last executing test programs: 7.24436562s ago: executing program 2 (id=476): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_io_uring_setup(0x10c, &(0x7f0000000200)={0x0, 0x5885, 0x10, 0x0, 0xfa}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r0, 0x0, 0x0, 0x5c, 0x10}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.031191689s ago: executing program 2 (id=479): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 4.394543554s ago: executing program 2 (id=501): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) r0 = syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.174336911s ago: executing program 0 (id=514): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.84244392s ago: executing program 0 (id=518): socket$packet(0x11, 0x2, 0x300) timer_settime(0x0, 0x0, &(0x7f0000000240), 0x0) epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffc, 0x41ac5d3, 0x0, 0x0, 0x12) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0xfc, 0x11, 0x0, @private=0x800001f, @empty=0xe0000001}, {0x1000, 0x17c1, 0x10, 0x0, @opaque="367dbdc900000000"}}}}}, 0x0) 2.757504882s ago: executing program 3 (id=520): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000840)) 2.621871211s ago: executing program 0 (id=522): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x274, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8864}]}]}], {0x14}}, 0x29c}}, 0x4048010) 2.47365589s ago: executing program 2 (id=525): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) ppoll(&(0x7f0000000580)=[{r1, 0x8f9b6401ac07941b}, {r1, 0x40}], 0x2, 0x0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 2.35204311s ago: executing program 3 (id=527): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x1, 0xfffc}, 0xf, [0x4, 0x101, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x10, 0x4, 0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x1, 0x3, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x10000, 0x5f1], [0xfffffff8, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8eb1baa, 0x81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x200, 0x0, 0x2, 0x26, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x9, 0xffff], [0x4, 0xfc, 0x8f58, 0x465b, 0x0, 0xb67f75c, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x9, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0xa5f, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x4, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x41, 0x0, 0x0, 0xbd, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0xb, 0x0, 0x0, 0x4000, 0xdffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 2.252877822s ago: executing program 2 (id=529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000000007baa00fe00000000b51a0200000000007b"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 2.166766838s ago: executing program 3 (id=530): mkdir(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) renameat2(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 2.156049353s ago: executing program 4 (id=531): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x2, {0x1, 0xf0, 0x3}, 0xfd}, 0x18) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}], 0x206c, 0x0) 2.039947369s ago: executing program 1 (id=532): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x5, r1, 0x0, &(0x7f00000000c0)='7', 0x1, 0xffffffff80000000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 1.978868253s ago: executing program 3 (id=533): socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES8=r0]) 1.964359669s ago: executing program 4 (id=534): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x41, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.878521917s ago: executing program 2 (id=535): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000340)='\"', 0x1}], 0x1) syz_usb_control_io(r0, 0x0, 0x0) 1.821169951s ago: executing program 1 (id=536): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) sendto(0xffffffffffffffff, &(0x7f0000000140)="050000007a19b90c9daaeca1b1ec5719af0abbb83b0514127c8b417386b5c7cc0f676b6d", 0x24, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 1.788318336s ago: executing program 4 (id=537): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.690170955s ago: executing program 1 (id=538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef) 1.584646155s ago: executing program 0 (id=539): openat$cuse(0xffffffffffffff9c, &(0x7f000000a200), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d}) 1.454790914s ago: executing program 4 (id=540): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000000000002fe, 0x61, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[@ANYRES64=r0], 0x20) ppoll(&(0x7f0000000540)=[{}], 0x5b, 0x0, 0x0, 0x0) 1.408424952s ago: executing program 0 (id=541): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r1, 0x3516, 0x67f, 0x64, 0x0, 0x0) 1.265108678s ago: executing program 1 (id=542): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x82880, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x1) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x40000004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r1}) 1.264366213s ago: executing program 4 (id=543): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x120) getdents64(r1, 0x0, 0x0) 1.104823747s ago: executing program 1 (id=544): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)='g', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="4cce76b4bf0d84c8e57a0d81e892340043", 0x11}], 0x1, &(0x7f0000000840)=ANY=[], 0x88}}], 0x3, 0x4008000) shutdown(r0, 0x2) 1.064754568s ago: executing program 0 (id=545): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x60, 0x5}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000500)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.018615168s ago: executing program 4 (id=546): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x801, 0xffffffff, 0x4, 0x0, 0x20000070, 0x8}) 758.867237ms ago: executing program 1 (id=547): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0x0, 0x80000044, 0x2, 0xe, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 72.374581ms ago: executing program 3 (id=548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4044004) 0s ago: executing program 3 (id=549): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x10, 0x6169, 0x9, 0xd3, 0x0, 0xffffeffa, 0x7, 0x2ac8}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x9, 0xa}, {0x1, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. [ 80.864320][ T5832] cgroup: Unknown subsys name 'net' [ 81.018777][ T5832] cgroup: Unknown subsys name 'cpuset' [ 81.027753][ T5832] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.656363][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.380552][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.388852][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.392068][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.397402][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.403449][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.411179][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.420931][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.424739][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.430952][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.447472][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.448575][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.455172][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.466180][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.476874][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.478120][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.486850][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.498651][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.541550][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.549761][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.564603][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.573105][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.596525][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.605067][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.608016][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.615920][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.275111][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 86.327795][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 86.423182][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 86.588324][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 86.655827][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.662988][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.671322][ T5860] bridge_slave_0: entered allmulticast mode [ 86.680235][ T5860] bridge_slave_0: entered promiscuous mode [ 86.694059][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.701447][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.708668][ T5860] bridge_slave_1: entered allmulticast mode [ 86.715836][ T5860] bridge_slave_1: entered promiscuous mode [ 86.729666][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.740480][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.748436][ T5862] bridge_slave_0: entered allmulticast mode [ 86.759873][ T5862] bridge_slave_0: entered promiscuous mode [ 86.807924][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 86.871753][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.879236][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.887739][ T5862] bridge_slave_1: entered allmulticast mode [ 86.895942][ T5862] bridge_slave_1: entered promiscuous mode [ 87.027047][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.058736][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.066024][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.073204][ T5859] bridge_slave_0: entered allmulticast mode [ 87.081938][ T5859] bridge_slave_0: entered promiscuous mode [ 87.134628][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.167800][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.177236][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.184358][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.197203][ T5859] bridge_slave_1: entered allmulticast mode [ 87.204290][ T5859] bridge_slave_1: entered promiscuous mode [ 87.233212][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.307538][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.314703][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.323149][ T5858] bridge_slave_0: entered allmulticast mode [ 87.331265][ T5858] bridge_slave_0: entered promiscuous mode [ 87.385746][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.395078][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.402986][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.410274][ T5858] bridge_slave_1: entered allmulticast mode [ 87.417774][ T5858] bridge_slave_1: entered promiscuous mode [ 87.440510][ T5862] team0: Port device team_slave_0 added [ 87.449985][ T5860] team0: Port device team_slave_0 added [ 87.458491][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.506539][ T5862] team0: Port device team_slave_1 added [ 87.542599][ T5860] team0: Port device team_slave_1 added [ 87.582155][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.591750][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.599786][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.606117][ T5849] Bluetooth: hci2: command tx timeout [ 87.607583][ T5861] bridge_slave_0: entered allmulticast mode [ 87.612787][ T5853] Bluetooth: hci1: command tx timeout [ 87.623894][ T5861] bridge_slave_0: entered promiscuous mode [ 87.624340][ T5845] Bluetooth: hci0: command tx timeout [ 87.632830][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.642946][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.650249][ T5861] bridge_slave_1: entered allmulticast mode [ 87.658277][ T5861] bridge_slave_1: entered promiscuous mode [ 87.678770][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.686025][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.687010][ T5845] Bluetooth: hci3: command tx timeout [ 87.712284][ T5849] Bluetooth: hci4: command tx timeout [ 87.717830][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.749713][ T5859] team0: Port device team_slave_0 added [ 87.759644][ T5859] team0: Port device team_slave_1 added [ 87.768345][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.804528][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.811630][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.837652][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.942089][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.949420][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.976535][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.988473][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.995865][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.021846][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.036281][ T5858] team0: Port device team_slave_0 added [ 88.045981][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.068773][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.076301][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.102858][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.114891][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.122257][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.148281][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.174687][ T5858] team0: Port device team_slave_1 added [ 88.184358][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.201495][ T5862] hsr_slave_0: entered promiscuous mode [ 88.207963][ T5862] hsr_slave_1: entered promiscuous mode [ 88.374093][ T5860] hsr_slave_0: entered promiscuous mode [ 88.380844][ T5860] hsr_slave_1: entered promiscuous mode [ 88.388346][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.396530][ T5860] Cannot create hsr debugfs directory [ 88.402792][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.410125][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.436251][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.450310][ T5861] team0: Port device team_slave_0 added [ 88.489726][ T5859] hsr_slave_0: entered promiscuous mode [ 88.496132][ T5859] hsr_slave_1: entered promiscuous mode [ 88.502715][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.510847][ T5859] Cannot create hsr debugfs directory [ 88.517649][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.524603][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.551070][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.564076][ T5861] team0: Port device team_slave_1 added [ 88.693410][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.700683][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.727372][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.740084][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.747151][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.773441][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.951772][ T5858] hsr_slave_0: entered promiscuous mode [ 88.958065][ T5858] hsr_slave_1: entered promiscuous mode [ 88.964062][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.971775][ T5858] Cannot create hsr debugfs directory [ 89.137802][ T5861] hsr_slave_0: entered promiscuous mode [ 89.144167][ T5861] hsr_slave_1: entered promiscuous mode [ 89.152433][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.160088][ T5861] Cannot create hsr debugfs directory [ 89.324982][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.365097][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.401154][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.439602][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.549624][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.584080][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.594621][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.621239][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.669862][ T5861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.684418][ T5861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.691291][ T5849] Bluetooth: hci0: command tx timeout [ 89.691333][ T5849] Bluetooth: hci2: command tx timeout [ 89.691366][ T5849] Bluetooth: hci1: command tx timeout [ 89.732352][ T5861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.747839][ T5861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.765888][ T5845] Bluetooth: hci3: command tx timeout [ 89.771335][ T5845] Bluetooth: hci4: command tx timeout [ 89.839680][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.863499][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.892745][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.903264][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.997484][ T5858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.012059][ T5858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.034346][ T5858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.044420][ T5858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.130048][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.156108][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.220748][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.252725][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.259989][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.283226][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.301007][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.308206][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.349388][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.356752][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.368247][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.375457][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.419763][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.481017][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.508211][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.521329][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.528468][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.564861][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.580880][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.588039][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.661102][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.683177][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.700592][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.707706][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.740579][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.756814][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.764037][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.781023][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.788196][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.825327][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.832477][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.863234][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.992526][ T5862] veth0_vlan: entered promiscuous mode [ 91.009058][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.034488][ T5862] veth1_vlan: entered promiscuous mode [ 91.117475][ T5861] veth0_vlan: entered promiscuous mode [ 91.142711][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.164087][ T5860] veth0_vlan: entered promiscuous mode [ 91.174924][ T5861] veth1_vlan: entered promiscuous mode [ 91.214031][ T5860] veth1_vlan: entered promiscuous mode [ 91.239922][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.269749][ T5862] veth0_macvtap: entered promiscuous mode [ 91.297456][ T5862] veth1_macvtap: entered promiscuous mode [ 91.310851][ T5859] veth0_vlan: entered promiscuous mode [ 91.361534][ T5860] veth0_macvtap: entered promiscuous mode [ 91.370516][ T5859] veth1_vlan: entered promiscuous mode [ 91.392364][ T5861] veth0_macvtap: entered promiscuous mode [ 91.405007][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.428641][ T5860] veth1_macvtap: entered promiscuous mode [ 91.440273][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.452867][ T5862] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.464257][ T5862] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.473512][ T5862] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.482479][ T5862] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.502797][ T5861] veth1_macvtap: entered promiscuous mode [ 91.561995][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.592765][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.602201][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.619488][ T5858] veth0_vlan: entered promiscuous mode [ 91.627755][ T5859] veth0_macvtap: entered promiscuous mode [ 91.642080][ T5860] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.651352][ T5860] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.660528][ T5860] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.669912][ T5860] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.694728][ T5859] veth1_macvtap: entered promiscuous mode [ 91.711747][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.744623][ T5861] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.754935][ T5861] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.764291][ T5861] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.773863][ T5845] Bluetooth: hci1: command tx timeout [ 91.775340][ T5849] Bluetooth: hci2: command tx timeout [ 91.779318][ T5845] Bluetooth: hci0: command tx timeout [ 91.790159][ T5861] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.820862][ T5858] veth1_vlan: entered promiscuous mode [ 91.831807][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.849073][ T5853] Bluetooth: hci3: command tx timeout [ 91.851220][ T9] cfg80211: failed to load regulatory.db [ 91.854546][ T5845] Bluetooth: hci4: command tx timeout [ 91.864083][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.883444][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.944955][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.953706][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.964780][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.013474][ T5859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.022515][ T5859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.032763][ T5859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.041748][ T5859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.083243][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.156478][ T5858] veth0_macvtap: entered promiscuous mode [ 92.189591][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.198979][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.231230][ T5858] veth1_macvtap: entered promiscuous mode [ 92.291523][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.312281][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.442693][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.453037][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.462717][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.474728][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.489026][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.524171][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.574243][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.592259][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.598282][ T5858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.634411][ T5858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.661136][ T5858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.675746][ T5858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.859458][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.882522][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.975180][ T5949] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.002345][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.032262][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.189190][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.207856][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.265025][ T5955] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 93.718459][ T5936] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.850025][ T5853] Bluetooth: hci1: command tx timeout [ 93.850076][ T5849] Bluetooth: hci0: command tx timeout [ 93.855610][ T5845] Bluetooth: hci2: command tx timeout [ 93.905846][ T5936] usb 3-1: Using ep0 maxpacket: 16 [ 93.923891][ T5936] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 93.935526][ T5849] Bluetooth: hci4: command tx timeout [ 93.937013][ T5845] Bluetooth: hci3: command tx timeout [ 93.960325][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.970518][ T5936] usb 3-1: Product: syz [ 93.989975][ T5936] usb 3-1: Manufacturer: syz [ 94.004182][ T5936] usb 3-1: SerialNumber: syz [ 94.016560][ T5908] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.116135][ T5936] usb 3-1: config 0 descriptor?? [ 94.134832][ T5936] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 94.185629][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 94.211827][ T5908] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 94.226766][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.235013][ T5908] usb 1-1: Product: syz [ 94.244598][ T5908] usb 1-1: Manufacturer: syz [ 94.260754][ T5908] usb 1-1: SerialNumber: syz [ 94.277842][ T5908] usb 1-1: config 0 descriptor?? [ 94.311524][ T5908] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 94.373228][ T5936] gp8psk: usb in 128 operation failed. [ 94.395568][ T5936] gp8psk: usb in 137 operation failed. [ 94.401078][ T5936] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 94.440291][ T5936] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 94.472418][ T5936] usb 3-1: media controller created [ 94.514089][ T5908] gp8psk: usb in 128 operation failed. [ 94.527563][ T5908] gp8psk: usb in 137 operation failed. [ 94.536321][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 94.590795][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.696485][ T5936] gp8psk_fe: Frontend revision 1 attached [ 94.697433][ T5908] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 94.716012][ T5936] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 94.751961][ T5908] usb 1-1: media controller created [ 94.756016][ T5936] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 94.766841][ T5983] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.838453][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.940783][ T5908] gp8psk_fe: Frontend revision 1 attached [ 94.977307][ T5936] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 94.978713][ T5908] usb 1-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 95.015039][ T5936] gp8psk: found Genpix USB device pID = 201 (hex) [ 95.051936][ T5908] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 95.338234][ T48] usb 3-1: USB disconnect, device number 2 [ 95.570009][ T5908] gp8psk: usb in 137 operation failed. [ 95.605772][ T5908] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 95.640239][ T5908] gp8psk: found Genpix USB device pID = 201 (hex) [ 95.680932][ T5908] usb 1-1: USB disconnect, device number 2 [ 95.696188][ T48] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 95.996427][ T5908] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 96.201499][ T6004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 96.728841][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 96.760451][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'. [ 96.866350][ T6010] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.875393][ T6010] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.884122][ T6010] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.894154][ T6010] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.055835][ T6010] Zero length message leads to an empty skb [ 97.106898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.115688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.183568][ T6040] netlink: 'syz.1.38': attribute type 11 has an invalid length. [ 99.067928][ T5937] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.184885][ T6065] macsec1: entered allmulticast mode [ 99.229852][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 99.246602][ T5937] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 99.272459][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.315099][ T5937] usb 3-1: config 0 descriptor?? [ 99.549120][ T5937] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 99.606684][ T5937] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.640548][ T5937] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 99.716468][ T5937] usb 3-1: media controller created [ 99.829887][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.886015][ T5937] az6027: usb out operation failed. (-71) [ 99.909926][ T5937] az6027: usb out operation failed. (-71) [ 99.942044][ T5937] stb0899_attach: Driver disabled by Kconfig [ 99.956375][ T5937] az6027: no front-end attached [ 99.956375][ T5937] [ 99.994031][ T5937] az6027: usb out operation failed. (-71) [ 100.016097][ T5937] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 100.054438][ T5937] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 100.128126][ T5937] dvb-usb: schedule remote query interval to 400 msecs. [ 100.167223][ T5937] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 100.206417][ T5937] usb 3-1: USB disconnect, device number 3 [ 100.475639][ T5937] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 101.282686][ T5937] IPVS: starting estimator thread 0... [ 101.291678][ T6110] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 101.385519][ T6114] IPVS: using max 34 ests per chain, 81600 per kthread [ 101.536740][ T5937] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.729068][ T5937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.788938][ T5937] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 101.822897][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.846519][ T5937] usb 5-1: config 0 descriptor?? [ 101.861336][ T5937] pwc: Askey VC010 type 2 USB webcam detected. [ 102.275562][ T5937] pwc: recv_control_msg error -32 req 02 val 2b00 [ 102.556030][ T5908] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.689305][ T5937] pwc: recv_control_msg error -71 req 04 val 1000 [ 102.715589][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 102.739342][ T5937] pwc: recv_control_msg error -71 req 04 val 1300 [ 102.750430][ T5937] pwc: recv_control_msg error -71 req 04 val 1400 [ 102.760312][ T5908] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.778974][ T5937] pwc: recv_control_msg error -71 req 02 val 2000 [ 102.790360][ T5908] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.811004][ T5937] pwc: recv_control_msg error -71 req 02 val 2100 [ 102.831318][ T5908] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.849839][ T5937] pwc: recv_control_msg error -71 req 04 val 1500 [ 102.859369][ T5908] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.872962][ T5937] pwc: recv_control_msg error -71 req 02 val 2500 [ 102.879963][ T5908] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.902291][ T5937] pwc: recv_control_msg error -71 req 02 val 2400 [ 102.913390][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.927680][ T5937] pwc: recv_control_msg error -71 req 02 val 2600 [ 102.947935][ T5937] pwc: recv_control_msg error -71 req 02 val 2900 [ 102.967581][ T5937] pwc: recv_control_msg error -71 req 02 val 2800 [ 102.985501][ T5937] pwc: recv_control_msg error -71 req 04 val 1100 [ 102.997663][ T5937] pwc: recv_control_msg error -71 req 04 val 1200 [ 103.016329][ T5937] pwc: Registered as video103. [ 103.049164][ T5937] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 103.115329][ T5937] usb 5-1: USB disconnect, device number 2 [ 103.196362][ T5908] usb 1-1: GET_CAPABILITIES returned 0 [ 103.199197][ T6147] netlink: 104 bytes leftover after parsing attributes in process `syz.1.82'. [ 103.220564][ T5908] usbtmc 1-1:16.0: can't read capabilities [ 103.455611][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.468148][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.481165][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.490302][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.499411][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.542803][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.551934][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.561045][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.571300][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.588911][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.598038][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.607146][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.616838][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.625946][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.635025][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.648140][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.669615][ T10] usb 1-1: USB disconnect, device number 3 [ 103.985710][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.145976][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 104.157581][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.170382][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.206552][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.228678][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.243572][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.254112][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.505696][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 104.531156][ T9] usbtmc 2-1:16.0: can't read capabilities [ 104.609372][ T6171] ======================================================= [ 104.609372][ T6171] WARNING: The mand mount option has been deprecated and [ 104.609372][ T6171] and is ignored by this kernel. Remove the mand [ 104.609372][ T6171] option from the mount to silence this warning. [ 104.609372][ T6171] ======================================================= [ 104.734337][ T5863] usb 2-1: USB disconnect, device number 2 [ 104.952528][ T6179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.766247][ T6203] syzkaller1: entered promiscuous mode [ 105.771783][ T6203] syzkaller1: entered allmulticast mode [ 106.332770][ T6218] sctp: [Deprecated]: syz.3.111 (pid 6218) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.332770][ T6218] Use struct sctp_sack_info instead [ 106.402666][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'. [ 106.896242][ T6228] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.357897][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 107.835414][ T30] audit: type=1326 audit(1751755507.397:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d818e929 code=0x7ffc0000 [ 107.967791][ T30] audit: type=1326 audit(1751755507.407:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7d812ab19 code=0x7ffc0000 [ 108.036406][ T30] audit: type=1326 audit(1751755507.407:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d818e929 code=0x7ffc0000 [ 108.091782][ T30] audit: type=1326 audit(1751755507.407:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7d812ab19 code=0x7ffc0000 [ 108.137011][ T30] audit: type=1326 audit(1751755507.407:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d818e929 code=0x7ffc0000 [ 108.204744][ T30] audit: type=1326 audit(1751755507.407:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d818e929 code=0x7ffc0000 [ 108.324445][ T30] audit: type=1326 audit(1751755507.407:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7d812ab19 code=0x7ffc0000 [ 108.348959][ T30] audit: type=1326 audit(1751755507.407:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7d812ab19 code=0x7ffc0000 [ 108.371269][ T30] audit: type=1326 audit(1751755507.407:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d818e929 code=0x7ffc0000 [ 108.393752][ T30] audit: type=1326 audit(1751755507.407:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d818e929 code=0x7ffc0000 [ 108.432124][ T6262] process 'syz.3.129' launched './file0' with NULL argv: empty string added [ 108.477328][ T6258] all (unregistering): Released all slaves [ 109.055550][ T5863] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 109.247965][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.268841][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.317856][ T5863] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 109.344793][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.400277][ T5863] usb 5-1: config 0 descriptor?? [ 109.877221][ T5863] savu 0003:1E7D:2D5A.0001: global environment stack underflow [ 109.933434][ T5863] savu 0003:1E7D:2D5A.0001: item 0 4 1 11 parsing failed [ 109.967746][ T6304] vxcan0: tx drop: invalid sa for name 0x0000000000000002 [ 109.977445][ T5863] savu 0003:1E7D:2D5A.0001: parse failed [ 109.993019][ T5863] savu 0003:1E7D:2D5A.0001: probe with driver savu failed with error -22 [ 110.110520][ T5937] usb 5-1: USB disconnect, device number 3 [ 111.676486][ T6338] netlink: 'syz.0.162': attribute type 10 has an invalid length. [ 111.693369][ T6338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.704439][ T6338] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 112.379718][ T6351] loop6: detected capacity change from 0 to 524287999 [ 112.400072][ T6352] random: crng reseeded on system resumption [ 113.233339][ T6366] macsec1: entered allmulticast mode [ 114.674362][ T6389] vivid-000: disconnect [ 114.767040][ T9] vivid-000: reconnect [ 115.237774][ T6407] input: syz0 as /devices/virtual/input/input7 [ 115.244801][ T6407] input: failed to attach handler leds to device input7, error: -6 [ 115.865341][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 115.865360][ T30] audit: type=1326 audit(1751755515.437:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.1.199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75ebb8e929 code=0x0 [ 116.113938][ T6432] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.202'. [ 116.175369][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 116.338705][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.364189][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.400876][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.439501][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.470632][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.532742][ T9] usb 4-1: config 0 descriptor?? [ 116.775473][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 116.975760][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 116.987260][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 116.996860][ T6428] IPVS: You probably need to specify IP address on multicast interface. [ 117.009720][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 117.022141][ T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 117.034533][ T6428] IPVS: Error connecting to the multicast addr [ 117.038379][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.067029][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 117.084791][ T10] usb 1-1: Product: syz [ 117.113872][ T10] usb 1-1: Manufacturer: syz [ 117.119335][ T10] usb 1-1: SerialNumber: syz [ 117.138222][ T10] usb 1-1: config 0 descriptor?? [ 117.242921][ T9] usb 4-1: USB disconnect, device number 2 [ 117.412522][ T6453] fido_id[6453]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 117.571122][ T10] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 118.226838][ T10] usb 1-1: USB disconnect, device number 4 [ 118.979122][ T30] audit: type=1326 audit(1751755518.557:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.1.227" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75ebb8e929 code=0x0 [ 119.042574][ T6490] bond_slave_1: entered promiscuous mode [ 119.067871][ T6490] bond_slave_1: left promiscuous mode [ 119.125017][ T6498] loop2: detected capacity change from 0 to 7 [ 119.135494][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 119.191069][ T6498] Dev loop2: unable to read RDB block 7 [ 119.197048][ T6498] loop2: AHDI p2 p3 [ 119.206092][ T6498] loop2: partition table partially beyond EOD, truncated [ 119.228046][ T6498] loop2: p2 size 150995456 extends beyond EOD, truncated [ 119.325685][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 119.360846][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 119.384300][ T5909] udevd[5909]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 119.396734][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 119.412277][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.548430][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.582063][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.615663][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.880145][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 119.891426][ T10] usbtmc 5-1:16.0: can't read capabilities [ 120.013863][ T6508] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.232'. [ 120.031973][ T6508] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 120.041644][ T6508] openvswitch: netlink: Message has 8454 unknown bytes. [ 120.102498][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 120.111960][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 120.182864][ T6488] usbtmc 5-1:16.0: Unable to send data, error -71 [ 120.220481][ T48] usb 5-1: USB disconnect, device number 4 [ 120.649268][ T6533] capability: warning: `syz.3.242' uses deprecated v2 capabilities in a way that may be insecure [ 122.403681][ T6567] loop5: detected capacity change from 0 to 1 [ 123.970769][ T6594] syz_tun: entered allmulticast mode [ 124.019722][ T6590] syz_tun: left allmulticast mode [ 125.156389][ T48] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.360310][ T48] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 125.379800][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.400043][ T48] usb 1-1: Product: syz [ 125.412053][ T48] usb 1-1: Manufacturer: syz [ 125.425766][ T48] usb 1-1: SerialNumber: syz [ 125.451806][ T48] usb 1-1: config 0 descriptor?? [ 125.484608][ T48] ch341 1-1:0.0: ch341-uart converter detected [ 125.821317][ T6640] tun0: tun_chr_ioctl cmd 1074025675 [ 125.830918][ T6640] tun0: persist enabled [ 125.836812][ T6640] tun0: tun_chr_ioctl cmd 1074025675 [ 125.842384][ T6640] tun0: persist enabled [ 125.905818][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.067694][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.084489][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.103020][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 126.117355][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.136896][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.149307][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.176154][ T24] usb 4-1: config 0 descriptor?? [ 126.503307][ T48] usb 1-1: failed to send control message: -71 [ 126.515563][ T48] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 126.541417][ T48] usb 1-1: USB disconnect, device number 5 [ 126.564359][ T48] ch341 1-1:0.0: device disconnected [ 126.618412][ T24] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 126.678113][ T24] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 127.485465][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.535956][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.544302][ T6665] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 127.697334][ T24] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 127.718286][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.725549][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 127.738629][ T24] usb 3-1: Product: syz [ 127.744782][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 127.747324][ T24] usb 3-1: Manufacturer: syz [ 127.763441][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.779593][ T24] usb 3-1: SerialNumber: syz [ 127.796985][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.814500][ T24] usb 3-1: config 0 descriptor?? [ 127.830781][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.851691][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.872235][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.881798][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.117820][ T6671] input: syz1 as /devices/virtual/input/input8 [ 128.158759][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 128.164305][ T10] usbtmc 5-1:16.0: can't read capabilities [ 128.449100][ T5936] usb 5-1: USB disconnect, device number 5 [ 128.560923][ T6682] loop6: detected capacity change from 0 to 63 [ 128.578393][ T5909] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.586459][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.594665][ T6682] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.606103][ T6682] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.619291][ T6682] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.628147][ T5909] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.646275][ T24] usb 3-1: USB disconnect, device number 4 [ 128.666520][ T48] usb 4-1: USB disconnect, device number 3 [ 128.675655][ T6682] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.709012][ T5909] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.737522][ T10] usb 1-1: config 0 has an invalid interface number: 144 but max is 0 [ 128.742845][ T5909] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.776964][ T5909] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.777234][ T10] usb 1-1: config 0 has no interface number 0 [ 128.842229][ T10] usb 1-1: too many endpoints for config 0 interface 144 altsetting 138: 68, using maximum allowed: 30 [ 128.876752][ T10] usb 1-1: config 0 interface 144 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 128.932844][ T10] usb 1-1: config 0 interface 144 has no altsetting 0 [ 128.962815][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 128.984732][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.006461][ T10] usb 1-1: config 0 descriptor?? [ 129.036538][ T10] cp210x 1-1:0.144: cp210x converter detected [ 129.173977][ T30] audit: type=1326 audit(1751755528.747:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ebb8e929 code=0x7ffc0000 [ 129.234944][ T30] audit: type=1326 audit(1751755528.747:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ebb8e929 code=0x7ffc0000 [ 129.306563][ T30] audit: type=1326 audit(1751755528.757:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f75ebb8e929 code=0x7ffc0000 [ 129.337096][ T30] audit: type=1326 audit(1751755528.757:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ebb8e929 code=0x7ffc0000 [ 129.383388][ T30] audit: type=1326 audit(1751755528.777:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f75ebb8e929 code=0x7ffc0000 [ 129.434746][ T30] audit: type=1326 audit(1751755528.777:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ebb8e929 code=0x7ffc0000 [ 129.470951][ T10] cp210x 1-1:0.144: failed to get vendor val 0x000e size 3: -71 [ 129.488126][ T30] audit: type=1326 audit(1751755528.777:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f75ebb8e929 code=0x7ffc0000 [ 129.511872][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 129.533253][ T10] usb 1-1: USB disconnect, device number 6 [ 129.543270][ T30] audit: type=1326 audit(1751755528.777:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ebb8e929 code=0x7ffc0000 [ 129.567440][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 129.606296][ T10] cp210x 1-1:0.144: device disconnected [ 129.635237][ T30] audit: type=1326 audit(1751755528.777:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f75ebb8e929 code=0x7ffc0000 [ 129.681289][ T30] audit: type=1326 audit(1751755528.777:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.1.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ebb8e929 code=0x7ffc0000 [ 129.703400][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.276470][ T6723] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.322'. [ 130.925966][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.018442][ T48] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.085544][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 131.098219][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.129159][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.135520][ T5863] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.140977][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.160507][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.175942][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.190434][ T24] usb 1-1: config 0 descriptor?? [ 131.195632][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 131.217102][ T48] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 131.232072][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 131.256647][ T48] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 131.266737][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.276898][ T48] usb 4-1: Product: syz [ 131.281136][ T48] usb 4-1: Manufacturer: syz [ 131.289961][ T48] usb 4-1: SerialNumber: syz [ 131.304374][ T48] usb 4-1: config 0 descriptor?? [ 131.316117][ T48] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 131.326205][ T48] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 131.327389][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.346735][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.360117][ T5863] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.369278][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.381132][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.403205][ T5863] usb 3-1: config 0 descriptor?? [ 131.535412][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 131.543897][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 131.565462][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.594608][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.612818][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.622956][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.631422][ T10] usb 2-1: Product: syz [ 131.641300][ T10] usb 2-1: Manufacturer: syz [ 131.646454][ T10] usb 2-1: SerialNumber: syz [ 131.682877][ T24] microsoft 0003:045E:07DA.0004: item 0 4 0 8 parsing failed [ 131.708475][ T24] microsoft 0003:045E:07DA.0004: parse failed [ 131.723238][ T24] microsoft 0003:045E:07DA.0004: probe with driver microsoft failed with error -22 [ 131.828631][ T5863] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 131.892797][ T5863] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 131.939140][ T48] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 131.958658][ T48] em28xx 4-1:0.0: Config register raw data: 0x1c [ 131.990645][ T5937] usb 1-1: USB disconnect, device number 7 [ 132.067715][ T10] usb 2-1: 0:2 : does not exist [ 132.107530][ T5863] usb 3-1: USB disconnect, device number 5 [ 132.136318][ T6760] fido_id[6760]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 132.158227][ T48] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 132.187138][ T48] em28xx 4-1:0.0: No AC97 audio processor [ 132.224945][ T48] usb 4-1: USB disconnect, device number 4 [ 132.255818][ T48] em28xx 4-1:0.0: Disconnecting em28xx [ 132.274636][ T48] em28xx 4-1:0.0: Freeing device [ 132.731070][ T10] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 132.812065][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.819249][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.865814][ T10] usb 2-1: USB disconnect, device number 3 [ 132.920408][ T6764] udevd[6764]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.063360][ T6780] nvme_fabrics: missing parameter 'transport=%s' [ 133.070204][ T6780] nvme_fabrics: missing parameter 'nqn=%s' [ 134.715866][ T5887] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 134.834614][ T6844] batadv_slave_1: entered promiscuous mode [ 134.849433][ T6843] batadv_slave_1: left promiscuous mode [ 134.888209][ T5887] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.905166][ T5887] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.919202][ T5887] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.935592][ T48] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 134.952842][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.985003][ T6848] input: syz1 as /devices/virtual/input/input9 [ 134.997121][ T6848] input: failed to attach handler leds to device input9, error: -6 [ 135.108271][ T48] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 135.118504][ T48] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 135.130036][ T48] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 135.139619][ T48] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 135.165438][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.175327][ T48] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 135.196773][ T5887] usb 1-1: usb_control_msg returned -32 [ 135.204057][ T5887] usbtmc 1-1:16.0: can't read capabilities [ 135.213422][ T48] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 135.224150][ T48] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 135.237983][ T48] usb 3-1: Product: syz [ 135.242189][ T48] usb 3-1: Manufacturer: syz [ 135.262799][ T48] cdc_wdm 3-1:1.0: skipping garbage [ 135.271262][ T48] cdc_wdm 3-1:1.0: skipping garbage [ 135.284300][ T48] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 135.291683][ T48] cdc_wdm 3-1:1.0: Unknown control protocol [ 135.349882][ T24] usb 2-1: config 0 has no interfaces? [ 135.361190][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 135.378254][ T24] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 135.387459][ T24] usb 2-1: Product: syz [ 135.391774][ T24] usb 2-1: Manufacturer: syz [ 135.396721][ T24] usb 2-1: SerialNumber: syz [ 135.404760][ T24] usb 2-1: config 0 descriptor?? [ 135.760621][ T24] usb 1-1: USB disconnect, device number 8 [ 135.866773][ T6846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.896992][ T6846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.957978][ T5887] usb 2-1: USB disconnect, device number 4 [ 136.205412][ T5863] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.377906][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.395364][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.412133][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.435474][ T5863] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.447925][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.467022][ T5863] usb 4-1: config 0 descriptor?? [ 136.875541][ T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 136.918018][ T5863] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 136.969134][ T5863] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 137.101240][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 137.129245][ T5887] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 137.134576][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 137.169654][ T10] usb 2-1: string descriptor 0 read error: -22 [ 137.186004][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 137.195746][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.309647][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.351533][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.362635][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.384979][ T5887] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.395203][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.412713][ T5887] usb 1-1: config 0 descriptor?? [ 137.459159][ T30] audit: type=1326 audit(1751755537.037:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6886 comm="syz.4.392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f556f18e929 code=0x0 [ 137.726784][ T24] usb 3-1: USB disconnect, device number 6 [ 137.881025][ T5887] plantronics 0003:047F:FFFF.0007: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 138.003223][ T10] usblp 2-1:1.0: usblp2: USB Bidirectional printer dev 5 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 138.077088][ T10] usb 2-1: USB disconnect, device number 5 [ 138.270428][ T5887] usb 4-1: USB disconnect, device number 5 [ 138.272608][ T10] usblp2: removed [ 138.306246][ T24] usb 1-1: USB disconnect, device number 9 [ 138.705557][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 138.875727][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 138.901662][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.930518][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.955427][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 138.971142][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.022426][ T10] usb 5-1: config 0 descriptor?? [ 139.496150][ T10] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 139.727714][ T10] usb 5-1: USB disconnect, device number 6 [ 140.335668][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 140.375373][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 140.525597][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 140.544431][ T24] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 140.561930][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 140.565439][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 140.598364][ T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 140.622145][ T24] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 140.623395][ T10] usb 2-1: config 0 has no interface number 0 [ 140.640877][ T24] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 140.668449][ T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.689614][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 140.692260][ T10] usb 2-1: config 0 interface 85 has no altsetting 0 [ 140.726621][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 140.738138][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 140.755446][ T24] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 140.756194][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.774530][ T24] usb 4-1: Product: syz [ 140.788919][ T24] usb 4-1: Manufacturer: syz [ 140.819858][ T24] usb 4-1: SerialNumber: syz [ 140.820447][ T10] usb 2-1: Product: syz [ 140.830138][ T10] usb 2-1: Manufacturer: syz [ 140.834761][ T10] usb 2-1: SerialNumber: syz [ 140.848077][ T24] usb 4-1: config 0 descriptor?? [ 140.870315][ T24] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 140.874617][ T10] usb 2-1: config 0 descriptor?? [ 140.918721][ T24] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 141.123332][ T48] usb 4-1: USB disconnect, device number 6 [ 141.129504][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 141.169100][ T48] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 141.310917][ T6969] syzkaller1: entered promiscuous mode [ 141.325415][ T6969] syzkaller1: entered allmulticast mode [ 141.533662][ T10] appletouch 2-1:0.85: Geyser mode initialized. [ 141.560033][ T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input10 [ 141.901282][ T48] usb 2-1: USB disconnect, device number 6 [ 141.957249][ T48] appletouch 2-1:0.85: input: appletouch disconnected [ 142.126308][ T5887] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 142.225490][ T5936] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 142.289725][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.332947][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.372872][ T5887] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 142.384404][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.398402][ T5887] usb 3-1: config 0 descriptor?? [ 142.400483][ T5936] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.442900][ T5936] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.459738][ T5936] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 142.484030][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 142.494957][ T5936] usb 4-1: SerialNumber: syz [ 142.626004][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 142.792456][ T5936] usb 4-1: 0:2 : does not exist [ 142.835999][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 142.848294][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 142.878193][ T10] usb 5-1: can't read configurations, error -71 [ 142.922850][ T5936] usb 4-1: USB disconnect, device number 7 [ 142.999001][ T6764] udevd[6764]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.033315][ T5887] usb 3-1: language id specifier not provided by device, defaulting to English [ 143.042751][ T7009] batadv_slave_0: entered promiscuous mode [ 143.070174][ T7008] batadv_slave_0: left promiscuous mode [ 143.235335][ T5887] uclogic 0003:256C:006D.0009: failed retrieving Huion firmware version: -71 [ 143.271708][ T5887] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 143.284271][ T5887] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 143.321999][ T5887] usb 3-1: USB disconnect, device number 7 [ 143.505413][ T5863] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 143.695630][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 143.703631][ T5863] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.737900][ T5863] usb 2-1: config 0 has no interface number 0 [ 143.764424][ T5863] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.786818][ T5863] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 143.825594][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.847989][ T7030] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 143.877267][ T7030] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 143.881369][ T5863] usb 2-1: config 0 descriptor?? [ 143.935380][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 143.946125][ T5863] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 144.107244][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.135566][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.421107][ T48] usb 2-1: USB disconnect, device number 7 [ 144.471512][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 144.501831][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.526436][ T9] usb 1-1: config 0 descriptor?? [ 144.750764][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 144.768655][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 144.803485][ T9] usb 1-1: USB disconnect, device number 10 [ 145.315969][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 145.475724][ T5887] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 145.487973][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 145.499114][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.510442][ T5863] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 145.532264][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.544514][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 145.554302][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.574980][ T9] usb 1-1: config 0 descriptor?? [ 145.641396][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.655471][ T48] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.663461][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.681774][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.695576][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 145.701390][ T5887] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.703096][ T5863] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 145.714273][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.726364][ T5863] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.744882][ T5863] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.747779][ T5887] usb 3-1: config 0 descriptor?? [ 145.778803][ T5863] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.815691][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.823832][ T5863] usb 4-1: Product: syz [ 145.827562][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 145.830982][ T5863] usb 4-1: Manufacturer: syz [ 145.838690][ T5863] usb 4-1: SerialNumber: syz [ 145.855418][ T48] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 145.870790][ T48] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.881145][ T48] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.898414][ T48] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.917944][ T48] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.938894][ T48] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.949141][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.004839][ T9] kye 0003:0458:5016.000A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 146.039061][ T9] kye 0003:0458:5016.000A: unknown main item tag 0x0 [ 146.076293][ T9] kye 0003:0458:5016.000A: hidraw0: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 146.093775][ T9] kye 0003:0458:5016.000A: tablet-enabling feature report not found [ 146.104197][ T9] kye 0003:0458:5016.000A: tablet enabling failed [ 146.201908][ T48] usb 2-1: usb_control_msg returned -32 [ 146.204035][ T9] usb 1-1: USB disconnect, device number 11 [ 146.207827][ T5887] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xe [ 146.235531][ T48] usbtmc 2-1:16.0: can't read capabilities [ 146.252236][ T5887] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 146.308425][ T5863] usb 4-1: 0:2 : does not exist [ 146.316652][ T5887] plantronics 0003:047F:FFFF.000B: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 146.481771][ T5887] usb 3-1: USB disconnect, device number 8 [ 146.752545][ T978] usb 2-1: USB disconnect, device number 8 [ 146.959194][ T5863] usb 4-1: USB disconnect, device number 8 [ 147.086765][ T6764] udevd[6764]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.775365][ T5908] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 147.833941][ T7100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.957410][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.993849][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 148.043570][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 148.072517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 148.083548][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.195383][ T5908] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.245569][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.273624][ T5908] usb 2-1: config 0 descriptor?? [ 148.345426][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 148.482754][ T30] audit: type=1326 audit(1751755548.057:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d818e929 code=0x7ffc0000 [ 148.505402][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 148.523536][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 148.575650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 148.583960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 148.585213][ T24] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 148.625683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 148.641764][ T30] audit: type=1326 audit(1751755548.057:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d818e929 code=0x7ffc0000 [ 148.680126][ T24] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 148.705437][ T24] usb 1-1: Product: syz [ 148.730233][ T24] usb 1-1: Manufacturer: syz [ 148.740512][ T30] audit: type=1326 audit(1751755548.057:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc7d818e929 code=0x7ffc0000 [ 148.765373][ T24] usb 1-1: SerialNumber: syz [ 148.816961][ T24] usb 1-1: config 0 descriptor?? [ 148.822681][ T5908] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 148.832810][ T7118] input: syz0 as /devices/virtual/input/input12 [ 148.835457][ T7107] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 148.848966][ T30] audit: type=1326 audit(1751755548.087:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d818e929 code=0x7ffc0000 [ 148.894709][ T30] audit: type=1326 audit(1751755548.087:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc7d818e929 code=0x7ffc0000 [ 148.918906][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 148.962822][ T24] hub 1-1:0.0: probe with driver hub failed with error -5 [ 149.041378][ T30] audit: type=1326 audit(1751755548.087:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d818e929 code=0x7ffc0000 [ 149.068649][ T5863] usb 2-1: USB disconnect, device number 9 [ 149.105100][ T30] audit: type=1326 audit(1751755548.087:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d818e929 code=0x7ffc0000 [ 149.162849][ T30] audit: type=1326 audit(1751755548.087:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc7d818e929 code=0x7ffc0000 [ 149.201116][ T7121] fido_id[7121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 149.278877][ T30] audit: type=1326 audit(1751755548.087:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7d812ab19 code=0x7ffc0000 [ 149.302552][ T24] usb 1-1: USB disconnect, device number 12 [ 149.440683][ T30] audit: type=1326 audit(1751755548.087:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d818e929 code=0x7ffc0000 [ 149.473328][ T7126] netlink: 'syz.4.490': attribute type 11 has an invalid length. [ 149.855380][ T5887] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 149.888633][ T7135] netlink: 36 bytes leftover after parsing attributes in process `syz.1.494'. [ 149.930577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 150.087245][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 150.109987][ T5887] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 150.187342][ T5887] usb 1-1: string descriptor 0 read error: -22 [ 150.193691][ T5887] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 150.203011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 150.279555][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 150.300822][ T5887] usb 1-1: config 0 descriptor?? [ 150.319695][ T7107] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 150.334255][ T5887] hub 1-1:0.0: bad descriptor, ignoring hub [ 150.355779][ T5887] hub 1-1:0.0: probe with driver hub failed with error -5 [ 150.730455][ T24] usb 1-1: USB disconnect, device number 13 [ 150.805495][ T5887] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 150.998502][ T5887] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 151.015503][ T5887] usb 3-1: config 0 has no interface number 0 [ 151.031848][ T5887] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 151.050375][ T5887] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 151.061504][ T5887] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 151.073463][ T5887] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 151.086595][ T5887] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 151.099395][ T5887] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 151.113185][ T5887] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 151.122572][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.156500][ T5887] usb 3-1: config 0 descriptor?? [ 151.176261][ T7154] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 151.202806][ T7154] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 151.266961][ T5887] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 151.554761][ T24] usb 3-1: USB disconnect, device number 9 [ 151.554871][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 151.606132][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 151.856119][ T7184] netlink: 'syz.0.514': attribute type 29 has an invalid length. [ 153.115537][ T5863] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 153.277707][ T978] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 153.335552][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 153.343553][ T5863] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 153.352176][ T5863] usb 4-1: config 0 has no interface number 0 [ 153.368767][ T5863] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 153.389273][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.405594][ T5863] usb 4-1: Product: syz [ 153.415343][ T5863] usb 4-1: Manufacturer: syz [ 153.420398][ T5863] usb 4-1: SerialNumber: syz [ 153.477601][ T978] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 153.487563][ T5863] usb 4-1: config 0 descriptor?? [ 153.511721][ T978] usb 3-1: config 0 has no interface number 0 [ 153.522948][ T5863] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 153.558217][ T978] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 153.576326][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.595111][ T978] usb 3-1: Product: syz [ 153.615397][ T978] usb 3-1: Manufacturer: syz [ 153.620072][ T978] usb 3-1: SerialNumber: syz [ 153.650785][ T978] usb 3-1: config 0 descriptor?? [ 153.747634][ T5863] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 153.790587][ T5863] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 153.897209][ T978] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 153.957395][ T978] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 154.015429][ T978] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 154.023576][ T978] usb 3-1: media controller created [ 154.072371][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.106744][ T24] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 154.196109][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 154.204453][ T5863] usb 4-1: USB disconnect, device number 9 [ 154.217955][ T5863] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 154.227400][ T5887] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 154.233241][ T5863] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 154.259967][ T5863] quatech2 4-1:0.51: device disconnected [ 154.272678][ T24] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 154.292630][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.311712][ T24] usb 1-1: Product: syz [ 154.318813][ T24] usb 1-1: Manufacturer: syz [ 154.333618][ T24] usb 1-1: SerialNumber: syz [ 154.344266][ T24] usb 1-1: config 0 descriptor?? [ 154.351252][ T978] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 154.398407][ T978] usb 3-1: USB disconnect, device number 10 [ 154.408187][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.426040][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.437874][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.451097][ T5887] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.460705][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.475751][ T48] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 154.483610][ T5887] usb 5-1: config 0 descriptor?? [ 154.648429][ T48] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 154.657502][ T48] usb 2-1: config 1 has no interface number 0 [ 154.663641][ T48] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.674618][ T48] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 154.683758][ T48] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 154.703559][ T48] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.712871][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.723101][ T48] usb 2-1: Product: syz [ 154.727406][ T48] usb 2-1: Manufacturer: syz [ 154.732056][ T48] usb 2-1: SerialNumber: syz [ 154.755820][ T24] airspy 1-1:0.0: Board ID: 00 [ 154.760693][ T24] airspy 1-1:0.0: Firmware version: [ 154.885570][ T7261] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005d: 0000 [#1] SMP KASAN PTI [ 154.897506][ T7261] KASAN: null-ptr-deref in range [0x00000000000002e8-0x00000000000002ef] [ 154.905918][ T7261] CPU: 1 UID: 0 PID: 7261 Comm: syz.3.549 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 154.917806][ T7261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.927872][ T7261] RIP: 0010:hfsc_qlen_notify+0x2e/0x160 [ 154.933441][ T7261] Code: 55 41 57 41 56 41 55 41 54 53 48 89 f3 49 bc 00 00 00 00 00 fc ff df e8 d0 74 3d f8 4c 8d b3 ec 02 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 e8 00 00 00 41 8b 2e 31 ff 89 ee e8 e9 [ 154.953051][ T7261] RSP: 0018:ffffc9000bb370f0 EFLAGS: 00010203 [ 154.959126][ T7261] RAX: 000000000000005d RBX: 0000000000000000 RCX: 0000000000080000 [ 154.967105][ T7261] RDX: ffffc9000ca33000 RSI: 0000000000000331 RDI: 0000000000000332 [ 154.975078][ T7261] RBP: dffffc0000000000 R08: ffff888027503c00 R09: 0000000000000002 [ 154.983051][ T7261] R10: 00000000ffffffff R11: ffffffff8982e9a0 R12: dffffc0000000000 [ 154.991024][ T7261] R13: ffff888057896000 R14: 00000000000002ec R15: ffff888057896000 [ 154.998999][ T7261] FS: 00007fc7d5ff66c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 155.007936][ T7261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.014524][ T7261] CR2: 0000200000000240 CR3: 000000006853c000 CR4: 00000000003526f0 [ 155.022501][ T7261] Call Trace: [ 155.025785][ T7261] [ 155.028726][ T7261] qdisc_tree_reduce_backlog+0x299/0x480 [ 155.034369][ T7261] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 155.040091][ T7261] hhf_change+0x764/0xad0 [ 155.044427][ T7261] ? __pfx_hhf_change+0x10/0x10 [ 155.049284][ T7261] ? __pfx_hhf_init+0x10/0x10 [ 155.053962][ T7261] hhf_init+0x213/0x950 [ 155.058118][ T7261] ? __pfx_hhf_init+0x10/0x10 [ 155.062799][ T7261] qdisc_create+0x7a9/0xea0 [ 155.067313][ T7261] tc_modify_qdisc+0x1426/0x2010 [ 155.072256][ T7261] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 155.077556][ T7261] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 155.082841][ T7261] rtnetlink_rcv_msg+0x77c/0xb70 [ 155.087788][ T7261] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 155.092908][ T7261] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.098369][ T7261] ? ref_tracker_free+0x63a/0x7d0 [ 155.103392][ T7261] ? __copy_skb_header+0xa7/0x550 [ 155.108425][ T7261] ? __pfx_ref_tracker_free+0x10/0x10 [ 155.113796][ T7261] ? __skb_clone+0x63/0x7a0 [ 155.118308][ T7261] netlink_rcv_skb+0x205/0x470 [ 155.123081][ T7261] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.128543][ T7261] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.133836][ T7261] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.139041][ T7261] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.144244][ T7261] netlink_unicast+0x758/0x8d0 [ 155.149017][ T7261] netlink_sendmsg+0x805/0xb30 [ 155.153788][ T7261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.159080][ T7261] ? aa_sock_msg_perm+0x94/0x160 [ 155.164027][ T7261] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.169315][ T7261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.174604][ T7261] __sock_sendmsg+0x219/0x270 [ 155.179288][ T7261] ____sys_sendmsg+0x505/0x830 [ 155.184058][ T7261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.189355][ T7261] ? import_iovec+0x74/0xa0 [ 155.193862][ T7261] ___sys_sendmsg+0x21f/0x2a0 [ 155.198554][ T7261] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.203767][ T7261] ? __fget_files+0x2a/0x420 [ 155.208364][ T7261] ? __fget_files+0x3a0/0x420 [ 155.213041][ T7261] __x64_sys_sendmsg+0x19b/0x260 [ 155.217977][ T7261] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.223433][ T7261] ? do_syscall_64+0xbe/0x3b0 [ 155.228104][ T7261] do_syscall_64+0xfa/0x3b0 [ 155.232597][ T7261] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.237785][ T7261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.243840][ T7261] ? clear_bhb_loop+0x60/0xb0 [ 155.248507][ T7261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.254391][ T7261] RIP: 0033:0x7fc7d818e929 [ 155.258797][ T7261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.278396][ T7261] RSP: 002b:00007fc7d5ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.286807][ T7261] RAX: ffffffffffffffda RBX: 00007fc7d83b5fa0 RCX: 00007fc7d818e929 [ 155.294771][ T7261] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 155.302737][ T7261] RBP: 00007fc7d8210b39 R08: 0000000000000000 R09: 0000000000000000 [ 155.310701][ T7261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.318667][ T7261] R13: 0000000000000000 R14: 00007fc7d83b5fa0 R15: 00007fc7d84dfa28 [ 155.326634][ T7261] [ 155.329651][ T7261] Modules linked in: [ 155.333625][ T7261] ---[ end trace 0000000000000000 ]--- [ 155.339089][ T7261] RIP: 0010:hfsc_qlen_notify+0x2e/0x160 [ 155.344635][ T7261] Code: 55 41 57 41 56 41 55 41 54 53 48 89 f3 49 bc 00 00 00 00 00 fc ff df e8 d0 74 3d f8 4c 8d b3 ec 02 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 e8 00 00 00 41 8b 2e 31 ff 89 ee e8 e9 [ 155.364252][ T7261] RSP: 0018:ffffc9000bb370f0 EFLAGS: 00010203 [ 155.370327][ T7261] RAX: 000000000000005d RBX: 0000000000000000 RCX: 0000000000080000 [ 155.378307][ T7261] RDX: ffffc9000ca33000 RSI: 0000000000000331 RDI: 0000000000000332 [ 155.386294][ T7261] RBP: dffffc0000000000 R08: ffff888027503c00 R09: 0000000000000002 [ 155.394264][ T7261] R10: 00000000ffffffff R11: ffffffff8982e9a0 R12: dffffc0000000000 [ 155.402243][ T7261] R13: ffff888057896000 R14: 00000000000002ec R15: ffff888057896000 [ 155.410222][ T7261] FS: 00007fc7d5ff66c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 155.419159][ T7261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.425755][ T7261] CR2: 0000200000000240 CR3: 000000006853c000 CR4: 00000000003526f0 [ 155.433733][ T7261] Kernel panic - not syncing: Fatal exception in interrupt [ 155.441268][ T7261] Kernel Offset: disabled [ 155.445589][ T7261] Rebooting in 86400 seconds..