last executing test programs: 1m51.668481282s ago: executing program 2 (id=71): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x0) 1m51.132875759s ago: executing program 2 (id=76): timer_create(0x3, 0x0, &(0x7f0000005f00)=0x0) timer_settime(r0, 0x0, &(0x7f0000005f40)={{0x77359400}, {0x77359400}}, 0x0) timer_delete(r0) 1m50.673404442s ago: executing program 2 (id=79): unshare(0x2a020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) linkat(r0, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400) 1m43.270491139s ago: executing program 2 (id=87): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0xfffffffd, 0x0, 0xb0}, 0x9c) sendto$inet6(r0, &(0x7f0000000000)="ee", 0x1, 0x40, &(0x7f0000000100)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 1m42.556503614s ago: executing program 2 (id=92): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xa, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x80000001}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xffffd8b1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c840}, 0x800) 1m42.02206513s ago: executing program 2 (id=96): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000000)={0xd4, 0x0, 0x1f}) 1m26.864690921s ago: executing program 32 (id=96): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000000)={0xd4, 0x0, 0x1f}) 9.648306993s ago: executing program 3 (id=536): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x64}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 6.386419049s ago: executing program 0 (id=545): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000940)=[{0x6, 0x0, 0x1, 0x7fff8000}]}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0xa0000001}) 5.956333953s ago: executing program 4 (id=547): r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0xc8) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, 0x0, 0xe) 5.93217865s ago: executing program 0 (id=548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000001000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) 5.444878183s ago: executing program 4 (id=549): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="4005dd"], 0x0, 0x0}) 5.407006277s ago: executing program 0 (id=550): r0 = epoll_create1(0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x20002015}) 4.976971253s ago: executing program 3 (id=552): unshare(0x26020480) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4a, &(0x7f0000000040), 0x4) 4.921151755s ago: executing program 0 (id=553): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa8, 0xf4, 0xdd, 0x8, 0x46d, 0x8b1, 0x6d2a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x15, 0xb3, 0x83}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.804476945s ago: executing program 5 (id=555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0x13, 0x9, 0x7, @empty, 0x3}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 4.307271505s ago: executing program 3 (id=556): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000000)={0xa, 0x4e23, 0x93, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xe}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000040)="f3", 0x1}], 0x1}, 0x20000000) getsockopt$bt_hci(r0, 0x84, 0x82, 0x0, &(0x7f00000001c0)=0x5d) 4.191434709s ago: executing program 5 (id=557): modify_ldt$write(0x1, &(0x7f0000000240)={0x1000, 0x0, 0x2000}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.987905483s ago: executing program 1 (id=558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280140003"], 0x44}}, 0x0) 3.428681751s ago: executing program 5 (id=559): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1b}}, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) 3.384231191s ago: executing program 1 (id=560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x80010, 0x7ff109c33cc0094a}}]}, 0x20}}, 0x0) 2.726121231s ago: executing program 1 (id=561): vmsplice(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="6ce298bbf0f89aa0990b8a56b8d513a91cf598046d7435b88ab380961ea8db76", 0x20}], 0x1, 0x2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -92'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 2.718380911s ago: executing program 5 (id=562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x20, 0x3, "e1d3289a887b1fbeb94ef4ab0115586af74f83450f3675eefbdbccc4"}, @NFTA_TARGET_NAME={0xb, 0x1, 'TPROXY\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb8}}, 0x10) 2.51829245s ago: executing program 4 (id=563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x16}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 2.220620311s ago: executing program 0 (id=564): syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x1ffffe, 0x10100, 0x2, 0xfffffffd}, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110, 0xd}}], 0x18, 0x4c00}, 0x0) 2.044866455s ago: executing program 1 (id=565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48}, 0x20000000) 2.007401788s ago: executing program 3 (id=566): r0 = open(&(0x7f00000000c0)='.\x00', 0x2000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, 0x0, 0x0) 1.652104344s ago: executing program 4 (id=567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001"], 0x34}}, 0x0) 1.485477663s ago: executing program 5 (id=568): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x5) 1.311437047s ago: executing program 0 (id=569): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) set_mempolicy(0x3, &(0x7f0000000000)=0xb, 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.270312731s ago: executing program 1 (id=570): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/nfs', 0x0, 0x3a) getdents64(r0, &(0x7f0000000180)=""/206, 0xce) 1.235551373s ago: executing program 3 (id=571): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/packet\x00') read$FUSE(r0, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0xadc) 800.018939ms ago: executing program 5 (id=572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) 767.270253ms ago: executing program 4 (id=573): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000400)={0xa, 0x4e22, 0x7fffffff, @loopback, 0x88}, 0x1c) 545.191343ms ago: executing program 1 (id=574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x400caed0, &(0x7f00000003c0)={0x80000003, 0xffffffffffffffff, 0xfffffffe}) 416.189548ms ago: executing program 3 (id=575): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) 0s ago: executing program 4 (id=576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000060a010400000000000000000200fffc68000480240001800b000100736f636b6574000014000280080002400000000b08000140000000000c000180080001006f736600540001800e000100636f6e6e6c696d6974000000100001800b0001006f626a7265660000100001800a000100696e6e65720000000900010073797a30000000000900020073797a32"], 0xbc}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. [ 82.078336][ T5853] cgroup: Unknown subsys name 'net' [ 82.256188][ T5853] cgroup: Unknown subsys name 'cpuset' [ 82.265057][ T5853] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.969627][ T5853] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.625204][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.653503][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.655469][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.661833][ T5866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.670853][ T5875] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.676884][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.693203][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.701397][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.722009][ T5866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.736561][ T5874] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.744275][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.752677][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.752784][ T5866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.754485][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.768573][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.782448][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.783159][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.798561][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.811478][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.813577][ T5184] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.822575][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.827588][ T5184] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.847147][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.864631][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.892439][ T5184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.651661][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 87.906294][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 87.953152][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.960812][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.968595][ T5879] bridge_slave_0: entered allmulticast mode [ 87.977083][ T5879] bridge_slave_0: entered promiscuous mode [ 88.022801][ T5883] chnl_net:caif_netlink_parms(): no params data found [ 88.042257][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.049471][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.057182][ T5879] bridge_slave_1: entered allmulticast mode [ 88.064642][ T5879] bridge_slave_1: entered promiscuous mode [ 88.217885][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.241079][ T5884] chnl_net:caif_netlink_parms(): no params data found [ 88.268667][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.278566][ T5882] chnl_net:caif_netlink_parms(): no params data found [ 88.406181][ T5879] team0: Port device team_slave_0 added [ 88.450507][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.457977][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.466023][ T5880] bridge_slave_0: entered allmulticast mode [ 88.473500][ T5880] bridge_slave_0: entered promiscuous mode [ 88.480810][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.488699][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.495997][ T5883] bridge_slave_0: entered allmulticast mode [ 88.504105][ T5883] bridge_slave_0: entered promiscuous mode [ 88.512572][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.519719][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.528043][ T5883] bridge_slave_1: entered allmulticast mode [ 88.536374][ T5883] bridge_slave_1: entered promiscuous mode [ 88.545537][ T5879] team0: Port device team_slave_1 added [ 88.592330][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.599498][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.607227][ T5880] bridge_slave_1: entered allmulticast mode [ 88.614663][ T5880] bridge_slave_1: entered promiscuous mode [ 88.694753][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.702110][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.728689][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.789124][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.799396][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.806997][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.834014][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.852428][ T5869] Bluetooth: hci2: command tx timeout [ 88.852431][ T5184] Bluetooth: hci0: command tx timeout [ 88.874692][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.887182][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.899191][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.941383][ T5869] Bluetooth: hci1: command tx timeout [ 88.942672][ T5184] Bluetooth: hci4: command tx timeout [ 88.954114][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.961553][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.968744][ T5884] bridge_slave_0: entered allmulticast mode [ 88.976365][ T5884] bridge_slave_0: entered promiscuous mode [ 89.011522][ T5184] Bluetooth: hci3: command tx timeout [ 89.048561][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.056274][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.063778][ T5884] bridge_slave_1: entered allmulticast mode [ 89.071056][ T5884] bridge_slave_1: entered promiscuous mode [ 89.098629][ T5880] team0: Port device team_slave_0 added [ 89.107273][ T5883] team0: Port device team_slave_0 added [ 89.114526][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.122191][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.130190][ T5882] bridge_slave_0: entered allmulticast mode [ 89.138087][ T5882] bridge_slave_0: entered promiscuous mode [ 89.178480][ T5880] team0: Port device team_slave_1 added [ 89.186711][ T5883] team0: Port device team_slave_1 added [ 89.207743][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.215523][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.222913][ T5882] bridge_slave_1: entered allmulticast mode [ 89.230092][ T5882] bridge_slave_1: entered promiscuous mode [ 89.254969][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.318908][ T5879] hsr_slave_0: entered promiscuous mode [ 89.326122][ T5879] hsr_slave_1: entered promiscuous mode [ 89.336180][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.375322][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.382634][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.409413][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.439391][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.466058][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.473394][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.499626][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.512580][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.519650][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.546674][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.560758][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.589917][ T5884] team0: Port device team_slave_0 added [ 89.600860][ T5884] team0: Port device team_slave_1 added [ 89.607782][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.615092][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.641392][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.724397][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.731460][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.758215][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.772670][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.779744][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.806131][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.823522][ T5882] team0: Port device team_slave_0 added [ 89.880929][ T5882] team0: Port device team_slave_1 added [ 89.935541][ T5883] hsr_slave_0: entered promiscuous mode [ 89.942480][ T5883] hsr_slave_1: entered promiscuous mode [ 89.948687][ T5883] debugfs: 'hsr0' already exists in 'hsr' [ 89.955024][ T5883] Cannot create hsr debugfs directory [ 90.025427][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.033037][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.075116][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.091962][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.099055][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.125770][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.198095][ T5880] hsr_slave_0: entered promiscuous mode [ 90.204971][ T5880] hsr_slave_1: entered promiscuous mode [ 90.211166][ T5880] debugfs: 'hsr0' already exists in 'hsr' [ 90.218207][ T5880] Cannot create hsr debugfs directory [ 90.290275][ T5884] hsr_slave_0: entered promiscuous mode [ 90.298204][ T5884] hsr_slave_1: entered promiscuous mode [ 90.305534][ T5884] debugfs: 'hsr0' already exists in 'hsr' [ 90.311471][ T5884] Cannot create hsr debugfs directory [ 90.509089][ T5882] hsr_slave_0: entered promiscuous mode [ 90.517807][ T5882] hsr_slave_1: entered promiscuous mode [ 90.524735][ T5882] debugfs: 'hsr0' already exists in 'hsr' [ 90.530504][ T5882] Cannot create hsr debugfs directory [ 90.755425][ T5879] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.810777][ T5879] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.869734][ T5879] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.917654][ T5879] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.932155][ T5184] Bluetooth: hci2: command tx timeout [ 90.932225][ T5869] Bluetooth: hci0: command tx timeout [ 91.011591][ T5869] Bluetooth: hci4: command tx timeout [ 91.015063][ T5184] Bluetooth: hci1: command tx timeout [ 91.091403][ T5184] Bluetooth: hci3: command tx timeout [ 91.117371][ T5884] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.140590][ T5884] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.164601][ T5884] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.179136][ T5884] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.290091][ T5883] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.317764][ T5883] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.347142][ T5883] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.359587][ T5883] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.464939][ T5880] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.500475][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.512488][ T5880] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.552533][ T5880] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.599423][ T5880] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.695245][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.726277][ T5882] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.739449][ T5882] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.750460][ T5882] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.778902][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.786271][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.797202][ T5882] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.832729][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.839986][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.855320][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.919650][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.963863][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.018832][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.026138][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.076083][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.083277][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.116795][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.147274][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.154151][ T24] cfg80211: failed to load regulatory.db [ 92.154541][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.204762][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.212025][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.300094][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.424112][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.474211][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.490916][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.498136][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.512739][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.544996][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.552206][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.599812][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.636034][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.664665][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.671966][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.715781][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.754697][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.761860][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.797898][ T5879] veth0_vlan: entered promiscuous mode [ 92.846271][ T5879] veth1_vlan: entered promiscuous mode [ 92.948935][ T5883] veth0_vlan: entered promiscuous mode [ 92.991969][ T5884] veth0_vlan: entered promiscuous mode [ 93.000299][ T5883] veth1_vlan: entered promiscuous mode [ 93.013240][ T5184] Bluetooth: hci2: command tx timeout [ 93.018720][ T5184] Bluetooth: hci0: command tx timeout [ 93.037064][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.094685][ T5184] Bluetooth: hci1: command tx timeout [ 93.095487][ T5869] Bluetooth: hci4: command tx timeout [ 93.110624][ T5884] veth1_vlan: entered promiscuous mode [ 93.125921][ T5879] veth0_macvtap: entered promiscuous mode [ 93.159698][ T5879] veth1_macvtap: entered promiscuous mode [ 93.173492][ T5869] Bluetooth: hci3: command tx timeout [ 93.189705][ T5883] veth0_macvtap: entered promiscuous mode [ 93.206685][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.244111][ T5883] veth1_macvtap: entered promiscuous mode [ 93.307433][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.317638][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.335150][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.345080][ T5880] veth0_vlan: entered promiscuous mode [ 93.368993][ T5884] veth0_macvtap: entered promiscuous mode [ 93.380601][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.409082][ T5884] veth1_macvtap: entered promiscuous mode [ 93.418174][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.428428][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.473086][ T5880] veth1_vlan: entered promiscuous mode [ 93.488729][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.499925][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.537667][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.547658][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.592884][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.602001][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.646591][ T5882] veth0_vlan: entered promiscuous mode [ 93.710528][ T5882] veth1_vlan: entered promiscuous mode [ 93.733112][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.746370][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.761964][ T4580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.769961][ T4580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.826686][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.838108][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.866631][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.876439][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.894754][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.915638][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.936489][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.944953][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.964421][ T5880] veth0_macvtap: entered promiscuous mode [ 93.982912][ T5882] veth0_macvtap: entered promiscuous mode [ 93.991137][ T5880] veth1_macvtap: entered promiscuous mode [ 94.047475][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.047894][ T5882] veth1_macvtap: entered promiscuous mode [ 94.059995][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.149031][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.175765][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.188369][ T5879] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.213811][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.234129][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.273596][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.317522][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.335546][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.386709][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.406203][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.457476][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.486036][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.503550][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.530713][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.554553][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.767324][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.796951][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.846420][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.880804][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.982293][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.995208][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.091977][ T5869] Bluetooth: hci0: command tx timeout [ 95.093187][ T5184] Bluetooth: hci2: command tx timeout [ 95.143996][ T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.171446][ T5184] Bluetooth: hci1: command tx timeout [ 95.177171][ T5184] Bluetooth: hci4: command tx timeout [ 95.188458][ T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.202087][ T5952] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.244593][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.252648][ T5184] Bluetooth: hci3: command tx timeout [ 95.291449][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.379203][ T5952] usb 3-1: config index 0 descriptor too short (expected 2084, got 36) [ 95.418842][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.456640][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.478140][ T5952] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 95.493967][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.545520][ T5952] usb 3-1: config 0 descriptor?? [ 96.085455][ T5952] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 96.157488][ T5952] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 96.342406][ T5952] dragonrise 0003:0079:0006.0001: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.2-1/input0 [ 96.481724][ T5952] dragonrise 0003:0079:0006.0001: no inputs found [ 96.488245][ T5952] dragonrise 0003:0079:0006.0001: force feedback init failed [ 96.533770][ T5993] netlink: 209588 bytes leftover after parsing attributes in process `syz.4.15'. [ 96.827844][ T5952] usb 3-1: USB disconnect, device number 2 [ 97.512294][ T6000] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 97.537665][ T5994] fido_id[5994]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 98.590180][ T5992] syz.3.14: vmalloc error: size 85106688, failed to allocated page array size 166224, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 98.834693][ T5992] CPU: 1 UID: 0 PID: 5992 Comm: syz.3.14 Not tainted syzkaller #0 PREEMPT(full) [ 98.834729][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.834743][ T5992] Call Trace: [ 98.834752][ T5992] [ 98.834761][ T5992] dump_stack_lvl+0x189/0x250 [ 98.834802][ T5992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.834831][ T5992] ? __pfx__printk+0x10/0x10 [ 98.834862][ T5992] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 98.834887][ T5992] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 98.834915][ T5992] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 98.834944][ T5992] warn_alloc+0x214/0x310 [ 98.834985][ T5992] ? __pfx_warn_alloc+0x10/0x10 [ 98.835027][ T5992] ? __get_vm_area_node+0x28f/0x300 [ 98.835058][ T5992] ? drm_property_create_blob+0x65/0x300 [ 98.835090][ T5992] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 98.835119][ T5992] ? __kasan_slab_free+0x5b/0x80 [ 98.835178][ T5992] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 98.835216][ T5992] ? rcu_is_watching+0x15/0xb0 [ 98.835239][ T5992] ? drm_property_create_blob+0x65/0x300 [ 98.835271][ T5992] ? drm_property_create_blob+0x65/0x300 [ 98.835290][ T5992] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 98.835321][ T5992] ? drm_property_create_blob+0x65/0x300 [ 98.835348][ T5992] ? drm_dev_enter+0x49/0x150 [ 98.835368][ T5992] ? aperture_detach_devices+0x7e/0x2a0 [ 98.835403][ T5992] drm_property_create_blob+0x65/0x300 [ 98.835436][ T5992] drm_mode_createblob_ioctl+0xbf/0x400 [ 98.835471][ T5992] drm_ioctl_kernel+0x2cc/0x390 [ 98.835503][ T5992] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 98.835540][ T5992] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 98.835582][ T5992] drm_ioctl+0x67f/0xb10 [ 98.835609][ T5992] ? __lock_acquire+0xab9/0xd20 [ 98.835645][ T5992] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 98.835678][ T5992] ? __pfx_drm_ioctl+0x10/0x10 [ 98.835721][ T5992] ? __fget_files+0x3a0/0x420 [ 98.835751][ T5992] ? __fget_files+0x2a/0x420 [ 98.835782][ T5992] ? drm_compat_ioctl+0xa7/0x330 [ 98.835806][ T5992] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 98.835839][ T5992] __ia32_compat_sys_ioctl+0x543/0x840 [ 98.835871][ T5992] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 98.835905][ T5992] ? __se_sys_futex_time32+0x360/0x3e0 [ 98.835954][ T5992] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.835989][ T5992] __do_fast_syscall_32+0xb6/0x2b0 [ 98.836022][ T5992] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.836056][ T5992] do_fast_syscall_32+0x34/0x80 [ 98.836088][ T5992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.836115][ T5992] RIP: 0023:0xf707e539 [ 98.836134][ T5992] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 98.836153][ T5992] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 98.836178][ T5992] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01064bd [ 98.836192][ T5992] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.836205][ T5992] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.836216][ T5992] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 98.836227][ T5992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.836258][ T5992] [ 98.836268][ T5992] Mem-Info: [ 99.601215][ C0] sched: DL replenish lagged too much [ 99.702642][ T6018] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.742374][ T6034] capability: warning: `syz.0.34' uses deprecated v2 capabilities in a way that may be insecure [ 100.782701][ T6030] tipc: Started in network mode [ 100.799044][ T6030] tipc: Node identity 2, cluster identity 4711 [ 100.829952][ T6030] tipc: Node number set to 2 [ 101.579663][ T5992] active_anon:6153 inactive_anon:0 isolated_anon:0 [ 101.579663][ T5992] active_file:3140 inactive_file:39810 isolated_file:0 [ 101.579663][ T5992] unevictable:768 dirty:1549 writeback:0 [ 101.579663][ T5992] slab_reclaimable:10595 slab_unreclaimable:96896 [ 101.579663][ T5992] mapped:29251 shmem:1356 pagetables:1065 [ 101.579663][ T5992] sec_pagetables:0 bounce:0 [ 101.579663][ T5992] kernel_misc_reclaimable:0 [ 101.579663][ T5992] free:1315856 free_pcp:25894 free_cma:0 [ 101.978713][ T5992] Node 0 active_anon:24612kB inactive_anon:0kB active_file:12560kB inactive_file:159040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117004kB dirty:6180kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11848kB pagetables:4136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 102.284358][ T5992] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 102.569513][ T5992] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 102.823608][ T5992] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 102.882628][ T5992] Node 0 DMA32 free:1351000kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23560kB inactive_anon:0kB active_file:12560kB inactive_file:157472kB unevictable:1536kB writepending:6172kB present:3129332kB managed:2557456kB mlocked:0kB bounce:0kB free_pcp:89448kB local_pcp:28692kB free_cma:0kB [ 103.046949][ T6063] netlink: 'syz.4.46': attribute type 17 has an invalid length. [ 103.150802][ T6063] netlink: 'syz.4.46': attribute type 41 has an invalid length. [ 103.166017][ T6065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'. [ 103.224624][ T5992] lowmem_reserve[]: 0 0 1 1 1 [ 103.261364][ T5992] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:8kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 103.291407][ T6065] netlink: 'syz.1.47': attribute type 2 has an invalid length. [ 103.299003][ T6065] netlink: 'syz.1.47': attribute type 1 has an invalid length. [ 103.414705][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 103.501575][ T5992] lowmem_reserve[]: 0 0 0 0 0 [ 103.540985][ T5992] Node 1 Normal free:3891624kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19228kB local_pcp:8156kB free_cma:0kB [ 103.819636][ T5992] lowmem_reserve[]: 0 0 0 0 0 [ 103.871637][ T5992] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 103.984557][ T5992] Node 0 DMA32: 2*4kB (ME) 2*8kB (ME) 3*16kB (UME) 0*32kB 1*64kB (M) 3*128kB (UME) 1*256kB (E) 2*512kB (UM) 4*1024kB (UME) 3*2048kB (M) 325*4096kB (M) = 1343240kB [ 104.093803][ T5992] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 104.164274][ T5992] Node 1 Normal: 208*4kB (UE) 43*8kB (UE) 49*16kB (UE) 58*32kB (UE) 23*64kB (UE) 6*128kB (UE) 4*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3891624kB [ 104.288580][ T5992] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.394558][ T5992] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.470778][ T5992] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.539697][ T5992] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.610216][ T5992] 45320 total pagecache pages [ 104.635859][ T5992] 0 pages in swap cache [ 104.712650][ T5992] Free swap = 124996kB [ 104.718365][ T5992] Total swap = 124996kB [ 104.746860][ T5992] 2097051 pages RAM [ 104.799637][ T5992] 0 pages HighMem/MovableOnly [ 104.824427][ T5992] 425661 pages reserved [ 104.855913][ T5992] 0 pages cma reserved [ 105.775066][ T30] audit: type=1326 audit(1755879726.771:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58539 code=0x7ffc0000 [ 105.995703][ T30] audit: type=1326 audit(1755879726.821:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58539 code=0x7ffc0000 [ 106.078737][ T6097] process 'syz.3.62' launched '/dev/fd/3' with NULL argv: empty string added [ 106.158410][ T30] audit: type=1326 audit(1755879726.851:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7f58539 code=0x7ffc0000 [ 106.301524][ T30] audit: type=1326 audit(1755879726.851:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58539 code=0x7ffc0000 [ 106.323380][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.481370][ T30] audit: type=1326 audit(1755879726.851:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58539 code=0x7ffc0000 [ 106.598583][ T6102] netlink: 'syz.1.64': attribute type 2 has an invalid length. [ 106.641700][ T30] audit: type=1326 audit(1755879726.851:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=40000003 syscall=325 compat=1 ip=0xf7f58539 code=0x7ffc0000 [ 106.784738][ T30] audit: type=1326 audit(1755879726.851:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58539 code=0x7ffc0000 [ 106.784801][ T30] audit: type=1326 audit(1755879726.851:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58539 code=0x7ffc0000 [ 106.823713][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.989307][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.414101][ T6069] kthread_run failed with err -4 [ 108.551350][ T5952] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.853921][ T5952] usb 2-1: config 0 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.911090][ T5952] usb 2-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.024998][ T5952] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.092067][ T5952] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 109.139413][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.192624][ T5952] usb 2-1: config 0 descriptor?? [ 109.346083][ T6144] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 109.661860][ T5952] elecom 0003:056E:00FB.0002: item fetching failed at offset 1/3 [ 109.694807][ T5952] elecom 0003:056E:00FB.0002: probe with driver elecom failed with error -22 [ 109.895493][ T5952] usb 2-1: USB disconnect, device number 2 [ 115.951845][ T6127] netlink: 72 bytes leftover after parsing attributes in process `syz.3.75'. [ 117.468423][ T6178] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.258086][ T6008] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 118.509623][ T6008] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.598199][ T6008] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 118.699442][ T6008] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 118.821376][ T6008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.939256][ T6008] usb 2-1: config 0 descriptor?? [ 119.062727][ T6008] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 119.123576][ T6008] dvb-usb: bulk message failed: -22 (3/0) [ 119.184379][ T6008] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 119.246614][ T6188] dibusb: i2c wr: len=61 is too big! [ 119.246614][ T6188] [ 119.272333][ T6008] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 119.336791][ T6008] usb 2-1: media controller created [ 119.390683][ T6008] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.513626][ T6008] dvb-usb: bulk message failed: -22 (6/0) [ 119.576414][ T6008] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 119.724222][ T6008] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 119.837893][ T6008] dvb-usb: schedule remote query interval to 150 msecs. [ 119.921942][ T6008] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 120.041912][ T6008] usb 2-1: USB disconnect, device number 3 [ 120.436123][ T6008] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 121.962081][ T5952] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.180854][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.225703][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.279102][ T5952] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 122.342914][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.431766][ T5952] usb 4-1: config 0 descriptor?? [ 122.948444][ T5952] steelseries 0003:1038:12B6.0003: unknown main item tag 0x0 [ 123.012848][ T5952] steelseries 0003:1038:12B6.0003: unknown main item tag 0x0 [ 123.069774][ T5952] steelseries 0003:1038:12B6.0003: unknown main item tag 0x0 [ 123.134352][ T5952] steelseries 0003:1038:12B6.0003: unknown main item tag 0x0 [ 123.186047][ T5952] steelseries 0003:1038:12B6.0003: unknown main item tag 0x0 [ 123.254699][ T5952] steelseries 0003:1038:12B6.0003: unknown main item tag 0x0 [ 123.303638][ T5952] steelseries 0003:1038:12B6.0003: unknown main item tag 0x0 [ 123.357140][ T5952] steelseries 0003:1038:12B6.0003: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 123.609151][ T5952] steelseries 0003:1038:12B6.0003: hid_hw_raw_request() failed with -71 [ 123.756877][ T5952] usb 4-1: USB disconnect, device number 2 [ 123.870694][ T6263] tipc: Enabled bearer , priority 29 [ 123.887995][ T6259] fido_id[6259]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 126.081610][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 126.258227][ T43] usb 5-1: too many endpoints for config 0 interface 0 altsetting 48: 65, using maximum allowed: 30 [ 126.286489][ T43] usb 5-1: config 0 interface 0 altsetting 48 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.323100][ T43] usb 5-1: config 0 interface 0 altsetting 48 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.357660][ T43] usb 5-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 126.420458][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.458031][ T43] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 126.495843][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.542665][ T43] usb 5-1: config 0 descriptor?? [ 126.963541][ T6305] program syz.3.151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.057521][ T43] uclogic 0003:5543:0522.0004: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input0 [ 127.327307][ T6008] usb 5-1: USB disconnect, device number 2 [ 127.512132][ T6306] fido_id[6306]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 133.132252][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.139158][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.350332][ T5869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 133.362201][ T5869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 133.376819][ T5869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 133.387834][ T5869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 133.398035][ T5869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 134.065351][ T6386] chnl_net:caif_netlink_parms(): no params data found [ 135.491412][ T5869] Bluetooth: hci5: command tx timeout [ 137.571508][ T5869] Bluetooth: hci5: command tx timeout [ 138.631538][ T6393] netlink: 'syz.3.190': attribute type 7 has an invalid length. [ 138.639340][ T6393] netlink: 'syz.3.190': attribute type 8 has an invalid length. [ 139.364738][ T6386] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.437782][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.488720][ T6386] bridge_slave_0: entered allmulticast mode [ 139.535822][ T6386] bridge_slave_0: entered promiscuous mode [ 139.613002][ T6386] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.620232][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.652924][ T5869] Bluetooth: hci5: command tx timeout [ 139.702218][ T6386] bridge_slave_1: entered allmulticast mode [ 139.731551][ T6386] bridge_slave_1: entered promiscuous mode [ 140.029363][ T6386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.066318][ T6386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.285684][ T6386] team0: Port device team_slave_0 added [ 140.318695][ T6386] team0: Port device team_slave_1 added [ 140.703171][ T6386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.710449][ T6386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.886069][ T6386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.951595][ T6386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.981401][ T6386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.071628][ T43] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 141.170701][ T6386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.261464][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 141.289166][ T43] usb 4-1: config 0 has an invalid interface number: 63 but max is 0 [ 141.340985][ T43] usb 4-1: config 0 has no interface number 0 [ 141.391919][ T43] usb 4-1: config 0 interface 63 altsetting 150 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.449960][ T43] usb 4-1: config 0 interface 63 altsetting 150 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.507195][ T43] usb 4-1: config 0 interface 63 altsetting 150 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.590381][ T43] usb 4-1: config 0 interface 63 has no altsetting 0 [ 141.636246][ T43] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 141.695562][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.731678][ T5869] Bluetooth: hci5: command tx timeout [ 141.845214][ T43] usb 4-1: config 0 descriptor?? [ 142.452988][ T43] uclogic 0003:28BD:0909.0005: interface is invalid, ignoring [ 142.732866][ T24] usb 4-1: USB disconnect, device number 3 [ 143.647761][ T6386] hsr_slave_0: entered promiscuous mode [ 143.696421][ T6386] hsr_slave_1: entered promiscuous mode [ 143.755973][ T6386] debugfs: 'hsr0' already exists in 'hsr' [ 143.795033][ T6386] Cannot create hsr debugfs directory [ 143.916876][ T6450] netlink: 284 bytes leftover after parsing attributes in process `syz.0.216'. [ 146.884930][ T6386] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 147.033327][ T6386] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.660580][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.714122][ T6386] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.758479][ T6386] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 148.781531][ T5952] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 148.993919][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.059644][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.140722][ T5952] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 149.214278][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.315405][ T5952] usb 4-1: config 0 descriptor?? [ 149.678147][ T6386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.879561][ T6386] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.036715][ T5952] hid-led 0003:1D34:000A.0006: probe with driver hid-led failed with error -71 [ 150.086748][ T4580] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.094127][ T4580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.135524][ T5952] usb 4-1: USB disconnect, device number 4 [ 150.197449][ T4580] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.204799][ T4580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.960045][ T6386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.127133][ T30] audit: type=1326 audit(1755879772.051:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 151.149067][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.427148][ T30] audit: type=1326 audit(1755879772.091:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 151.449104][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.629222][ T6386] veth0_vlan: entered promiscuous mode [ 151.739265][ T30] audit: type=1326 audit(1755879772.181:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 151.887205][ T6386] veth1_vlan: entered promiscuous mode [ 151.983484][ T30] audit: type=1326 audit(1755879772.181:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 152.209541][ T6386] veth0_macvtap: entered promiscuous mode [ 152.216524][ T30] audit: type=1326 audit(1755879772.181:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 152.439353][ T30] audit: type=1326 audit(1755879772.191:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 152.537988][ T6386] veth1_macvtap: entered promiscuous mode [ 152.647934][ T30] audit: type=1326 audit(1755879772.191:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 152.669733][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.888378][ T30] audit: type=1326 audit(1755879772.191:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 153.068241][ T6386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.165258][ T6386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.287383][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.369036][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.511786][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.584637][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.814254][ T5952] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 154.017172][ T5952] usb 1-1: Using ep0 maxpacket: 16 [ 154.048657][ T5952] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.115343][ T5952] usb 1-1: config 0 interface 0 has no altsetting 0 [ 154.180407][ T5952] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 154.251844][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.260006][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.322817][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.352503][ T5952] usb 1-1: config 0 descriptor?? [ 154.812768][ T5952] stadia 0003:18D1:9400.0007: unknown main item tag 0x0 [ 154.834462][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.854150][ T5952] stadia 0003:18D1:9400.0007: unknown main item tag 0x0 [ 154.870759][ T5952] stadia 0003:18D1:9400.0007: unknown main item tag 0x0 [ 154.886663][ T5952] stadia 0003:18D1:9400.0007: unknown main item tag 0x0 [ 154.915568][ T5952] stadia 0003:18D1:9400.0007: unknown main item tag 0x0 [ 154.978961][ T5952] stadia 0003:18D1:9400.0007: hidraw0: USB HID v0.05 Device [HID 18d1:9400] on usb-dummy_hcd.0-1/input0 [ 155.058335][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.080806][ T5952] stadia 0003:18D1:9400.0007: no inputs found [ 155.118518][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.160892][ T5952] stadia 0003:18D1:9400.0007: force feedback init failed [ 155.267929][ T5952] usb 1-1: USB disconnect, device number 2 [ 155.622554][ T6578] fido_id[6578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 156.811934][ T6598] fuse: Unknown parameter 'no' [ 157.360404][ T6606] netlink: 28 bytes leftover after parsing attributes in process `syz.5.285'. [ 157.403280][ T6008] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 157.637582][ T6008] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 157.732782][ T6008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.790315][ T6008] usb 4-1: Product: syz [ 157.829471][ T6008] usb 4-1: Manufacturer: syz [ 157.834551][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.875745][ T6008] usb 4-1: SerialNumber: syz [ 157.957224][ T6614] capability: warning: `syz.5.288' uses 32-bit capabilities (legacy support in use) [ 157.987683][ T6008] usb 4-1: config 0 descriptor?? [ 158.087212][ T6008] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 158.546916][ T6008] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 158.581369][ T6008] sq905c 4-1:0.0: Reading version command failed [ 158.635418][ T6008] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 158.739502][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'. [ 158.781729][ T6008] usb 4-1: USB disconnect, device number 5 [ 158.821917][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 158.921039][ T6623] netlink: 'syz.4.292': attribute type 11 has an invalid length. [ 159.066255][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.591758][ T12] bridge_slave_1: left allmulticast mode [ 160.597755][ T12] bridge_slave_1: left promiscuous mode [ 160.710350][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.980675][ T12] bridge_slave_0: left allmulticast mode [ 161.053697][ T12] bridge_slave_0: left promiscuous mode [ 161.059709][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.180121][ T6662] sctp: failed to load transform for md5: -2 [ 163.312020][ T24] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 163.539301][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 163.591245][ T24] usb 6-1: config 0 has no interface number 0 [ 163.631508][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 163.779757][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 163.853730][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.913813][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.003461][ T24] usb 6-1: config 0 descriptor?? [ 164.011830][ T6674] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 164.123368][ T24] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 164.470981][ C1] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 164.526901][ T24] usb 6-1: USB disconnect, device number 2 [ 166.030564][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.143387][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.226566][ T12] bond0 (unregistering): Released all slaves [ 166.353366][ T6694] netlink: 6 bytes leftover after parsing attributes in process `syz.0.317'. [ 166.462500][ T6698] geneve2: entered promiscuous mode [ 166.881922][ T6704] netlink: 'syz.3.322': attribute type 29 has an invalid length. [ 169.242177][ T6739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.335'. [ 169.618906][ T6744] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 169.953444][ T6008] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 170.188520][ T6008] usb 2-1: Using ep0 maxpacket: 32 [ 170.246669][ T6008] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.341507][ T6008] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.415359][ T6008] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 170.473545][ T6739] Zero length message leads to an empty skb [ 170.531407][ T6008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.622567][ T6008] usb 2-1: config 0 descriptor?? [ 171.169174][ T6008] glorious 0003:258A:0033.0008: item fetching failed at offset 0/3 [ 171.280907][ T12] hsr_slave_0: left promiscuous mode [ 171.328621][ T6008] glorious 0003:258A:0033.0008: probe with driver glorious failed with error -22 [ 171.429292][ T12] hsr_slave_1: left promiscuous mode [ 171.482656][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.490181][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.509218][ T6008] usb 2-1: USB disconnect, device number 4 [ 171.753687][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.832894][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.180631][ T12] veth1_macvtap: left promiscuous mode [ 172.252492][ T12] veth0_macvtap: left promiscuous mode [ 172.296011][ T12] veth1_vlan: left promiscuous mode [ 172.371791][ T12] veth0_vlan: left promiscuous mode [ 172.698370][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.5.353'. [ 173.550228][ T6797] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 173.666018][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.359'. [ 173.828881][ T30] audit: type=1326 audit(1755879794.831:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 173.955473][ T30] audit: type=1326 audit(1755879794.871:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 174.119340][ T30] audit: type=1326 audit(1755879794.871:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 174.298771][ T30] audit: type=1326 audit(1755879794.871:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 174.406399][ T30] audit: type=1326 audit(1755879794.871:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 174.517269][ T30] audit: type=1326 audit(1755879794.871:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=450 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 174.651967][ T30] audit: type=1326 audit(1755879794.891:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 174.981463][ T43] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 175.144569][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 175.169849][ T43] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.200348][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.219564][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 175.263521][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.285041][ T43] usb 2-1: config 0 descriptor?? [ 175.789173][ T43] logitech-djreceiver 0003:046D:C71B.0009: unknown main item tag 0x0 [ 175.814330][ T43] logitech-djreceiver 0003:046D:C71B.0009: unknown main item tag 0x0 [ 175.847070][ T43] logitech-djreceiver 0003:046D:C71B.0009: unknown main item tag 0x0 [ 175.868304][ T43] logitech-djreceiver 0003:046D:C71B.0009: unknown main item tag 0x0 [ 175.880054][ T43] logitech-djreceiver 0003:046D:C71B.0009: unknown main item tag 0x0 [ 175.891907][ T12] team0 (unregistering): Port device team_slave_1 removed [ 176.056282][ T24] usb 2-1: USB disconnect, device number 5 [ 176.154622][ T12] team0 (unregistering): Port device team_slave_0 removed [ 177.177062][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 177.351337][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 177.375239][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 177.387993][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 177.424480][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.440341][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 177.476025][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 177.507792][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 177.526872][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 177.540651][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.570945][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 177.599736][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 177.619901][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 177.646767][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 177.678571][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.699074][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 177.725592][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 177.763614][ T24] usb 2-1: string descriptor 0 read error: -22 [ 177.787495][ T24] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 177.804770][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.876684][ T24] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 178.080585][ T6780] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 178.133724][ T6793] warning: `syz.3.358' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 178.291743][ T24] usb 2-1: USB disconnect, device number 6 [ 179.014845][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 179.031592][ T5952] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 179.308679][ T5952] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 179.336273][ T24] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 179.405024][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.431319][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.515648][ T24] usb 6-1: Product: syz [ 179.519982][ T24] usb 6-1: Manufacturer: syz [ 179.540310][ T5952] usb 4-1: config 0 descriptor?? [ 179.590022][ T5952] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 179.601560][ T24] usb 6-1: SerialNumber: syz [ 179.666240][ T24] usb 6-1: config 0 descriptor?? [ 179.735346][ T24] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 180.096968][ T5952] gspca_cpia1: usb_control_msg 03, error -32 [ 180.178701][ T5952] gspca_cpia1: usb_control_msg 03, error -71 [ 180.181639][ T5952] gspca_cpia1: usb_control_msg 01, error -71 [ 180.181661][ T5952] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 180.202519][ T5952] usb 4-1: USB disconnect, device number 6 [ 180.435173][ T24] gspca_sunplus: reg_r err -71 [ 180.435289][ T24] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 180.509133][ T24] usb 6-1: USB disconnect, device number 3 [ 181.481273][ T43] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 181.721306][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 181.801117][ T43] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 181.809405][ T43] usb 4-1: config 0 has no interface number 0 [ 181.972400][ T43] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 182.054211][ T43] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 182.141295][ T43] usb 4-1: Product: syz [ 182.141327][ T43] usb 4-1: Manufacturer: syz [ 182.150147][ T43] usb 4-1: config 0 descriptor?? [ 183.491092][ T6873] macsec1: entered promiscuous mode [ 183.527214][ T6873] macsec1: entered allmulticast mode [ 183.661329][ T43] usb 4-1: USB disconnect, device number 7 [ 183.858345][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'. [ 184.374108][ T6888] netlink: 34 bytes leftover after parsing attributes in process `syz.0.395'. [ 189.281369][ T43] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 189.472387][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 189.553116][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 189.667395][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 189.781490][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 189.868236][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 189.993089][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 190.054432][ T6971] netlink: 84 bytes leftover after parsing attributes in process `syz.5.429'. [ 190.152563][ T43] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 190.237733][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.319043][ T43] usb 4-1: Product: syz [ 190.369789][ T43] usb 4-1: Manufacturer: syz [ 190.420822][ T43] usb 4-1: SerialNumber: syz [ 190.552668][ T43] usb 4-1: config 0 descriptor?? [ 190.901636][ T6008] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 191.075111][ T6008] usb 2-1: Using ep0 maxpacket: 32 [ 191.106003][ T43] input input8: Device does not respond to id packet M [ 191.155007][ T6008] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.256884][ T6008] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.316876][ T43] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 191.375076][ T6008] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 191.403195][ T43] input input8: Device does not respond to id packet P [ 191.447340][ T6008] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 191.476787][ T43] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 191.552071][ T43] input input8: Device does not respond to id packet B [ 191.568953][ T6008] usb 2-1: Product: syz [ 191.623607][ T6008] usb 2-1: Manufacturer: syz [ 191.652220][ T43] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 191.706559][ T43] input input8: Device does not respond to id packet N [ 191.749902][ T6008] hub 2-1:4.0: USB hub found [ 191.803816][ T43] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 191.912210][ T43] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 191.971638][ T43] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 192.022950][ T6008] hub 2-1:4.0: 2 ports detected [ 192.049040][ T43] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 192.248693][ T43] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 192.468543][ T6008] hub 2-1:4.0: set hub depth failed [ 192.606097][ T43] usb 4-1: USB disconnect, device number 8 [ 192.645353][ T6008] usb 2-1: USB disconnect, device number 7 [ 193.493116][ T7010] netlink: 72 bytes leftover after parsing attributes in process `syz.5.443'. [ 193.591481][ T7010] netlink: 72 bytes leftover after parsing attributes in process `syz.5.443'. [ 194.452056][ T7028] netlink: 20 bytes leftover after parsing attributes in process `syz.5.451'. [ 194.556690][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.573057][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.556254][ T5956] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 197.766871][ T30] audit: type=1326 audit(1755879818.751:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 197.839578][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.925464][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.988933][ T30] audit: type=1326 audit(1755879818.751:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 198.037840][ T5956] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 198.139546][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.192214][ T30] audit: type=1326 audit(1755879818.761:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 198.214395][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.272821][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'. [ 198.286146][ T5956] usb 4-1: config 0 descriptor?? [ 198.389123][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'. [ 198.409871][ T30] audit: type=1326 audit(1755879818.761:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 198.431791][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.636012][ T30] audit: type=1326 audit(1755879818.761:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 198.790676][ T5956] hid_mf 0003:0079:1846.000A: invalid report_count 1106850242 [ 198.885086][ T5956] hid_mf 0003:0079:1846.000A: item 0 4 1 9 parsing failed [ 198.934913][ T5956] hid_mf 0003:0079:1846.000A: HID parse failed. [ 198.998251][ T5956] hid_mf 0003:0079:1846.000A: probe with driver hid_mf failed with error -22 [ 199.108207][ T5956] usb 4-1: USB disconnect, device number 9 [ 199.352940][ T43] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 199.564844][ T43] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 199.607899][ T43] usb 2-1: config 0 has no interface number 0 [ 199.661576][ T43] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 199.736411][ T43] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 199.831552][ T43] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 199.910398][ T43] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 199.978850][ T43] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 200.061636][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.093501][ T5956] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 200.152069][ T43] usb 2-1: config 0 descriptor?? [ 200.215292][ T43] hub 2-1:0.3: bad descriptor, ignoring hub [ 200.288741][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.316693][ T43] hub 2-1:0.3: probe with driver hub failed with error -5 [ 200.384751][ T43] sierra 2-1:0.3: Sierra USB modem converter detected [ 200.407798][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.498619][ T5956] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 200.513434][ T43] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 200.585709][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.609373][ T43] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 200.708345][ T5956] usb 5-1: config 0 descriptor?? [ 200.805052][ T43] usb 2-1: USB disconnect, device number 8 [ 201.008796][ T43] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 201.162359][ T43] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 201.248860][ T43] sierra 2-1:0.3: device disconnected [ 201.431866][ T5956] uclogic 0003:5543:0042.000B: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.4-1/input0 [ 201.701113][ T5956] usb 5-1: USB disconnect, device number 3 [ 202.286391][ T7117] fido_id[7117]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 203.610212][ T5956] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 203.835292][ T5956] usb 6-1: Using ep0 maxpacket: 16 [ 203.875132][ T5956] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 203.962856][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.036828][ T5956] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 204.197763][ T5956] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 204.280456][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.452037][ T5956] usb 6-1: config 0 descriptor?? [ 204.946588][ T5956] samsung 0003:0419:0001.000C: unbalanced collection at end of report description [ 205.106220][ T5956] samsung 0003:0419:0001.000C: parse failed [ 205.221223][ T5956] samsung 0003:0419:0001.000C: probe with driver samsung failed with error -22 [ 205.345318][ T5956] usb 6-1: USB disconnect, device number 4 [ 209.262760][ T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 209.507724][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.601284][ T6008] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 209.609140][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.696291][ T43] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 209.781918][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.835920][ T6008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 209.886409][ T43] usb 2-1: config 0 descriptor?? [ 209.939280][ T6008] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 210.068413][ T6008] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 210.123280][ T6008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.235021][ T6008] usb 5-1: config 0 descriptor?? [ 210.242742][ T7231] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 210.565431][ T43] lenovo 0003:17EF:6047.000D: unknown main item tag 0x0 [ 210.622162][ T43] lenovo 0003:17EF:6047.000D: unknown main item tag 0x0 [ 210.687688][ T43] lenovo 0003:17EF:6047.000D: unknown main item tag 0x0 [ 210.759440][ T43] lenovo 0003:17EF:6047.000D: unknown main item tag 0x0 [ 210.818723][ T43] lenovo 0003:17EF:6047.000D: unknown main item tag 0x0 [ 210.849159][ T6008] microsoft 0003:045E:009D.000E: unknown main item tag 0x1 [ 210.922557][ T43] lenovo 0003:17EF:6047.000D: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 210.949980][ T6008] microsoft 0003:045E:009D.000E: unbalanced delimiter at end of report description [ 211.020003][ T6008] microsoft 0003:045E:009D.000E: parse failed [ 211.112221][ T43] usb 2-1: USB disconnect, device number 9 [ 211.131971][ T6008] microsoft 0003:045E:009D.000E: probe with driver microsoft failed with error -22 [ 211.301629][ T6008] usb 5-1: USB disconnect, device number 4 [ 211.626585][ T7246] fido_id[7246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 212.053842][ T5864] Bluetooth: hci2: command 0x0406 tx timeout [ 212.060085][ T5876] Bluetooth: hci0: command 0x0406 tx timeout [ 212.070414][ T5876] Bluetooth: hci4: command 0x0406 tx timeout [ 212.081040][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 214.241958][ T6008] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 214.478981][ T6008] usb 5-1: Using ep0 maxpacket: 32 [ 214.537617][ T6008] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 214.618288][ T6008] usb 5-1: config 0 has no interface number 0 [ 214.682971][ T6008] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 214.813307][ T6008] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 214.881407][ T5952] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 214.888936][ T6008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.967169][ T6008] usb 5-1: Product: syz [ 214.997953][ T6008] usb 5-1: Manufacturer: syz [ 215.067883][ T6008] usb 5-1: SerialNumber: syz [ 215.146345][ T5952] usb 1-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 215.175498][ T6008] usb 5-1: config 0 descriptor?? [ 215.241390][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.290875][ T6008] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 215.355027][ T5952] usb 1-1: config 0 descriptor?? [ 215.418159][ T6008] em28xx 5-1:0.132: Video interface 132 found: [ 215.444494][ T5952] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 215.697171][ T6008] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 215.980109][ T6008] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 216.117968][ T6008] em28xx 5-1:0.132: board has no eeprom [ 216.162167][ T5952] pwc: recv_control_msg error -71 req 02 val 2b00 [ 216.252608][ T6008] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 216.279947][ T5952] pwc: recv_control_msg error -71 req 02 val 2700 [ 216.317562][ T6008] em28xx 5-1:0.132: analog set to bulk mode. [ 216.331373][ T5952] pwc: recv_control_msg error -71 req 04 val 1600 [ 216.369300][ T5956] em28xx 5-1:0.132: Registering V4L2 extension [ 216.414217][ T5952] pwc: recv_control_msg error -71 req 02 val 2c00 [ 216.481369][ T6008] usb 5-1: USB disconnect, device number 5 [ 216.507774][ T5952] pwc: recv_control_msg error -71 req 04 val 1000 [ 216.573209][ T6008] em28xx 5-1:0.132: Disconnecting em28xx [ 216.631558][ T5952] pwc: recv_control_msg error -71 req 04 val 1300 [ 216.742020][ T5952] pwc: recv_control_msg error -71 req 04 val 1400 [ 216.821881][ T5952] pwc: recv_control_msg error -71 req 02 val 2000 [ 216.911584][ T5952] pwc: recv_control_msg error -71 req 02 val 2100 [ 216.980908][ T7318] x_tables: ip_tables: TPROXY target: only valid in mangle table, not syz0 [ 217.009828][ T5952] pwc: recv_control_msg error -71 req 06 val 0600 [ 217.107687][ T5952] pwc: recv_control_msg error -71 req 04 val 1500 [ 217.194534][ T5952] pwc: recv_control_msg error -71 req 02 val 2500 [ 217.287375][ T5952] pwc: recv_control_msg error -71 req 02 val 2400 [ 217.442031][ T5952] pwc: recv_control_msg error -71 req 02 val 2600 [ 217.541362][ T5952] pwc: recv_control_msg error -71 req 02 val 2900 [ 217.656198][ T5952] pwc: recv_control_msg error -71 req 02 val 2800 [ 217.741673][ T5952] pwc: recv_control_msg error -71 req 04 val 1100 [ 217.822580][ T5952] pwc: recv_control_msg error -71 req 04 val 1200 [ 217.951891][ T5952] pwc: Registered as video103. [ 217.959567][ T5952] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 217.974225][ T7332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.567'. [ 218.266111][ T5952] usb 1-1: USB disconnect, device number 3 [ 218.449836][ T5956] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 218.591206][ T5956] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 218.741250][ T5956] em28xx 5-1:0.132: No AC97 audio processor [ 218.978949][ T5956] usb 5-1: Decoder not found [ 219.067397][ T5956] em28xx 5-1:0.132: failed to create media graph [ 219.150099][ T5956] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 219.283605][ T7343] ================================================================== [ 219.291828][ T7343] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 219.299254][ T7343] Read of size 8 at addr ffff888079290740 by task v4l_id/7343 [ 219.306729][ T7343] [ 219.309076][ T7343] CPU: 1 UID: 0 PID: 7343 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 219.309099][ T7343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.309112][ T7343] Call Trace: [ 219.309120][ T7343] [ 219.309137][ T7343] dump_stack_lvl+0x189/0x250 [ 219.309167][ T7343] ? rcu_is_watching+0x15/0xb0 [ 219.309188][ T7343] ? __kasan_check_byte+0x12/0x40 [ 219.309218][ T7343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.309240][ T7343] ? rcu_is_watching+0x15/0xb0 [ 219.309259][ T7343] ? lock_release+0x4b/0x3e0 [ 219.309290][ T7343] ? __virt_addr_valid+0x1c8/0x5c0 [ 219.309316][ T7343] ? __virt_addr_valid+0x4a5/0x5c0 [ 219.309341][ T7343] print_report+0xca/0x240 [ 219.309361][ T7343] ? v4l2_fh_open+0xc7/0x430 [ 219.309388][ T7343] kasan_report+0x118/0x150 [ 219.309416][ T7343] ? v4l2_fh_open+0xc7/0x430 [ 219.309447][ T7343] v4l2_fh_open+0xc7/0x430 [ 219.309478][ T7343] em28xx_v4l2_open+0x157/0x9a0 [ 219.309510][ T7343] v4l2_open+0x20c/0x360 [ 219.309530][ T7343] chrdev_open+0x4cc/0x5e0 [ 219.309562][ T7343] ? __pfx_chrdev_open+0x10/0x10 [ 219.309593][ T7343] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 219.309626][ T7343] ? __pfx_chrdev_open+0x10/0x10 [ 219.309653][ T7343] do_dentry_open+0x953/0x13f0 [ 219.309680][ T7343] vfs_open+0x3b/0x340 [ 219.309697][ T7343] ? path_openat+0x2ecd/0x3830 [ 219.309722][ T7343] path_openat+0x2ee5/0x3830 [ 219.309744][ T7343] ? arch_stack_walk+0xfc/0x150 [ 219.309776][ T7343] ? stack_depot_save_flags+0x40/0x860 [ 219.309809][ T7343] ? __pfx_path_openat+0x10/0x10 [ 219.309830][ T7343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.309859][ T7343] do_filp_open+0x1fa/0x410 [ 219.309880][ T7343] ? __lock_acquire+0xab9/0xd20 [ 219.309907][ T7343] ? __pfx_do_filp_open+0x10/0x10 [ 219.309940][ T7343] ? _raw_spin_unlock+0x28/0x50 [ 219.309965][ T7343] ? alloc_fd+0x64c/0x6c0 [ 219.309997][ T7343] do_sys_openat2+0x121/0x1c0 [ 219.310020][ T7343] ? __pfx_do_sys_openat2+0x10/0x10 [ 219.310041][ T7343] ? exc_page_fault+0x76/0xf0 [ 219.310069][ T7343] ? do_user_addr_fault+0xc8a/0x1390 [ 219.310100][ T7343] __x64_sys_openat+0x138/0x170 [ 219.310123][ T7343] do_syscall_64+0xfa/0x3b0 [ 219.310160][ T7343] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.310186][ T7343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.310205][ T7343] ? clear_bhb_loop+0x60/0xb0 [ 219.310226][ T7343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.310246][ T7343] RIP: 0033:0x7f2de9aa7407 [ 219.310265][ T7343] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 219.310282][ T7343] RSP: 002b:00007fffb39b2890 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 219.310304][ T7343] RAX: ffffffffffffffda RBX: 00007f2dea171880 RCX: 00007f2de9aa7407 [ 219.310325][ T7343] RDX: 0000000000000000 RSI: 00007fffb39b3f1d RDI: ffffffffffffff9c [ 219.310339][ T7343] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 219.310350][ T7343] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 219.310362][ T7343] R13: 00007fffb39b2ae0 R14: 00007f2dea276000 R15: 00005590bb1ee4d8 [ 219.310384][ T7343] [ 219.310391][ T7343] [ 219.619725][ T7343] Allocated by task 5956: [ 219.624159][ T7343] kasan_save_track+0x3e/0x80 [ 219.628871][ T7343] __kasan_kmalloc+0x93/0xb0 [ 219.633494][ T7343] __kmalloc_cache_noprof+0x230/0x3d0 [ 219.638892][ T7343] em28xx_v4l2_init+0x10b/0x2e70 [ 219.643858][ T7343] em28xx_init_extension+0x11d/0x1c0 [ 219.649165][ T7343] process_scheduled_works+0xae1/0x17b0 [ 219.654761][ T7343] worker_thread+0x8a0/0xda0 [ 219.659369][ T7343] kthread+0x70e/0x8a0 [ 219.663459][ T7343] ret_from_fork+0x3f9/0x770 [ 219.668068][ T7343] ret_from_fork_asm+0x1a/0x30 [ 219.672957][ T7343] [ 219.675294][ T7343] Freed by task 5956: [ 219.679284][ T7343] kasan_save_track+0x3e/0x80 [ 219.683985][ T7343] kasan_save_free_info+0x46/0x50 [ 219.689029][ T7343] __kasan_slab_free+0x5b/0x80 [ 219.693829][ T7343] kfree+0x18e/0x440 [ 219.697775][ T7343] em28xx_v4l2_init+0x1683/0x2e70 [ 219.702829][ T7343] em28xx_init_extension+0x11d/0x1c0 [ 219.708137][ T7343] process_scheduled_works+0xae1/0x17b0 [ 219.713693][ T7343] worker_thread+0x8a0/0xda0 [ 219.718303][ T7343] kthread+0x70e/0x8a0 [ 219.722393][ T7343] ret_from_fork+0x3f9/0x770 [ 219.726999][ T7343] ret_from_fork_asm+0x1a/0x30 [ 219.731833][ T7343] [ 219.734171][ T7343] The buggy address belongs to the object at ffff888079290000 [ 219.734171][ T7343] which belongs to the cache kmalloc-8k of size 8192 [ 219.748286][ T7343] The buggy address is located 1856 bytes inside of [ 219.748286][ T7343] freed 8192-byte region [ffff888079290000, ffff888079292000) [ 219.762278][ T7343] [ 219.764626][ T7343] The buggy address belongs to the physical page: [ 219.771134][ T7343] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79290 [ 219.779908][ T7343] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 219.788507][ T7343] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 219.796597][ T7343] page_type: f5(slab) [ 219.800603][ T7343] raw: 00fff00000000040 ffff88801a442280 ffffea0001f89000 dead000000000005 [ 219.809205][ T7343] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 219.817897][ T7343] head: 00fff00000000040 ffff88801a442280 ffffea0001f89000 dead000000000005 [ 219.826590][ T7343] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 219.835290][ T7343] head: 00fff00000000003 ffffea0001e4a401 00000000ffffffff 00000000ffffffff [ 219.844078][ T7343] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 219.852884][ T7343] page dumped because: kasan: bad access detected [ 219.859398][ T7343] page_owner tracks the page as allocated [ 219.865126][ T7343] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5520, tgid 5520 (sh), ts 58041448535, free_ts 58040116751 [ 219.884862][ T7343] post_alloc_hook+0x240/0x2a0 [ 219.889669][ T7343] get_page_from_freelist+0x21e4/0x22c0 [ 219.895319][ T7343] __alloc_frozen_pages_noprof+0x181/0x370 [ 219.901155][ T7343] alloc_pages_mpol+0x232/0x4a0 [ 219.906201][ T7343] allocate_slab+0x8a/0x370 [ 219.910734][ T7343] ___slab_alloc+0xbeb/0x1410 [ 219.915440][ T7343] __kmalloc_cache_noprof+0x296/0x3d0 [ 219.920832][ T7343] tomoyo_init_log+0x111f/0x1f70 [ 219.925790][ T7343] tomoyo_supervisor+0x340/0x1480 [ 219.930835][ T7343] tomoyo_env_perm+0x149/0x1e0 [ 219.935617][ T7343] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 219.941285][ T7343] tomoyo_bprm_check_security+0x11c/0x180 [ 219.947108][ T7343] security_bprm_check+0x89/0x270 [ 219.952244][ T7343] bprm_execve+0x8ee/0x1450 [ 219.956780][ T7343] do_execveat_common+0x510/0x6a0 [ 219.961845][ T7343] __x64_sys_execve+0x94/0xb0 [ 219.966544][ T7343] page last free pid 5520 tgid 5520 stack trace: [ 219.972896][ T7343] __free_frozen_pages+0xbc4/0xd30 [ 219.978033][ T7343] __put_partials+0x156/0x1a0 [ 219.982829][ T7343] put_cpu_partial+0x17c/0x250 [ 219.987607][ T7343] __slab_free+0x2d5/0x3c0 [ 219.992133][ T7343] qlist_free_all+0x97/0x140 [ 219.996742][ T7343] kasan_quarantine_reduce+0x148/0x160 [ 220.002234][ T7343] __kasan_slab_alloc+0x22/0x80 [ 220.007196][ T7343] __kmalloc_noprof+0x224/0x4f0 [ 220.012069][ T7343] tomoyo_supervisor+0xbd5/0x1480 [ 220.017179][ T7343] tomoyo_env_perm+0x149/0x1e0 [ 220.022152][ T7343] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 220.027892][ T7343] tomoyo_bprm_check_security+0x11c/0x180 [ 220.033644][ T7343] security_bprm_check+0x89/0x270 [ 220.038694][ T7343] bprm_execve+0x8ee/0x1450 [ 220.043223][ T7343] do_execveat_common+0x510/0x6a0 [ 220.048280][ T7343] __x64_sys_execve+0x94/0xb0 [ 220.053075][ T7343] [ 220.055685][ T7343] Memory state around the buggy address: [ 220.061338][ T7343] ffff888079290600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.069432][ T7343] ffff888079290680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.077531][ T7343] >ffff888079290700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.085620][ T7343] ^ [ 220.091805][ T7343] ffff888079290780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.099888][ T7343] ffff888079290800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.108067][ T7343] ================================================================== [ 220.153301][ T5956] em28xx 5-1:0.132: Remote control support is not available for this card. [ 220.441661][ T6008] em28xx 5-1:0.132: Closing input extension SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 221.592169][ T7343] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 221.599447][ T7343] CPU: 1 UID: 0 PID: 7343 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 221.608413][ T7343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 221.618502][ T7343] Call Trace: [ 221.621834][ T7343] [ 221.624794][ T7343] dump_stack_lvl+0x99/0x250 [ 221.629433][ T7343] ? __asan_memcpy+0x40/0x70 [ 221.634082][ T7343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.639339][ T7343] ? __pfx__printk+0x10/0x10 [ 221.644061][ T7343] vpanic+0x281/0x750 [ 221.648086][ T7343] ? preempt_schedule+0xae/0xc0 [ 221.652968][ T7343] ? __pfx_vpanic+0x10/0x10 [ 221.657502][ T7343] ? preempt_schedule_common+0x83/0xd0 [ 221.662988][ T7343] ? preempt_schedule+0xae/0xc0 [ 221.667871][ T7343] ? __pfx_preempt_schedule+0x10/0x10 [ 221.673275][ T7343] panic+0xb9/0xc0 [ 221.677108][ T7343] ? __pfx_panic+0x10/0x10 [ 221.681549][ T7343] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 221.687480][ T7343] ? v4l2_fh_open+0xc7/0x430 [ 221.692102][ T7343] check_panic_on_warn+0x89/0xb0 [ 221.697079][ T7343] ? v4l2_fh_open+0xc7/0x430 [ 221.701697][ T7343] end_report+0x78/0x160 [ 221.705971][ T7343] kasan_report+0x129/0x150 [ 221.710600][ T7343] ? v4l2_fh_open+0xc7/0x430 [ 221.715229][ T7343] v4l2_fh_open+0xc7/0x430 [ 221.719684][ T7343] em28xx_v4l2_open+0x157/0x9a0 [ 221.724566][ T7343] v4l2_open+0x20c/0x360 [ 221.728829][ T7343] chrdev_open+0x4cc/0x5e0 [ 221.733314][ T7343] ? __pfx_chrdev_open+0x10/0x10 [ 221.738285][ T7343] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 221.744732][ T7343] ? __pfx_chrdev_open+0x10/0x10 [ 221.749695][ T7343] do_dentry_open+0x953/0x13f0 [ 221.754488][ T7343] vfs_open+0x3b/0x340 [ 221.758581][ T7343] ? path_openat+0x2ecd/0x3830 [ 221.763465][ T7343] path_openat+0x2ee5/0x3830 [ 221.768088][ T7343] ? arch_stack_walk+0xfc/0x150 [ 221.772975][ T7343] ? stack_depot_save_flags+0x40/0x860 [ 221.778469][ T7343] ? __pfx_path_openat+0x10/0x10 [ 221.783427][ T7343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.789704][ T7343] do_filp_open+0x1fa/0x410 [ 221.794231][ T7343] ? __lock_acquire+0xab9/0xd20 [ 221.799122][ T7343] ? __pfx_do_filp_open+0x10/0x10 [ 221.804179][ T7343] ? _raw_spin_unlock+0x28/0x50 [ 221.809054][ T7343] ? alloc_fd+0x64c/0x6c0 [ 221.813509][ T7343] do_sys_openat2+0x121/0x1c0 [ 221.818210][ T7343] ? __pfx_do_sys_openat2+0x10/0x10 [ 221.823433][ T7343] ? exc_page_fault+0x76/0xf0 [ 221.828139][ T7343] ? do_user_addr_fault+0xc8a/0x1390 [ 221.833463][ T7343] __x64_sys_openat+0x138/0x170 [ 221.838353][ T7343] do_syscall_64+0xfa/0x3b0 [ 221.842890][ T7343] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.848224][ T7343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.854491][ T7343] ? clear_bhb_loop+0x60/0xb0 [ 221.859197][ T7343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.865114][ T7343] RIP: 0033:0x7f2de9aa7407 [ 221.869571][ T7343] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 221.889301][ T7343] RSP: 002b:00007fffb39b2890 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 221.897753][ T7343] RAX: ffffffffffffffda RBX: 00007f2dea171880 RCX: 00007f2de9aa7407 [ 221.905759][ T7343] RDX: 0000000000000000 RSI: 00007fffb39b3f1d RDI: ffffffffffffff9c [ 221.913936][ T7343] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 221.921942][ T7343] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 221.929953][ T7343] R13: 00007fffb39b2ae0 R14: 00007f2dea276000 R15: 00005590bb1ee4d8 [ 221.937972][ T7343] [ 221.941370][ T7343] Kernel Offset: disabled [ 221.945692][ T7343] Rebooting in 86400 seconds..