][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.486519][ T9] usb 2-1: Product: syz [ 345.486536][ T9] usb 2-1: Manufacturer: syz [ 345.486553][ T9] usb 2-1: SerialNumber: syz [ 345.512497][ T9] usb 2-1: config 0 descriptor?? [ 345.574062][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 346.145194][ T5877] IPVS: starting estimator thread 0... [ 346.248796][ T8216] IPVS: using max 8 ests per chain, 19200 per kthread [ 346.264191][ T9] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 346.452438][ T9] usb 2-1: USB disconnect, device number 12 [ 346.545925][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 346.545959][ C1] lec:lec_tx_timeout: lec0 [ 346.546500][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 346.706103][ T5877] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 346.856011][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 346.859028][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.859065][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.859091][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 346.859138][ T5877] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 346.859164][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.936198][ T5877] usb 5-1: config 0 descriptor?? [ 347.393784][ T5877] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 347.393826][ T5877] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 347.393857][ T5877] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 347.393886][ T5877] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 347.393916][ T5877] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 347.393945][ T5877] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 347.393974][ T5877] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 347.394002][ T5877] microsoft 0003:045E:07DA.0002: unbalanced collection at end of report description [ 347.486964][ T5877] microsoft 0003:045E:07DA.0002: parse failed [ 347.487086][ T5877] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 347.620936][ T8251] netlink: 68 bytes leftover after parsing attributes in process `syz.1.725'. [ 347.688501][ T5808] usb 5-1: USB disconnect, device number 13 [ 347.884324][ T8261] tipc: Started in network mode [ 347.884359][ T8261] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 347.884417][ T8261] tipc: Enabling of bearer rejected, failed to enable media [ 348.951810][ T5810] Bluetooth: hci4: command 0x0406 tx timeout [ 349.079165][ T5808] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 349.439085][ T5808] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 349.439147][ T5808] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 349.440430][ T5808] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 349.441149][ T5808] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 349.442293][ T5808] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 349.442350][ T5808] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 349.486641][ T5808] usb 6-1: string descriptor 0 read error: -22 [ 349.486793][ T5808] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 349.486818][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.639890][ T5808] adutux 6-1:168.0: interrupt endpoints not found [ 350.551850][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.753'. [ 351.711414][ T5808] usb 6-1: USB disconnect, device number 3 [ 351.736886][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 351.736918][ C1] lec:lec_tx_timeout: lec0 [ 352.948433][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 353.008377][ T5814] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 353.096948][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 353.100771][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.100807][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.100832][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 353.100877][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 353.100902][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.183563][ T9] usb 2-1: config 0 descriptor?? [ 353.227413][ T5814] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.227450][ T5814] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.227491][ T5814] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 353.227516][ T5814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.281217][ T5814] usb 7-1: config 0 descriptor?? [ 353.728395][ T9] microsoft 0003:045E:07DA.0003: report is too long [ 353.728431][ T9] microsoft 0003:045E:07DA.0003: item 0 4 0 11 parsing failed [ 353.729318][ T9] microsoft 0003:045E:07DA.0003: parse failed [ 353.729441][ T9] microsoft 0003:045E:07DA.0003: probe with driver microsoft failed with error -22 [ 353.755548][ T8372] netlink: 32 bytes leftover after parsing attributes in process `syz.4.768'. [ 353.810990][ T5814] cp2112 0003:10C4:EA90.0004: item fetching failed at offset 5/7 [ 353.811757][ T5814] cp2112 0003:10C4:EA90.0004: parse failed [ 353.811897][ T5814] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -22 [ 353.883799][ T9] usb 2-1: USB disconnect, device number 13 [ 353.952181][ T5885] usb 7-1: USB disconnect, device number 4 [ 354.427253][ T6080] lec:lec_start_xmit: lec0:No lecd attached [ 354.563493][ T8396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.773'. [ 354.564500][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.773'. [ 354.564524][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.773'. [ 355.917616][ T5877] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 356.071754][ T5877] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 356.071817][ T5877] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 356.073319][ T5877] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 356.073375][ T5877] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 356.074867][ T5877] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 356.074925][ T5877] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 356.153315][ T5877] usb 6-1: string descriptor 0 read error: -22 [ 356.153471][ T5877] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 356.153498][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.283210][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 357.067193][ T5814] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 357.518550][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.518589][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.518631][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 357.518657][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.598278][ T9] usb 2-1: config 0 descriptor?? [ 357.605944][ T5877] adutux 6-1:168.0: interrupt endpoints not found [ 357.621408][ T5814] usb 7-1: Using ep0 maxpacket: 32 [ 357.624374][ T5814] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 357.624434][ T5814] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 357.624523][ T5814] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 357.624549][ T5814] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 357.662918][ T5814] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 357.662952][ T5814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.662973][ T5814] usb 7-1: Product: syz [ 357.662990][ T5814] usb 7-1: Manufacturer: syz [ 357.663007][ T5814] usb 7-1: SerialNumber: syz [ 357.791063][ T5814] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 357.791233][ T5814] imon 7-1:155.0: unable to initialize intf0, err -19 [ 357.791253][ T5814] imon:imon_probe: failed to initialize context! [ 357.791271][ T5814] imon 7-1:155.0: unable to register, err -19 [ 357.934360][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 357.934513][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 357.959988][ T9] usb 2-1: USB disconnect, device number 14 [ 358.102554][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 358.138608][ T8430] hsr0: entered promiscuous mode [ 358.140875][ T8430] macvlan2: entered allmulticast mode [ 358.140897][ T8430] hsr0: entered allmulticast mode [ 358.140911][ T8430] hsr_slave_0: entered allmulticast mode [ 358.140931][ T8430] hsr_slave_1: entered allmulticast mode [ 358.193448][ T8434] loop6: detected capacity change from 0 to 524287999 [ 358.568601][ T807] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 358.648204][ T9] usb 6-1: USB disconnect, device number 4 [ 358.801113][ T807] usb 2-1: Using ep0 maxpacket: 16 [ 358.806721][ T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.806782][ T807] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 358.806808][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.854305][ T807] usb 2-1: config 0 descriptor?? [ 359.188101][ T5877] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 359.406361][ T5877] usb 5-1: config 0 has no interfaces? [ 359.437378][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 359.437415][ C1] lec:lec_tx_timeout: lec0 [ 359.444947][ T5877] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 359.444982][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.445023][ T5877] usb 5-1: Product: syz [ 359.445040][ T5877] usb 5-1: Manufacturer: syz [ 359.445057][ T5877] usb 5-1: SerialNumber: syz [ 359.510603][ T5884] usb 7-1: USB disconnect, device number 5 [ 360.444824][ T807] hkems 0003:2006:0118.0005: unbalanced delimiter at end of report description [ 360.445628][ T807] hkems 0003:2006:0118.0005: parse failed [ 360.445706][ T807] hkems 0003:2006:0118.0005: probe with driver hkems failed with error -22 [ 360.505568][ T5877] usb 5-1: config 0 descriptor?? [ 360.574800][ T807] usb 2-1: USB disconnect, device number 15 [ 360.805039][ T5808] usb 5-1: USB disconnect, device number 14 [ 361.140283][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 361.181763][ T5884] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 361.302769][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 361.305488][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.305533][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.305574][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 361.305601][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.367675][ T9] usb 6-1: config 0 descriptor?? [ 361.372274][ T5884] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 361.372309][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.416870][ T5884] usb 7-1: config 0 descriptor?? [ 361.433798][ T5884] cp210x 7-1:0.0: cp210x converter detected [ 361.845864][ T9] logitech 0003:046D:C29C.0006: unknown main item tag 0x0 [ 361.845908][ T9] logitech 0003:046D:C29C.0006: unknown main item tag 0x0 [ 361.845940][ T9] logitech 0003:046D:C29C.0006: unknown main item tag 0x0 [ 361.845970][ T9] logitech 0003:046D:C29C.0006: unknown main item tag 0x0 [ 361.845998][ T9] logitech 0003:046D:C29C.0006: unknown main item tag 0x0 [ 361.846027][ T9] logitech 0003:046D:C29C.0006: unknown main item tag 0x0 [ 361.894073][ T5884] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 361.964333][ T9] logitech 0003:046D:C29C.0006: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 362.051255][ T9] logitech 0003:046D:C29C.0006: no inputs found [ 362.099206][ T5884] cp210x 7-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 362.099245][ T5884] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 362.135022][ T5884] usb 7-1: cp210x converter now attached to ttyUSB0 [ 362.144565][ T9] usb 6-1: USB disconnect, device number 5 [ 362.266487][ T5884] usb 7-1: USB disconnect, device number 6 [ 362.364741][ T8498] fido_id[8498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 362.400233][ T5884] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 362.401380][ T5884] cp210x 7-1:0.0: device disconnected [ 362.516557][ T8504] program syz.1.805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.736067][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'. [ 362.736138][ T8507] netlink: 40 bytes leftover after parsing attributes in process `syz.1.807'. [ 363.138732][ T8518] netlink: 'syz.5.809': attribute type 2 has an invalid length. [ 363.572939][ T8539] program syz.1.820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 364.717510][ T8584] tun0: tun_chr_ioctl cmd 2147767507 [ 364.832484][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 364.921634][ T8592] sctp: [Deprecated]: syz.5.844 (pid 8592) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.921634][ T8592] Use struct sctp_sack_info instead [ 364.988153][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 364.991556][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.991592][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.991619][ T9] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 364.991651][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 364.991687][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 364.991714][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.027775][ T5808] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 365.088364][ T9] usb 2-1: config 0 descriptor?? [ 365.217851][ T5814] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 365.246347][ T5808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.246604][ T5808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.246651][ T5808] usb 7-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 365.246679][ T5808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.359912][ T5808] usb 7-1: config 0 descriptor?? [ 365.373562][ T5814] usb 5-1: Using ep0 maxpacket: 16 [ 365.402065][ T5814] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 365.402156][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.402181][ T5814] usb 5-1: Product: syz [ 365.402199][ T5814] usb 5-1: Manufacturer: syz [ 365.402217][ T5814] usb 5-1: SerialNumber: syz [ 365.482518][ T5814] r8152-cfgselector 5-1: Unknown version 0x0000 [ 365.482613][ T5814] r8152-cfgselector 5-1: config 0 descriptor?? [ 365.532214][ T9] hid (null): unknown global tag 0xe [ 365.532253][ T9] hid (null): invalid report_size -1059027950 [ 365.532307][ T9] hid (null): unknown global tag 0xd [ 365.532545][ T9] hid (null): invalid report_size 11446 [ 365.721856][ T807] usb 2-1: USB disconnect, device number 16 [ 365.747102][ T5814] r8152-cfgselector 5-1: Needed 2 retries to read version [ 365.747384][ T5814] r8152-cfgselector 5-1: Unknown version 0x0000 [ 365.771636][ T5814] r8152-cfgselector 5-1: bad CDC descriptors [ 365.811479][ T5808] lenovo 0003:17EF:60B5.0008: unknown main item tag 0x0 [ 365.811523][ T5808] lenovo 0003:17EF:60B5.0008: unknown main item tag 0x0 [ 365.811555][ T5808] lenovo 0003:17EF:60B5.0008: unknown main item tag 0x0 [ 365.811585][ T5808] lenovo 0003:17EF:60B5.0008: unknown main item tag 0x0 [ 365.859705][ T5808] lenovo 0003:17EF:60B5.0008: hidraw0: USB HID v0.20 Device [HID 17ef:60b5] on usb-dummy_hcd.6-1/input0 [ 365.975335][ T807] r8152-cfgselector 5-1: USB disconnect, device number 15 [ 366.078882][ T5884] usb 7-1: USB disconnect, device number 7 [ 366.327885][ T5877] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 366.491983][ T5877] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 366.492046][ T5877] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.492074][ T5877] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 366.492106][ T5877] usb 6-1: config 0 interface 0 has no altsetting 0 [ 366.492154][ T5877] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 366.492180][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.513603][ T5877] usb 6-1: config 0 descriptor?? [ 366.995272][ T8636] sch_fq: defrate 0 ignored. [ 367.123446][ T5877] hid-alps 0003:044E:120C.0009: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.5-1/input0 [ 367.284775][ T5808] usb 6-1: USB disconnect, device number 6 [ 367.370113][ T8644] fido_id[8644]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 367.417855][ T5884] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 367.570054][ T5884] usb 7-1: Using ep0 maxpacket: 32 [ 367.574258][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.574294][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.574334][ T5884] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 367.574359][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.635102][ T5884] usb 7-1: config 0 descriptor?? [ 367.664873][ T5884] hub 7-1:0.0: USB hub found [ 367.887456][ T5884] hub 7-1:0.0: 1 port detected [ 368.122398][ T5884] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 368.122430][ T5884] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 368.153168][ T5884] usbhid 7-1:0.0: can't add hid device: -71 [ 368.153306][ T5884] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 368.327216][ T5884] usb 7-1: USB disconnect, device number 8 [ 370.644593][ T8675] input: syz1 as /devices/virtual/input/input10 [ 371.088134][ T8694] overlayfs: missing 'workdir' [ 371.446256][ T8704] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 373.541273][ T8728] program syz.0.900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.568056][ T9] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 373.568215][ T5812] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 373.730304][ T9] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 373.730368][ T9] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 373.731934][ T9] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 373.731993][ T9] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 373.733468][ T9] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 373.733552][ T9] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 373.734681][ T5812] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 373.734738][ T5812] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 373.741031][ T5812] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 373.741208][ T5812] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 373.747854][ T5812] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 373.749095][ T5812] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 373.762797][ T9] usb 6-1: string descriptor 0 read error: -22 [ 373.763221][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 373.763295][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.772337][ T5812] usb 7-1: string descriptor 0 read error: -22 [ 373.772559][ T5812] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 373.772638][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.937162][ T9] adutux 6-1:168.0: interrupt endpoints not found [ 373.974768][ T5812] adutux 7-1:168.0: interrupt endpoints not found [ 375.301370][ T5877] usb 6-1: USB disconnect, device number 7 [ 375.427054][ T5812] usb 7-1: USB disconnect, device number 9 [ 376.036952][ T8780] geneve2: entered promiscuous mode [ 376.610406][ T8801] netlink: 'syz.5.935': attribute type 10 has an invalid length. [ 376.610451][ T8801] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 377.678129][ T5814] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 377.833831][ T5814] usb 6-1: Using ep0 maxpacket: 32 [ 377.835944][ T5814] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.835981][ T5814] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.836024][ T5814] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 377.836051][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.876946][ T5814] usb 6-1: config 0 descriptor?? [ 378.348754][ T5814] logitech 0003:046D:C29C.000A: unbalanced delimiter at end of report description [ 378.349586][ T5814] logitech 0003:046D:C29C.000A: parse failed [ 378.349709][ T5814] logitech 0003:046D:C29C.000A: probe with driver logitech failed with error -22 [ 379.078410][ T5877] usb 6-1: USB disconnect, device number 8 [ 380.068338][ T5877] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 380.222548][ T5877] usb 6-1: Using ep0 maxpacket: 32 [ 380.234743][ T5877] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 380.234772][ T5877] usb 6-1: config 0 has no interface number 0 [ 380.256896][ T5877] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 380.256931][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.256954][ T5877] usb 6-1: Product: syz [ 380.256971][ T5877] usb 6-1: Manufacturer: syz [ 380.256985][ T5877] usb 6-1: SerialNumber: syz [ 380.310704][ T5877] usb 6-1: config 0 descriptor?? [ 380.315935][ T5877] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 380.631181][ T8916] veth1_macvtap: left promiscuous mode [ 380.701010][ T5877] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 380.753169][ T5877] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 380.935770][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 380.958319][ T5814] usb 6-1: USB disconnect, device number 9 [ 381.027741][ T5814] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 381.064757][ T5814] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 381.065455][ T5814] quatech2 6-1:0.51: device disconnected [ 381.214594][ T8924] netlink: 56 bytes leftover after parsing attributes in process `syz.6.991'. [ 381.583198][ T8940] netlink: 56 bytes leftover after parsing attributes in process `syz.6.998'. [ 381.583869][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.998'. [ 381.888338][ T5814] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 382.802270][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.802309][ T5814] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 382.802368][ T5814] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 382.802394][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.875175][ T5814] usb 5-1: config 0 descriptor?? [ 383.310110][ T5814] waterforce 0003:1044:7A4D.000B: item fetching failed at offset 0/1 [ 383.310724][ T5814] waterforce 0003:1044:7A4D.000B: hid parse failed with -22 [ 383.310803][ T5814] waterforce 0003:1044:7A4D.000B: probe with driver waterforce failed with error -22 [ 383.463778][ T8966] sctp: [Deprecated]: syz.1.1010 (pid 8966) Use of int in max_burst socket option. [ 383.463778][ T8966] Use struct sctp_assoc_value instead [ 383.498567][ T5884] usb 5-1: USB disconnect, device number 16 [ 383.671557][ T8971] blkio.reset_stats is deprecated [ 384.284207][ T8980] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.325829][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.325913][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.345029][ T1322] lec:lec_start_xmit: lec0:No lecd attached [ 384.442327][ T8980] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.684786][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'. [ 384.932544][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1023'. [ 385.188295][ T5809] Bluetooth: hci4: command 0x0406 tx timeout [ 386.798435][ T5884] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 386.863713][ T9015] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1032'. [ 386.974000][ T5884] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 386.974067][ T5884] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 386.975236][ T5884] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 386.975290][ T5884] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 386.976466][ T5884] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 386.976545][ T5884] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 387.056255][ T5884] usb 7-1: string descriptor 0 read error: -22 [ 387.056414][ T5884] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 387.056442][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.104225][ T5884] adutux 7-1:168.0: interrupt endpoints not found [ 387.508459][ T5814] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 387.668717][ T5814] usb 2-1: Using ep0 maxpacket: 32 [ 387.671521][ T5814] usb 2-1: config 2 has an invalid interface number: 145 but max is 0 [ 387.671560][ T5814] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 387.671582][ T5814] usb 2-1: config 2 has no interface number 0 [ 387.671630][ T5814] usb 2-1: config 2 interface 145 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 387.671661][ T5814] usb 2-1: config 2 interface 145 has no altsetting 0 [ 387.674708][ T5814] usb 2-1: New USB device found, idVendor=22b8, idProduct=3010, bcdDevice= 0.01 [ 387.674739][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.674763][ T5814] usb 2-1: Product: syz [ 387.674779][ T5814] usb 2-1: Manufacturer: syz [ 387.674797][ T5814] usb 2-1: SerialNumber: syz [ 387.918806][ T5814] usb-storage 2-1:2.145: USB Mass Storage device detected [ 387.923153][ T5814] usb-storage 2-1:2.145: Quirks match for vid 22b8 pid 3010: 30 [ 388.060054][ T5814] usb 2-1: USB disconnect, device number 17 [ 389.278438][ T5884] usb 7-1: USB disconnect, device number 10 [ 389.366125][ T5809] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 389.431007][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5090 ms [ 389.431047][ C1] lec:lec_tx_timeout: lec0 [ 389.508081][ T9015] ipvlan0: entered promiscuous mode [ 389.515639][ T9015] ipvlan0: left promiscuous mode [ 389.526840][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 389.606162][ T9033] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1039'. [ 391.361064][ T9079] input: syz1 as /devices/virtual/input/input12 [ 391.537729][ T5810] Bluetooth: hci2: command 0x0406 tx timeout [ 393.098034][ T9107] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 393.098034][ T9107] The task syz.0.1067 (9107) triggered the difference, watch for misbehavior. [ 393.220088][ T9] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 393.278357][ T5805] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 393.371374][ T9] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 393.371439][ T9] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 393.372585][ T9] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 393.372642][ T9] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 393.373760][ T9] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 393.373814][ T9] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 393.389088][ T9] usb 2-1: string descriptor 0 read error: -22 [ 393.389483][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 393.389547][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.436349][ T5809] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 393.437280][ T5809] Bluetooth: hci4: Injecting HCI hardware error event [ 393.445845][ T5810] Bluetooth: hci4: hardware error 0x00 [ 393.470176][ T5805] usb 7-1: Using ep0 maxpacket: 32 [ 393.506555][ T5805] usb 7-1: config 0 has no interfaces? [ 393.506598][ T5805] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 393.506625][ T5805] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.551087][ T5805] usb 7-1: config 0 descriptor?? [ 393.610359][ T9] adutux 2-1:168.0: interrupt endpoints not found [ 393.763748][ T9105] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1068'. [ 393.763814][ T9105] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1068'. [ 394.019611][ T9] usb 7-1: USB disconnect, device number 11 [ 394.021117][ T37] audit: type=1326 audit(1769369317.529:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9122 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a134acb9 code=0x7ffc0000 [ 394.023925][ T37] audit: type=1326 audit(1769369317.529:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9122 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a134acb9 code=0x7ffc0000 [ 394.073561][ T37] audit: type=1326 audit(1769369317.569:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9122 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a134acb9 code=0x7ffc0000 [ 394.073695][ T37] audit: type=1326 audit(1769369317.569:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9122 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a134acb9 code=0x7ffc0000 [ 394.083676][ T37] audit: type=1326 audit(1769369317.579:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9122 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f36a134acb9 code=0x7ffc0000 [ 394.147589][ T37] audit: type=1326 audit(1769369317.649:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9122 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a134acb9 code=0x7ffc0000 [ 394.147647][ T37] audit: type=1326 audit(1769369317.649:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9122 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f36a134aa22 code=0x7ffc0000 [ 394.147695][ T37] audit: type=1326 audit(1769369317.649:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9122 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f36a134aab7 code=0x7ffc0000 [ 394.147742][ T37] audit: type=1326 audit(1769369317.649:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9122 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f36a1307a51 code=0x7ffc0000 [ 394.147790][ T37] audit: type=1326 audit(1769369317.649:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9122 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f36a134bac9 code=0x7ffc0000 [ 394.533874][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1078'. [ 394.967369][ T31] usb 2-1: USB disconnect, device number 18 [ 395.449895][ T5809] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 395.921974][ T5877] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 395.922159][ T5810] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 396.860648][ T5877] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.860680][ T5877] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 396.860704][ T5877] usb 5-1: config 1 has no interface number 0 [ 396.860758][ T5877] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.860790][ T5877] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 396.867451][ T5877] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.867484][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.867507][ T5877] usb 5-1: Product: syz [ 396.867524][ T5877] usb 5-1: Manufacturer: syz [ 396.867540][ T5877] usb 5-1: SerialNumber: syz [ 396.888568][ T5805] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 397.055119][ T5805] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 397.055195][ T5805] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 397.083171][ T5805] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 397.083232][ T5805] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 397.085282][ T5805] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 397.085339][ T5805] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 397.104074][ T5805] usb 6-1: string descriptor 0 read error: -22 [ 397.104397][ T5805] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 397.104435][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.233906][ T5805] adutux 6-1:168.0: interrupt endpoints not found [ 398.038833][ T5877] cdc_ncm 5-1:1.1: bind() failure [ 398.775731][ T5805] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 399.095863][ T5877] usb 5-1: USB disconnect, device number 17 [ 399.261366][ T5814] usb 6-1: USB disconnect, device number 10 [ 399.327486][ T31] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 399.346875][ T5805] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 399.346942][ T5805] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 399.349961][ T5805] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 399.350147][ T5805] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 399.367270][ T5805] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 399.367440][ T5805] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 399.395421][ T5805] usb 2-1: string descriptor 0 read error: -22 [ 399.395851][ T5805] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 399.395926][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.473144][ T5805] adutux 2-1:168.0: interrupt endpoints not found [ 399.534485][ T31] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 399.534519][ T31] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 399.534542][ T31] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 399.534598][ T31] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 399.534627][ T31] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 399.589904][ T31] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 399.589938][ T31] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 399.589961][ T31] usb 7-1: Product: syz [ 399.589979][ T31] usb 7-1: Manufacturer: syz [ 399.627072][ T31] cdc_wdm 7-1:1.0: skipping garbage [ 399.627095][ T31] cdc_wdm 7-1:1.0: skipping garbage [ 399.655001][ T31] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 399.655037][ T31] cdc_wdm 7-1:1.0: Unknown control protocol [ 400.448057][ T5805] usb 7-1: USB disconnect, device number 12 [ 400.840881][ T9242] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 400.876188][ T5805] usb 2-1: USB disconnect, device number 19 [ 401.302668][ T9245] binder: 9244:9245 ioctl c0306201 200000001a80 returned -14 [ 401.828633][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 401.828673][ T9272] netlink: 'syz.0.1139': attribute type 29 has an invalid length. [ 401.828690][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'. [ 402.210200][ T9281] 9pnet: p9_errstr2errno: server reported unknown error [ 402.718519][ T5877] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 402.871794][ T5877] usb 7-1: config 0 has an invalid interface number: 90 but max is 0 [ 402.871828][ T5877] usb 7-1: config 0 has no interface number 0 [ 402.871881][ T5877] usb 7-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 402.877898][ T5877] usb 7-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 402.877941][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.877962][ T5877] usb 7-1: Product: syz [ 402.877977][ T5877] usb 7-1: Manufacturer: syz [ 402.877994][ T5877] usb 7-1: SerialNumber: syz [ 402.951203][ T5877] usb 7-1: config 0 descriptor?? [ 402.954804][ T9290] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 403.025166][ T9297] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1150'. [ 403.202979][ T5877] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 403.262118][ T5877] input: Griffin PowerMate as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.90/input/input13 [ 403.320653][ C1] powermate: config urb returned -71 [ 403.323568][ C1] powermate: config urb returned -71 [ 403.323768][ C1] powermate: config urb returned -71 [ 403.323987][ C1] powermate: config urb returned -71 [ 403.440953][ T5877] usb 7-1: USB disconnect, device number 13 [ 403.441066][ C1] powermate 7-1:0.90: powermate_irq - usb_submit_urb failed with result: -19 [ 404.359037][ T5877] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 404.420986][ T9327] netlink: 'syz.0.1163': attribute type 83 has an invalid length. [ 404.518387][ T5877] usb 6-1: Using ep0 maxpacket: 8 [ 404.519900][ T5877] usb 6-1: no configurations [ 404.519921][ T5877] usb 6-1: can't read configurations, error -22 [ 404.690333][ T5877] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 404.848944][ T5877] usb 6-1: Using ep0 maxpacket: 8 [ 404.923920][ T5877] usb 6-1: no configurations [ 404.923943][ T5877] usb 6-1: can't read configurations, error -22 [ 404.924417][ T5877] usb usb6-port1: attempt power cycle [ 405.223259][ T9337] loop8: detected capacity change from 0 to 8 [ 405.263388][ T9337] Dev loop8: unable to read RDB block 8 [ 405.263450][ T9337] loop8: unable to read partition table [ 405.263687][ T9337] loop8: partition table beyond EOD, truncated [ 405.263722][ T9337] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 405.278470][ T5877] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 405.309304][ T5877] usb 6-1: Using ep0 maxpacket: 8 [ 405.329645][ T5877] usb 6-1: no configurations [ 405.329669][ T5877] usb 6-1: can't read configurations, error -22 [ 405.340179][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1167'. [ 405.458436][ T5877] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 405.479252][ T5877] usb 6-1: Using ep0 maxpacket: 8 [ 405.548165][ T5877] usb 6-1: no configurations [ 405.548425][ T5877] usb 6-1: can't read configurations, error -22 [ 405.562165][ T5877] usb usb6-port1: unable to enumerate USB device [ 405.978431][ T5877] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 406.138417][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 406.142947][ T5877] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 406.142981][ T5877] usb 2-1: config 0 has no interface number 0 [ 406.143055][ T5877] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 406.143085][ T5877] usb 2-1: config 0 interface 196 has no altsetting 0 [ 406.193727][ T5877] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 406.193764][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.193788][ T5877] usb 2-1: Product: syz [ 406.193804][ T5877] usb 2-1: Manufacturer: syz [ 406.193821][ T5877] usb 2-1: SerialNumber: syz [ 406.233866][ T5877] usb 2-1: config 0 descriptor?? [ 406.234746][ T9343] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 406.443800][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1174'. [ 407.067271][ T5877] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 407.208881][ T5877] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 407.323981][ T5805] usb 2-1: USB disconnect, device number 20 [ 407.644406][ T5805] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 408.338416][ T5814] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 408.511122][ T5814] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 408.511159][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.517739][ T5814] usb 2-1: config 0 descriptor?? [ 408.555858][ T5814] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 408.613723][ T9403] netlink: 'syz.0.1194': attribute type 1 has an invalid length. [ 408.613747][ T9403] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1194'. [ 408.764805][ T5814] gp8psk: usb in 128 operation failed. [ 408.780704][ T5814] gp8psk: usb in 137 operation failed. [ 408.780728][ T5814] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 408.781668][ T5814] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 408.781730][ T5814] usb 2-1: media controller created [ 408.821633][ T9403] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.855688][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 408.922333][ T9403] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.016071][ T5814] gp8psk_fe: Frontend attached [ 409.016903][ T5814] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 409.064189][ T5814] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 409.487350][ T5814] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 409.487373][ T5814] gp8psk: found Genpix USB device pID = 203 (hex) [ 409.702144][ T5814] usb 2-1: USB disconnect, device number 21 [ 410.134473][ T5814] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 410.426613][ T37] kauditd_printk_skb: 32 callbacks suppressed [ 410.426635][ T37] audit: type=1326 audit(1769369333.929:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9433 comm="syz.6.1209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52f865acb9 code=0x0 [ 410.658440][ T5814] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 410.828729][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 410.834929][ T5814] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 410.834960][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.834983][ T5814] usb 2-1: Product: syz [ 410.834999][ T5814] usb 2-1: Manufacturer: syz [ 410.835014][ T5814] usb 2-1: SerialNumber: syz [ 410.895911][ T5814] usb 2-1: config 0 descriptor?? [ 411.242665][ T9453] binder: 9452:9453 ioctl c0306201 0 returned -14 [ 411.244264][ T9453] binder: 9452:9453 ioctl 89e0 0 returned -22 [ 411.351790][ T5814] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 411.394354][ T5814] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 411.411914][ T5814] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 411.411978][ T5814] usb 2-1: media controller created [ 411.487564][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.561363][ T5814] zl10353_read_register: readreg error (reg=127, ret==0) [ 411.561428][ T5814] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 411.561443][ T5814] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 411.600638][ T5814] usb 2-1: USB disconnect, device number 22 [ 411.745257][ T5814] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 411.908520][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 412.068655][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 412.074184][ T9] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 412.074208][ T9] usb 5-1: config 0 has no interface number 0 [ 412.074254][ T9] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 412.074274][ T9] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 412.074293][ T9] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 412.074313][ T9] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 412.074356][ T9] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.154651][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 412.154747][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.154802][ T9] usb 5-1: Product: syz [ 412.154847][ T9] usb 5-1: Manufacturer: syz [ 412.154894][ T9] usb 5-1: SerialNumber: syz [ 412.234523][ T9] usb 5-1: config 0 descriptor?? [ 412.485140][ T9] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=ߴꁙ驠 interface=186 now attached to iowarrior0 [ 412.677318][ T5805] usb 5-1: USB disconnect, device number 18 [ 412.748600][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 412.908398][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 412.917269][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 412.917311][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 412.917336][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 412.917364][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 412.917389][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 412.917433][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 412.917460][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.996640][ T9] usb 2-1: config 0 descriptor?? [ 413.127020][ T5810] Bluetooth: hci5: urb ffff88803d800500 submission failed (90) [ 413.230513][ T9] usb 2-1: USB disconnect, device number 23 [ 413.768487][ T5885] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 413.934206][ T5885] usb 7-1: Using ep0 maxpacket: 8 [ 413.946699][ T5885] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 413.946732][ T5885] usb 7-1: config 0 has no interface number 0 [ 413.980042][ T5885] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 413.980075][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.980097][ T5885] usb 7-1: Product: syz [ 413.980112][ T5885] usb 7-1: Manufacturer: syz [ 413.980128][ T5885] usb 7-1: SerialNumber: syz [ 414.025743][ T5885] usb 7-1: config 0 descriptor?? [ 414.258615][ T5885] uvcvideo 7-1:0.31: probe with driver uvcvideo failed with error -22 [ 414.267541][ T5885] usb 7-1: USB disconnect, device number 14 [ 415.051167][ T9526] pimreg: tun_chr_ioctl cmd 2147767507 [ 415.051531][ T9526] pimreg: tun_chr_ioctl cmd 1074025675 [ 415.051551][ T9526] pimreg: persist enabled [ 415.381832][ T5885] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 415.541778][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.541819][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.541845][ T5885] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 415.541892][ T5885] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 415.542010][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.681062][ T5885] usb 7-1: config 0 descriptor?? [ 416.312359][ T5809] Bluetooth: hci5: command 0x1003 tx timeout [ 416.594474][ T5810] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 416.910071][ T5885] hid_parser_main: 3 callbacks suppressed [ 416.910099][ T5885] acrux 0003:1A34:0802.000C: unknown main item tag 0x0 [ 416.910133][ T5885] acrux 0003:1A34:0802.000C: unknown main item tag 0x0 [ 416.910164][ T5885] acrux 0003:1A34:0802.000C: unknown main item tag 0x0 [ 416.910193][ T5885] acrux 0003:1A34:0802.000C: unknown main item tag 0x0 [ 416.910223][ T5885] acrux 0003:1A34:0802.000C: unknown main item tag 0x0 [ 416.968113][ T5877] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 416.980479][ T5885] acrux 0003:1A34:0802.000C: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.6-1/input0 [ 416.980517][ T5885] acrux 0003:1A34:0802.000C: no inputs found [ 416.980533][ T5885] acrux 0003:1A34:0802.000C: Failed to enable force feedback support, error: -19 [ 417.131278][ T9529] acrux 0003:1A34:0802.000C: pid 9529 passed too short report [ 417.151392][ T5877] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 417.151448][ T9] usb 7-1: USB disconnect, device number 15 [ 417.151474][ T5877] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 417.152621][ T5877] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 417.152674][ T5877] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 417.154040][ T5877] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 417.154091][ T5877] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 417.157759][ T5877] usb 5-1: string descriptor 0 read error: -22 [ 417.157908][ T5877] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 417.157935][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.444044][ T5877] adutux 5-1:168.0: interrupt endpoints not found [ 417.535621][ T9549] fido_id[9549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 418.048543][ T5877] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 418.144071][ T6080] lec:lec_start_xmit: lec0:No lecd attached [ 418.226762][ T5877] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.226799][ T5877] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 418.226829][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 418.226873][ T5877] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 418.226900][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.262676][ T9570] block device autoloading is deprecated and will be removed. [ 418.290968][ T5877] usb 7-1: config 0 descriptor?? [ 418.344391][ T9581] syz.5.1272 uses obsolete (PF_INET,SOCK_PACKET) [ 418.405577][ T9570] EXT4-fs (loop0): unable to read superblock [ 418.652359][ T31] usb 5-1: USB disconnect, device number 19 [ 419.009629][ T9597] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1278'. [ 419.371551][ T5812] usb 7-1: USB disconnect, device number 16 [ 419.448664][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 419.598448][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 419.600900][ T9] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 419.600932][ T9] usb 6-1: config 0 has no interface number 0 [ 419.638185][ T9] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 419.638220][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.638244][ T9] usb 6-1: Product: syz [ 419.638261][ T9] usb 6-1: Manufacturer: syz [ 419.638424][ T9] usb 6-1: SerialNumber: syz [ 419.675388][ T9] usb 6-1: config 0 descriptor?? [ 419.705859][ T9] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 419.923221][ T9] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 419.972732][ T9] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 420.151312][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 40 [ 421.067916][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 421.073118][ T31] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 421.138445][ T9] usb 6-1: USB disconnect, device number 15 [ 421.157300][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 421.174816][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 421.176367][ T9] quatech2 6-1:0.51: device disconnected [ 421.260571][ T31] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 421.260636][ T31] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 421.264939][ T31] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 421.264980][ T31] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 421.266089][ T31] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 421.266174][ T31] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 421.280124][ T31] usb 5-1: string descriptor 0 read error: -22 [ 421.280551][ T31] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 421.280624][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.417148][ T31] adutux 5-1:168.0: interrupt endpoints not found [ 421.787273][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1301'. [ 422.810447][ T9688] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1321'. [ 423.039089][ T5877] usb 5-1: USB disconnect, device number 20 [ 423.083542][ T9690] KVM: debugfs: duplicate directory 9690-4 [ 423.428402][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5290 ms [ 423.428440][ C1] lec:lec_tx_timeout: lec0 [ 423.515259][ T9706] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 424.083654][ T9720] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 425.018449][ T5877] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 425.173199][ T5877] usb 6-1: unable to get BOS descriptor or descriptor too short [ 425.174802][ T5877] usb 6-1: not running at top speed; connect to a high speed hub [ 425.177749][ T5877] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.177777][ T5877] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 425.229795][ T5877] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 425.229830][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.229852][ T5877] usb 6-1: Product: syz [ 425.229869][ T5877] usb 6-1: Manufacturer: syz [ 425.229885][ T5877] usb 6-1: SerialNumber: syz [ 425.508141][ T5877] usb 6-1: USB disconnect, device number 16 [ 426.645419][ T9817] fuse: Bad value for 'fd' [ 427.908618][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 427.909060][ T9785] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 428.733368][ T9785] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 428.858413][ T9785] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 428.858544][ T9785] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 429.007572][ T9785] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 429.007685][ T9785] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 429.103214][ T9785] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 429.104177][ T9785] ================================================================== [ 429.104194][ T9785] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x92/0x190 [ 429.104231][ T9785] Read of size 8 at addr ffff88805c2f4780 by task syz.6.1364/9785 [ 429.104252][ T9785] [ 429.104271][ T9785] CPU: 0 UID: 0 PID: 9785 Comm: syz.6.1364 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 429.104298][ T9785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 429.104319][ T9785] Call Trace: [ 429.104328][ T9785] [ 429.104343][ T9785] dump_stack_lvl+0xe8/0x150 [ 429.104378][ T9785] print_report+0xba/0x230 [ 429.104407][ T9785] ? __list_del_entry_valid_or_report+0x92/0x190 [ 429.104434][ T9785] kasan_report+0x117/0x150 [ 429.104474][ T9785] ? __list_del_entry_valid_or_report+0x92/0x190 [ 429.104506][ T9785] __list_del_entry_valid_or_report+0x92/0x190 [ 429.104535][ T9785] bt_accept_unlink+0x39/0x260 [ 429.104575][ T9785] l2cap_sock_teardown_cb+0x17e/0x490 [ 429.104611][ T9785] l2cap_chan_del+0xb5/0x610 [ 429.104643][ T9785] ? l2cap_conn_del+0x31a/0x5b0 [ 429.104671][ T9785] l2cap_conn_del+0x326/0x5b0 [ 429.104705][ T9785] l2cap_connect_cfm+0x122/0x1130 [ 429.104738][ T9785] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 429.104765][ T9785] ? lockdep_hardirqs_on+0x7a/0x110 [ 429.104798][ T9785] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 429.104834][ T9785] ? mutex_lock_nested+0x152/0x1d0 [ 429.104858][ T9785] ? hci_conn_failed+0x165/0x340 [ 429.104883][ T9785] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 429.104910][ T9785] hci_conn_failed+0x1ce/0x340 [ 429.104937][ T9785] ? hci_abort_conn_sync+0x8af/0xed0 [ 429.104963][ T9785] hci_abort_conn_sync+0xbdd/0xed0 [ 429.105005][ T9785] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 429.105030][ T9785] ? hci_disconnect_all_sync+0x2e/0x350 [ 429.105061][ T9785] ? hci_disconnect_all_sync+0x2e/0x350 [ 429.105086][ T9785] ? hci_disconnect_all_sync+0x2e/0x350 [ 429.105114][ T9785] hci_disconnect_all_sync+0x1b5/0x350 [ 429.105142][ T9785] hci_suspend_sync+0x417/0xd20 [ 429.105171][ T9785] ? __pfx_hci_suspend_sync+0x10/0x10 [ 429.105197][ T9785] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 429.105230][ T9785] ? lockdep_hardirqs_on+0x7a/0x110 [ 429.105264][ T9785] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 429.105297][ T9785] ? mutex_lock_nested+0x152/0x1d0 [ 429.105322][ T9785] ? hci_suspend_dev+0x285/0x540 [ 429.105360][ T9785] hci_suspend_dev+0x28d/0x540 [ 429.105398][ T9785] ? __pfx_hci_suspend_dev+0x10/0x10 [ 429.105440][ T9785] hci_suspend_notifier+0xf2/0x2f0 [ 429.105478][ T9785] notifier_call_chain+0x19d/0x3a0 [ 429.105517][ T9785] blocking_notifier_call_chain_robust+0x85/0x100 [ 429.105557][ T9785] pm_notifier_call_chain_robust+0x2c/0x60 [ 429.105594][ T9785] snapshot_open+0x1a2/0x280 [ 429.105629][ T9785] ? __pfx_snapshot_open+0x10/0x10 [ 429.105662][ T9785] misc_open+0x2de/0x350 [ 429.105687][ T9785] chrdev_open+0x4d0/0x5f0 [ 429.105710][ T9785] ? __pfx_chrdev_open+0x10/0x10 [ 429.105733][ T9785] ? fsnotify_open_perm_and_set_mode+0x116/0x620 [ 429.105767][ T9785] ? __pfx_chrdev_open+0x10/0x10 [ 429.105788][ T9785] do_dentry_open+0x7d0/0x1270 [ 429.105819][ T9785] vfs_open+0x3b/0x350 [ 429.105843][ T9785] ? path_openat+0x34b1/0x3e70 [ 429.105876][ T9785] path_openat+0x34c9/0x3e70 [ 429.105933][ T9785] ? __pfx_path_openat+0x10/0x10 [ 429.105966][ T9785] ? kasan_save_track+0x4f/0x80 [ 429.106028][ T9785] ? kasan_save_track+0x3e/0x80 [ 429.106060][ T9785] ? __kasan_slab_alloc+0x6c/0x80 [ 429.106094][ T9785] ? kmem_cache_alloc_noprof+0x188/0x6a0 [ 429.106126][ T9785] ? getname_flags+0xb7/0x540 [ 429.106148][ T9785] ? do_sys_openat2+0xca/0x220 [ 429.106179][ T9785] ? do_raw_spin_lock+0x12b/0x2f0 [ 429.106214][ T9785] do_filp_open+0x22d/0x490 [ 429.106248][ T9785] ? __pfx_do_filp_open+0x10/0x10 [ 429.106279][ T9785] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 429.106320][ T9785] ? alloc_fd+0x64e/0x6c0 [ 429.106349][ T9785] do_sys_openat2+0x12f/0x220 [ 429.106375][ T9785] ? __se_sys_futex+0x3a8/0x450 [ 429.106412][ T9785] ? __pfx_do_sys_openat2+0x10/0x10 [ 429.106439][ T9785] ? __fget_files+0x2a/0x420 [ 429.106463][ T9785] ? __pfx___se_sys_futex+0x10/0x10 [ 429.106497][ T9785] ? __fget_files+0x2a/0x420 [ 429.106525][ T9785] __x64_sys_openat+0x138/0x170 [ 429.106554][ T9785] do_syscall_64+0xe2/0xf80 [ 429.106587][ T9785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.106610][ T9785] ? trace_irq_disable+0x37/0x100 [ 429.106637][ T9785] ? clear_bhb_loop+0x60/0xb0 [ 429.106663][ T9785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.106687][ T9785] RIP: 0033:0x7f52f865acb9 [ 429.106719][ T9785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.106741][ T9785] RSP: 002b:00007f52f68b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 429.106767][ T9785] RAX: ffffffffffffffda RBX: 00007f52f88d5fa0 RCX: 00007f52f865acb9 [ 429.106786][ T9785] RDX: 0000000000000800 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 429.106804][ T9785] RBP: 00007f52f86c8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 429.106820][ T9785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.106835][ T9785] R13: 00007f52f88d6038 R14: 00007f52f88d5fa0 R15: 00007ffe2793aa08 [ 429.106863][ T9785] [ 429.106872][ T9785] [ 429.106878][ T9785] Allocated by task 9835: [ 429.106890][ T9785] kasan_save_track+0x3e/0x80 [ 429.106922][ T9785] __kasan_kmalloc+0x93/0xb0 [ 429.106955][ T9785] __kmalloc_node_track_caller_noprof+0x391/0x7f0 [ 429.107007][ T9785] kmalloc_reserve+0x136/0x290 [ 429.107042][ T9785] __alloc_skb+0x204/0x390 [ 429.107075][ T9785] __ip6_append_data+0x2c27/0x3f50 [ 429.107105][ T9785] ip6_append_data+0x1c0/0x380 [ 429.107132][ T9785] ping_v6_sendmsg+0xecd/0x12d0 [ 429.107158][ T9785] __sock_sendmsg+0x19c/0x270 [ 429.107185][ T9785] __sys_sendto+0x3d0/0x560 [ 429.107218][ T9785] __x64_sys_sendto+0xde/0x100 [ 429.107254][ T9785] do_syscall_64+0xe2/0xf80 [ 429.107284][ T9785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.107307][ T9785] [ 429.107312][ T9785] Freed by task 9832: [ 429.107324][ T9785] kasan_save_track+0x3e/0x80 [ 429.107354][ T9785] kasan_save_free_info+0x46/0x50 [ 429.107380][ T9785] __kasan_slab_free+0x5c/0x80 [ 429.107413][ T9785] kfree+0x1bb/0x8f0 [ 429.107440][ T9785] skb_release_data+0x62d/0x7c0 [ 429.107461][ T9785] sk_skb_reason_drop+0x127/0x170 [ 429.107481][ T9785] skb_queue_purge_reason+0x2ff/0x3c0 [ 429.107511][ T9785] packet_set_ring+0x1544/0x2220 [ 429.107538][ T9785] packet_release+0x7cb/0xcf0 [ 429.107563][ T9785] sock_close+0xc3/0x240 [ 429.107588][ T9785] __fput+0x45e/0xa80 [ 429.107609][ T9785] task_work_run+0x1d9/0x270 [ 429.107627][ T9785] exit_to_user_mode_loop+0xed/0x480 [ 429.107658][ T9785] do_syscall_64+0x2b7/0xf80 [ 429.107689][ T9785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.107709][ T9785] [ 429.107715][ T9785] The buggy address belongs to the object at ffff88805c2f4000 [ 429.107715][ T9785] which belongs to the cache kmalloc-2k of size 2048 [ 429.107736][ T9785] The buggy address is located 1920 bytes inside of [ 429.107736][ T9785] freed 2048-byte region [ffff88805c2f4000, ffff88805c2f4800) [ 429.107762][ T9785] [ 429.107768][ T9785] The buggy address belongs to the physical page: [ 429.107792][ T9785] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c2f0 [ 429.107815][ T9785] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 429.107835][ T9785] flags: 0x80000000000040(head|node=0|zone=1) [ 429.107854][ T9785] page_type: f5(slab) [ 429.107876][ T9785] raw: 0080000000000040 ffff88813fea7000 ffffea0000d04800 dead000000000002 [ 429.107897][ T9785] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 429.107921][ T9785] head: 0080000000000040 ffff88813fea7000 ffffea0000d04800 dead000000000002 [ 429.107941][ T9785] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 429.107963][ T9785] head: 0080000000000003 ffffea000170bc01 00000000ffffffff 00000000ffffffff [ 429.107991][ T9785] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 429.108004][ T9785] page dumped because: kasan: bad access detected [ 429.108020][ T9785] page_owner tracks the page as allocated [ 429.108029][ T9785] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 2348, tgid 2348 (kworker/u8:11), ts 100240933584, free_ts 0 [ 429.108072][ T9785] post_alloc_hook+0x228/0x280 [ 429.108105][ T9785] get_page_from_freelist+0x28bb/0x2950 [ 429.108127][ T9785] __alloc_frozen_pages_noprof+0x18d/0x380 [ 429.108147][ T9785] alloc_pages_mpol+0xd1/0x380 [ 429.108167][ T9785] allocate_slab+0x86/0x3a0 [ 429.108193][ T9785] ___slab_alloc+0xaf8/0x13d0 [ 429.108214][ T9785] __slab_alloc+0xc5/0x1f0 [ 429.108236][ T9785] __kmalloc_noprof+0x15e/0x7c0 [ 429.108266][ T9785] ___neigh_create+0x722/0x2330 [ 429.108297][ T9785] ip6_finish_output2+0x1082/0x13c0 [ 429.108326][ T9785] ip6_output+0x340/0x550 [ 429.108349][ T9785] ndisc_send_skb+0xbaa/0x14e0 [ 429.108383][ T9785] ndisc_send_ns+0xd7/0x160 [ 429.108400][ T9785] addrconf_dad_work+0xbea/0x1680 [ 429.108424][ T9785] process_scheduled_works+0xaec/0x17a0 [ 429.108449][ T9785] worker_thread+0x89f/0xd90 [ 429.108474][ T9785] page_owner free stack trace missing [ 429.108483][ T9785] [ 429.108489][ T9785] Memory state around the buggy address: [ 429.108502][ T9785] ffff88805c2f4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 429.108518][ T9785] ffff88805c2f4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 429.108535][ T9785] >ffff88805c2f4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 429.108548][ T9785] ^ [ 429.108560][ T9785] ffff88805c2f4800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 429.108576][ T9785] ffff88805c2f4880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 429.108588][ T9785] ================================================================== [ 429.149388][ T9785] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 429.149465][ T9785] CPU: 0 UID: 0 PID: 9785 Comm: syz.6.1364 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 429.149542][ T9785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 429.149585][ T9785] Call Trace: [ 429.149607][ T9785] [ 429.149631][ T9785] vpanic+0x1e0/0x670 [ 429.149740][ T9785] panic+0xc5/0xd0 [ 429.149833][ T9785] ? __pfx_panic+0x10/0x10 [ 429.149939][ T9785] ? preempt_schedule_thunk+0x16/0x30 [ 429.150060][ T9785] ? __list_del_entry_valid_or_report+0x92/0x190 [ 429.150149][ T9785] check_panic_on_warn+0x89/0xb0 [ 429.150251][ T9785] ? __list_del_entry_valid_or_report+0x92/0x190 [ 429.150318][ T9785] end_report+0x6f/0x140 [ 429.150412][ T9785] kasan_report+0x128/0x150 [ 429.150512][ T9785] ? __list_del_entry_valid_or_report+0x92/0x190 [ 429.150598][ T9785] __list_del_entry_valid_or_report+0x92/0x190 [ 429.150666][ T9785] bt_accept_unlink+0x39/0x260 [ 429.150770][ T9785] l2cap_sock_teardown_cb+0x17e/0x490 [ 429.150858][ T9785] l2cap_chan_del+0xb5/0x610 [ 429.150942][ T9785] ? l2cap_conn_del+0x31a/0x5b0 [ 429.151027][ T9785] l2cap_conn_del+0x326/0x5b0 [ 429.151105][ T9785] l2cap_connect_cfm+0x122/0x1130 [ 429.151190][ T9785] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 429.151264][ T9785] ? lockdep_hardirqs_on+0x7a/0x110 [ 429.151370][ T9785] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 429.151477][ T9785] ? mutex_lock_nested+0x152/0x1d0 [ 429.151534][ T9785] ? hci_conn_failed+0x165/0x340 [ 429.151598][ T9785] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 429.151677][ T9785] hci_conn_failed+0x1ce/0x340 [ 429.151742][ T9785] ? hci_abort_conn_sync+0x8af/0xed0 [ 429.151808][ T9785] hci_abort_conn_sync+0xbdd/0xed0 [ 429.151891][ T9785] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 429.151958][ T9785] ? hci_disconnect_all_sync+0x2e/0x350 [ 429.152040][ T9785] ? hci_disconnect_all_sync+0x2e/0x350 [ 429.152106][ T9785] ? hci_disconnect_all_sync+0x2e/0x350 [ 429.152180][ T9785] hci_disconnect_all_sync+0x1b5/0x350 [ 429.152250][ T9785] hci_suspend_sync+0x417/0xd20 [ 429.152333][ T9785] ? __pfx_hci_suspend_sync+0x10/0x10 [ 429.152408][ T9785] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 429.152493][ T9785] ? lockdep_hardirqs_on+0x7a/0x110 [ 429.152592][ T9785] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 429.152706][ T9785] ? mutex_lock_nested+0x152/0x1d0 [ 429.152778][ T9785] ? hci_suspend_dev+0x285/0x540 [ 429.152875][ T9785] hci_suspend_dev+0x28d/0x540 [ 429.152965][ T9785] ? __pfx_hci_suspend_dev+0x10/0x10 [ 429.153080][ T9785] hci_suspend_notifier+0xf2/0x2f0 [ 429.153174][ T9785] notifier_call_chain+0x19d/0x3a0 [ 429.153276][ T9785] blocking_notifier_call_chain_robust+0x85/0x100 [ 429.153372][ T9785] pm_notifier_call_chain_robust+0x2c/0x60 [ 429.153466][ T9785] snapshot_open+0x1a2/0x280 [ 429.153553][ T9785] ? __pfx_snapshot_open+0x10/0x10 [ 429.153639][ T9785] misc_open+0x2de/0x350 [ 429.153715][ T9785] chrdev_open+0x4d0/0x5f0 [ 429.153777][ T9785] ? __pfx_chrdev_open+0x10/0x10 [ 429.153839][ T9785] ? fsnotify_open_perm_and_set_mode+0x116/0x620 [ 429.153924][ T9785] ? __pfx_chrdev_open+0x10/0x10 [ 429.153991][ T9785] do_dentry_open+0x7d0/0x1270 [ 429.154104][ T9785] vfs_open+0x3b/0x350 [ 429.154167][ T9785] ? path_openat+0x34b1/0x3e70 [ 429.154271][ T9785] path_openat+0x34c9/0x3e70 [ 429.154402][ T9785] ? __pfx_path_openat+0x10/0x10 [ 429.154565][ T9785] ? kasan_save_track+0x4f/0x80 [ 429.154650][ T9785] ? kasan_save_track+0x3e/0x80 [ 429.154725][ T9785] ? __kasan_slab_alloc+0x6c/0x80 [ 429.154803][ T9785] ? kmem_cache_alloc_noprof+0x188/0x6a0 [ 429.154886][ T9785] ? getname_flags+0xb7/0x540 [ 429.154942][ T9785] ? do_sys_openat2+0xca/0x220 [ 429.155044][ T9785] ? do_raw_spin_lock+0x12b/0x2f0 [ 429.155131][ T9785] do_filp_open+0x22d/0x490 [ 429.155217][ T9785] ? __pfx_do_filp_open+0x10/0x10 [ 429.155306][ T9785] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 429.155391][ T9785] ? alloc_fd+0x64e/0x6c0 [ 429.155418][ T9785] do_sys_openat2+0x12f/0x220 [ 429.155443][ T9785] ? __se_sys_futex+0x3a8/0x450 [ 429.155477][ T9785] ? __pfx_do_sys_openat2+0x10/0x10 [ 429.155504][ T9785] ? __fget_files+0x2a/0x420 [ 429.155527][ T9785] ? __pfx___se_sys_futex+0x10/0x10 [ 429.155560][ T9785] ? __fget_files+0x2a/0x420 [ 429.155587][ T9785] __x64_sys_openat+0x138/0x170 [ 429.155617][ T9785] do_syscall_64+0xe2/0xf80 [ 429.155647][ T9785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.155670][ T9785] ? trace_irq_disable+0x37/0x100 [ 429.155695][ T9785] ? clear_bhb_loop+0x60/0xb0 [ 429.155720][ T9785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.155744][ T9785] RIP: 0033:0x7f52f865acb9 [ 429.155766][ T9785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.155787][ T9785] RSP: 002b:00007f52f68b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 429.155813][ T9785] RAX: ffffffffffffffda RBX: 00007f52f88d5fa0 RCX: 00007f52f865acb9 [ 429.155831][ T9785] RDX: 0000000000000800 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 429.155848][ T9785] RBP: 00007f52f86c8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 429.155864][ T9785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.155879][ T9785] R13: 00007f52f88d6038 R14: 00007f52f88d5fa0 R15: 00007ffe2793aa08 [ 429.155906][ T9785] [ 429.156522][ T9785] Kernel Offset: disabled