last executing test programs: 31.551587453s ago: executing program 4 (id=1496): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r0, 0x0}) io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 30.874004237s ago: executing program 4 (id=1498): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x3, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c082fe"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000840)={0x20, 0x8, 0xe, "cc63970e5c6720e95af8d0076b38"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000380)={0x0, 0x15, 0x2, "219b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x6}, 0x0, 0x0}) 27.145073165s ago: executing program 4 (id=1515): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000012205"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000680)="1000000500ca32a375") 23.836509395s ago: executing program 4 (id=1526): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 23.632333179s ago: executing program 4 (id=1530): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80000, 0x60) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x10001011, r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 22.42927427s ago: executing program 4 (id=1535): unshare(0x22020600) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000240)=""/237, 0xed) 22.074761686s ago: executing program 32 (id=1535): unshare(0x22020600) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000240)=""/237, 0xed) 11.058948269s ago: executing program 1 (id=1584): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/17, 0x11}, 0x80000}], 0x1, 0x45833af92e4b39ff, 0x0) 9.592103192s ago: executing program 1 (id=1589): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000040)="010000000000060000071a80010061cc", 0x10) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 6.320444804s ago: executing program 1 (id=1601): socket(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0x1e5}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 5.781556277s ago: executing program 1 (id=1602): r0 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r1 = socket(0x26, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x6a, 0xf3, 0x2, 0x74fa, 0x650, 0x5, 0x8, 0x8}, &(0x7f00000000c0)=0x20) 5.593970219s ago: executing program 1 (id=1604): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 4.804553246s ago: executing program 3 (id=1608): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x4e24, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@mcast1, 0x0, 0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 4.29673657s ago: executing program 3 (id=1611): syz_emit_ethernet(0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0388450055d3ac22db6003c64032a8b92d022bd353991cd4fdc82a2927607d038796d804e08774d45618286af3a28c2a2d3434d6d61665ea7a11401bbd3434f33b0ef3a501c6f4d3c0bc4c69db5d9b5a4b54573552a932bd9eccaf712b66f6383e58c8cc973affbc1eada2612874e665b15356b116aa29b8fa5158954d41"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) r1 = dup(r0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 4.091239693s ago: executing program 3 (id=1612): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0xfe}, 0x0, 0x56, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0xfffffffffffffff8, 0x1}, {0x1ff, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x2, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x158, 0x17, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_HOOK={0xc4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'dummy0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x50, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x158}, 0x1, 0x0, 0x0, 0x41}, 0x10) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x7}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xbcf6}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0xd28ba7275f9e3de7, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xbf60}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044}, 0x0) 3.814423643s ago: executing program 2 (id=1613): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x2000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 3.114139831s ago: executing program 0 (id=1614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x2}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.714298157s ago: executing program 3 (id=1615): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) socket(0x15, 0x800, 0x200) listen(r1, 0x3) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r0, 0x3) listen(r0, 0x0) 2.190021071s ago: executing program 2 (id=1616): sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[], 0x50}}, 0x8004) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/108, 0x6c}], 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x3}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xf7f, 0x0, 0x146, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 2.041998561s ago: executing program 3 (id=1617): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, 0xfffffffffffffff8, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cf}, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x80, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3514, 0x9141, 0x69, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}]}, 0x60}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='$', @ANYRES16=r1, @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40) 1.796769754s ago: executing program 2 (id=1618): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xe) syz_io_uring_setup(0x6e88, &(0x7f0000000080)={0x0, 0x7cdb, 0x3000, 0x0, 0x192}, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000080)={0x0, 0x3752, 0x800, 0x0, 0x15f}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0x7fffffff, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x5e, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x22d2, 0x20, 0x0, 0x0, 0x0) 1.63229851s ago: executing program 2 (id=1619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22d8dd8babe7b2fd}, 0x4008080) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0xd, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x5}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0xf8, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 1.495344145s ago: executing program 0 (id=1620): pwrite64(0xffffffffffffffff, &(0x7f0000000080)="4d64805d3d0b13c9955574c5e3c10a3159573f5afa1d35136b987b432bf8ed82e141e15d", 0x24, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}]}}], 0x1, 0xc0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.064827324s ago: executing program 2 (id=1621): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.057180226s ago: executing program 0 (id=1622): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) 703.063404ms ago: executing program 2 (id=1623): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r0, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x4000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x40400, 0x8) fcntl$notify(r1, 0x402, 0x8000003b) inotify_add_watch(0xffffffffffffffff, 0x0, 0x420008c9) 594.210471ms ago: executing program 1 (id=1624): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0xfe}, 0x0, 0x56, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0xfffffffffffffff8, 0x1}, {0x1ff, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x2, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x158, 0x17, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_HOOK={0xc4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'dummy0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x50, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x158}, 0x1, 0x0, 0x0, 0x41}, 0x10) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x7}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xbcf6}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0xd28ba7275f9e3de7, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xbf60}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044}, 0x0) 539.034453ms ago: executing program 0 (id=1625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x4, 0x8, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000300), &(0x7f0000000340)=r5}, 0x20) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 494.369252ms ago: executing program 3 (id=1626): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="10160500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 323.616394ms ago: executing program 0 (id=1627): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 0s ago: executing program 0 (id=1628): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. [ 89.032572][ T5781] cgroup: Unknown subsys name 'net' [ 89.294107][ T5781] cgroup: Unknown subsys name 'cpuset' [ 89.348879][ T5781] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.359923][ T5781] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.070317][ T10] cfg80211: failed to load regulatory.db [ 94.936321][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.948008][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.956278][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.965547][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.979414][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.028915][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.059353][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.064102][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.090420][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.098943][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.101089][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.103287][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.103810][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.105876][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.106105][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.106700][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.117754][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.124498][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.140094][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.141546][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.143181][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.158383][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.158813][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.174697][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.183399][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.064425][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 96.228657][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 96.261965][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 96.327669][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 96.415966][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 96.555039][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.556293][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.556459][ T5795] bridge_slave_0: entered allmulticast mode [ 96.558637][ T5795] bridge_slave_0: entered promiscuous mode [ 96.634167][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.634290][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.634452][ T5795] bridge_slave_1: entered allmulticast mode [ 96.636310][ T5795] bridge_slave_1: entered promiscuous mode [ 96.752686][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.752827][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.752981][ T5801] bridge_slave_0: entered allmulticast mode [ 96.754882][ T5801] bridge_slave_0: entered promiscuous mode [ 96.811351][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.811474][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.811640][ T5799] bridge_slave_0: entered allmulticast mode [ 96.813704][ T5799] bridge_slave_0: entered promiscuous mode [ 96.850625][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.850752][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.850892][ T5801] bridge_slave_1: entered allmulticast mode [ 96.852753][ T5801] bridge_slave_1: entered promiscuous mode [ 96.901270][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.901491][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.901619][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.901797][ T5799] bridge_slave_1: entered allmulticast mode [ 96.903965][ T5799] bridge_slave_1: entered promiscuous mode [ 96.965074][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.965215][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.965339][ T5798] bridge_slave_0: entered allmulticast mode [ 96.967115][ T5798] bridge_slave_0: entered promiscuous mode [ 96.987491][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.089782][ T5810] Bluetooth: hci0: command tx timeout [ 97.132286][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.132411][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.132578][ T5798] bridge_slave_1: entered allmulticast mode [ 97.134694][ T5798] bridge_slave_1: entered promiscuous mode [ 97.168306][ T5810] Bluetooth: hci4: command tx timeout [ 97.194862][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.195053][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.195205][ T5800] bridge_slave_0: entered allmulticast mode [ 97.197047][ T5800] bridge_slave_0: entered promiscuous mode [ 97.229216][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.249541][ T5796] Bluetooth: hci3: command tx timeout [ 97.250095][ T5810] Bluetooth: hci2: command tx timeout [ 97.282996][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.283232][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.283374][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.283541][ T5800] bridge_slave_1: entered allmulticast mode [ 97.285637][ T5800] bridge_slave_1: entered promiscuous mode [ 97.293323][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.338967][ T5810] Bluetooth: hci1: command tx timeout [ 97.363849][ T5795] team0: Port device team_slave_0 added [ 97.366699][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.410751][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.412893][ T5795] team0: Port device team_slave_1 added [ 97.472875][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.512825][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.515335][ T5801] team0: Port device team_slave_0 added [ 97.560084][ T5799] team0: Port device team_slave_0 added [ 97.563144][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.565153][ T5801] team0: Port device team_slave_1 added [ 97.597953][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.597971][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.597999][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.622903][ T5799] team0: Port device team_slave_1 added [ 97.674027][ T5798] team0: Port device team_slave_0 added [ 97.674863][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.674878][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.674906][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.757598][ T5798] team0: Port device team_slave_1 added [ 97.796502][ T5800] team0: Port device team_slave_0 added [ 97.797335][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.797350][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.797378][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.854090][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.854103][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.854123][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.863250][ T5800] team0: Port device team_slave_1 added [ 97.866452][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.866492][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.866569][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.953475][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.953493][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.953523][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.013250][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.013263][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.013283][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.093619][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.093633][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.093653][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.663073][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.663087][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.663107][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.714392][ T5795] hsr_slave_0: entered promiscuous mode [ 98.715813][ T5795] hsr_slave_1: entered promiscuous mode [ 98.744982][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.744997][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.745018][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.863869][ T5801] hsr_slave_0: entered promiscuous mode [ 98.864866][ T5801] hsr_slave_1: entered promiscuous mode [ 98.865669][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 98.865760][ T5801] Cannot create hsr debugfs directory [ 98.921381][ T5799] hsr_slave_0: entered promiscuous mode [ 98.922431][ T5799] hsr_slave_1: entered promiscuous mode [ 98.923086][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 98.923104][ T5799] Cannot create hsr debugfs directory [ 98.996378][ T5798] hsr_slave_0: entered promiscuous mode [ 98.997360][ T5798] hsr_slave_1: entered promiscuous mode [ 99.001149][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 99.001224][ T5798] Cannot create hsr debugfs directory [ 99.102316][ T5800] hsr_slave_0: entered promiscuous mode [ 99.103310][ T5800] hsr_slave_1: entered promiscuous mode [ 99.103983][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 99.104001][ T5800] Cannot create hsr debugfs directory [ 99.168379][ T5810] Bluetooth: hci0: command tx timeout [ 99.249305][ T5810] Bluetooth: hci4: command tx timeout [ 99.328350][ T5810] Bluetooth: hci2: command tx timeout [ 99.328386][ T5810] Bluetooth: hci3: command tx timeout [ 99.408350][ T5810] Bluetooth: hci1: command tx timeout [ 100.057271][ T5795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.099733][ T5795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.136768][ T5795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.188921][ T5795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.327920][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.356703][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.400477][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.447863][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.578676][ T5799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.612564][ T5799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.657811][ T5799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.713133][ T5799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.866224][ T5798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.900820][ T5798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.940212][ T5798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.001543][ T5798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.104465][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.152328][ T5800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.204779][ T5800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.238934][ T5800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.250466][ T5810] Bluetooth: hci0: command tx timeout [ 101.285118][ T5800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.329452][ T5810] Bluetooth: hci4: command tx timeout [ 101.362302][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.403945][ T1369] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.404788][ T1369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.413601][ T5796] Bluetooth: hci2: command tx timeout [ 101.413874][ T5810] Bluetooth: hci3: command tx timeout [ 101.463512][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.484559][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.484690][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.488884][ T5810] Bluetooth: hci1: command tx timeout [ 101.581115][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.613954][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.628712][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.628922][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.692951][ T1396] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.693381][ T1396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.753870][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.785108][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.807122][ T1369] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.807555][ T1369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.875380][ T1352] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.875550][ T1352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.952697][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.992662][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.007337][ T1352] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.007553][ T1352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.081312][ T1352] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.081861][ T1352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.181913][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.242920][ T1369] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.243150][ T1369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.297988][ T1396] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.308618][ T1396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.356192][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.572536][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.645536][ T5795] veth0_vlan: entered promiscuous mode [ 102.764609][ T5795] veth1_vlan: entered promiscuous mode [ 102.812357][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.906946][ T5801] veth0_vlan: entered promiscuous mode [ 102.944800][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.985799][ T5801] veth1_vlan: entered promiscuous mode [ 103.002324][ T5795] veth0_macvtap: entered promiscuous mode [ 103.056340][ T5795] veth1_macvtap: entered promiscuous mode [ 103.124006][ T5799] veth0_vlan: entered promiscuous mode [ 103.174888][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.210364][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.211213][ T5801] veth0_macvtap: entered promiscuous mode [ 103.215260][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.216692][ T5799] veth1_vlan: entered promiscuous mode [ 103.273924][ T5801] veth1_macvtap: entered promiscuous mode [ 103.294251][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.310650][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.327640][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.330399][ T5810] Bluetooth: hci0: command tx timeout [ 103.350731][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.408742][ T5810] Bluetooth: hci4: command tx timeout [ 103.452083][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.488436][ T5810] Bluetooth: hci3: command tx timeout [ 103.488447][ T5796] Bluetooth: hci2: command tx timeout [ 103.536412][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.568517][ T5796] Bluetooth: hci1: command tx timeout [ 103.652460][ T5799] veth0_macvtap: entered promiscuous mode [ 103.654828][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.687345][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.712983][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.727126][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.740592][ T5799] veth1_macvtap: entered promiscuous mode [ 103.759406][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.759434][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.843397][ T5800] veth0_vlan: entered promiscuous mode [ 103.956474][ T5800] veth1_vlan: entered promiscuous mode [ 103.973441][ T1396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.973463][ T1396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.012101][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.051982][ T5798] veth0_vlan: entered promiscuous mode [ 104.086929][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.153184][ T5798] veth1_vlan: entered promiscuous mode [ 104.156427][ T1352] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.177156][ T1352] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.192813][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.192828][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.197925][ T1352] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.230717][ T1352] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.337995][ T1396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.338017][ T1396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.421879][ T5800] veth0_macvtap: entered promiscuous mode [ 104.502321][ T5800] veth1_macvtap: entered promiscuous mode [ 104.563786][ T5798] veth0_macvtap: entered promiscuous mode [ 104.642430][ T5798] veth1_macvtap: entered promiscuous mode [ 104.723180][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.786877][ T1352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.786902][ T1352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.857079][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.885323][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.909316][ T84] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.960164][ T84] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.992158][ T84] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.005296][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.040481][ T84] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.072021][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.072043][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.112438][ T1396] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.146877][ T1396] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.152334][ T1396] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.186658][ T1396] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.750184][ T1396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.750206][ T1396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.791685][ T5937] netlink: 'syz.3.15': attribute type 10 has an invalid length. [ 105.791767][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 105.791784][ T5937] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15'. [ 105.832802][ T5939] syz.1.17 uses obsolete (PF_INET,SOCK_PACKET) [ 105.909385][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.909405][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.074818][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.074839][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.224695][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.224717][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.889164][ T5962] netlink: 292 bytes leftover after parsing attributes in process `syz.0.24'. [ 106.889386][ T5962] Zero length message leads to an empty skb [ 107.541721][ T5981] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 107.842211][ T5984] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.038639][ T5984] usb 4-1: Using ep0 maxpacket: 8 [ 108.069573][ T5984] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 108.069605][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.069626][ T5984] usb 4-1: Product: syz [ 108.069642][ T5984] usb 4-1: Manufacturer: syz [ 108.069656][ T5984] usb 4-1: SerialNumber: syz [ 108.241314][ T5984] usb 4-1: config 0 descriptor?? [ 108.402917][ T5984] gspca_main: se401-2.14.0 probing 047d:5003 [ 108.970050][ T5984] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 109.070620][ T6014] syz_tun: entered promiscuous mode [ 109.071089][ T6014] macvtap1: entered promiscuous mode [ 109.123243][ T5984] usb 4-1: USB disconnect, device number 2 [ 109.158240][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.298807][ T6018] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.360761][ T31] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 109.360799][ T31] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 109.360841][ T31] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 109.360865][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.415096][ T6012] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 109.440368][ T31] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.786564][ T6014] syz_tun: left promiscuous mode [ 110.252848][ T5900] usb 3-1: USB disconnect, device number 2 [ 110.558152][ T6029] netlink: 60 bytes leftover after parsing attributes in process `syz.3.49'. [ 110.723014][ T6027] netlink: 60 bytes leftover after parsing attributes in process `syz.3.49'. [ 110.985926][ T6037] netlink: 96 bytes leftover after parsing attributes in process `syz.1.50'. [ 111.200938][ T6045] tipc: Started in network mode [ 111.200977][ T6045] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 111.202131][ T6045] tipc: Enabled bearer , priority 14 [ 111.638266][ T5782] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 111.848674][ T5782] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.848704][ T5782] usb 3-1: config 0 has no interface number 0 [ 111.848753][ T5782] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 111.848781][ T5782] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 111.848826][ T5782] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.848851][ T5782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.857374][ T5782] usb 3-1: config 0 descriptor?? [ 111.908310][ T6049] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 112.033985][ T5782] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 112.320191][ T5782] tipc: Node number set to 10005162 [ 112.322897][ T808] usb 3-1: USB disconnect, device number 3 [ 112.322919][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 112.668105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.668359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.669041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.670169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.671285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.672431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.673555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.674687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.675225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.675807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.583748][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.81'. [ 114.099729][ T5984] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.250723][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.250760][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.250801][ T5984] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 114.250825][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.357462][ T5984] usb 5-1: config 0 descriptor?? [ 114.891524][ T5984] steelseries 0003:1038:12B6.0001: report_id 0 is invalid [ 114.892192][ T5984] steelseries 0003:1038:12B6.0001: item 0 4 1 8 parsing failed [ 114.893349][ T5984] steelseries 0003:1038:12B6.0001: probe with driver steelseries failed with error -22 [ 115.042975][ T5984] usb 5-1: USB disconnect, device number 2 [ 115.834310][ T6127] pimreg3: entered allmulticast mode [ 116.563774][ T6154] capability: warning: `syz.0.102' uses deprecated v2 capabilities in a way that may be insecure [ 117.092596][ T6160] netlink: 92 bytes leftover after parsing attributes in process `syz.1.108'. [ 118.237048][ T6184] netlink: 32 bytes leftover after parsing attributes in process `syz.1.115'. [ 121.014403][ T6251] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.190530][ T6255] sch_fq: defrate 7 ignored. [ 121.700433][ T6267] mmap: syz.2.146 (6267) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.157441][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 122.268174][ T36] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.309535][ T6313] netlink: 'syz.3.151': attribute type 29 has an invalid length. [ 122.316654][ T6313] netlink: 'syz.3.151': attribute type 29 has an invalid length. [ 122.618196][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 122.643537][ T36] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 122.643567][ T36] usb 1-1: config 0 has no interface number 0 [ 122.660468][ T36] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 122.660504][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.660524][ T36] usb 1-1: Product: syz [ 122.660539][ T36] usb 1-1: Manufacturer: syz [ 122.660554][ T36] usb 1-1: SerialNumber: syz [ 122.707105][ T36] usb 1-1: config 0 descriptor?? [ 122.719716][ T36] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 123.081110][ T36] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 123.143765][ T36] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 123.483150][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 123.531376][ T5784] usb 1-1: USB disconnect, device number 2 [ 123.601252][ T5784] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 123.651183][ T5784] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 123.652500][ T5784] quatech2 1-1:0.51: device disconnected [ 124.045511][ T6339] sch_fq: defrate 7 ignored. [ 124.303495][ T6349] capability: warning: `syz.3.163' uses 32-bit capabilities (legacy support in use) [ 126.068223][ T5784] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.596812][ T5784] usb 4-1: Using ep0 maxpacket: 32 [ 126.964707][ T5784] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 126.964737][ T5784] usb 4-1: config 0 has no interface number 0 [ 126.998971][ T5784] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 126.999003][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.999025][ T5784] usb 4-1: Product: syz [ 126.999041][ T5784] usb 4-1: Manufacturer: syz [ 126.999056][ T5784] usb 4-1: SerialNumber: syz [ 127.064639][ T5784] usb 4-1: config 0 descriptor?? [ 127.101124][ T5784] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 127.362835][ T5784] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 127.464984][ T5784] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 127.735295][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 127.736647][ T5900] usb 4-1: USB disconnect, device number 3 [ 127.758311][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.795864][ T5900] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 127.837016][ T5900] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 127.838025][ T5900] quatech2 4-1:0.51: device disconnected [ 127.918191][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 127.927109][ T31] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 127.927138][ T31] usb 3-1: config 0 has no interface number 0 [ 127.949717][ T31] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 127.949745][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.949765][ T31] usb 3-1: Product: syz [ 127.949790][ T31] usb 3-1: Manufacturer: syz [ 127.949800][ T31] usb 3-1: SerialNumber: syz [ 128.047599][ T31] usb 3-1: config 0 descriptor?? [ 128.079771][ T31] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 128.360272][ T31] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 128.477211][ T31] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 128.752037][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 128.770647][ T5784] usb 3-1: USB disconnect, device number 4 [ 128.823723][ T5784] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 128.902991][ T5784] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 128.903930][ T5784] quatech2 3-1:0.51: device disconnected [ 132.428231][ T881] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 132.578164][ T881] usb 5-1: Using ep0 maxpacket: 16 [ 132.581233][ T881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.581266][ T881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.581289][ T881] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 132.581333][ T881] usb 5-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 132.581358][ T881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.656111][ T881] usb 5-1: config 0 descriptor?? [ 133.030603][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.030950][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.328366][ T881] usb 5-1: string descriptor 0 read error: -71 [ 133.330580][ T881] uclogic 0003:5543:0047.0002: failed retrieving string descriptor #200: -71 [ 133.330651][ T881] uclogic 0003:5543:0047.0002: failed retrieving pen parameters: -71 [ 133.330783][ T881] uclogic 0003:5543:0047.0002: failed probing pen v2 parameters: -71 [ 133.330846][ T881] uclogic 0003:5543:0047.0002: failed probing parameters: -71 [ 133.330969][ T881] uclogic 0003:5543:0047.0002: probe with driver uclogic failed with error -71 [ 133.375428][ T881] usb 5-1: USB disconnect, device number 3 [ 134.048484][ T6528] netlink: 'syz.4.222': attribute type 6 has an invalid length. [ 134.198664][ T6531] bridge0: entered promiscuous mode [ 134.198938][ T6531] macsec1: entered promiscuous mode [ 139.297650][ T6598] netlink: 16 bytes leftover after parsing attributes in process `syz.3.246'. [ 139.789914][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 139.820926][ T6611] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 140.021358][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.255'. [ 140.086925][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'. [ 140.213226][ T6622] tipc: Started in network mode [ 140.213257][ T6622] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 140.213300][ T6622] tipc: Enabling of bearer rejected, failed to enable media [ 143.571992][ T6697] netlink: 'syz.0.285': attribute type 1 has an invalid length. [ 143.572017][ T6697] netlink: 96 bytes leftover after parsing attributes in process `syz.0.285'. [ 143.584630][ T6696] netlink: 'syz.1.287': attribute type 1 has an invalid length. [ 143.584656][ T6696] netlink: 244 bytes leftover after parsing attributes in process `syz.1.287'. [ 143.808206][ T6440] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 143.867672][ T6703] sg_write: data in/out 405980/48 bytes for SCSI command 0x0-- guessing data in; [ 143.867672][ T6703] program syz.0.290 not setting count and/or reply_len properly [ 143.965945][ T6440] usb 4-1: Using ep0 maxpacket: 32 [ 143.975577][ T6440] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 143.975608][ T6440] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.004205][ T6440] usb 4-1: config 0 descriptor?? [ 144.033732][ T6440] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 144.337629][ T6715] tipc: Started in network mode [ 144.337663][ T6715] tipc: Node identity ac14140f, cluster identity 4711 [ 144.356922][ T6715] tipc: New replicast peer: 255.255.255.255 [ 144.370523][ T6715] tipc: Enabled bearer , priority 10 [ 144.624837][ T6440] gspca_nw80x: reg_w err -71 [ 144.625027][ T6440] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 144.718811][ T6440] usb 4-1: USB disconnect, device number 4 [ 145.006023][ T6731] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 145.468206][ T5784] tipc: Node number set to 2886997007 [ 147.242718][ T6440] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 147.388625][ T6440] usb 2-1: Using ep0 maxpacket: 16 [ 147.395081][ T6440] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 147.395114][ T6440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.395144][ T6440] usb 2-1: Product: syz [ 147.395159][ T6440] usb 2-1: Manufacturer: syz [ 147.395175][ T6440] usb 2-1: SerialNumber: syz [ 147.448271][ T6440] usb 2-1: config 0 descriptor?? [ 147.698498][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 147.871675][ T6440] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 147.921952][ T6440] usb 2-1: USB disconnect, device number 2 [ 147.943327][ T6791] netlink: 212 bytes leftover after parsing attributes in process `syz.3.328'. [ 147.943356][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 147.943370][ T6791] tc_dump_action: action bad kind [ 149.995257][ T6804] gretap0: entered promiscuous mode [ 150.029318][ T6804] gretap0: left promiscuous mode [ 150.538622][ T6827] vivid-000: disconnect [ 150.558792][ T6823] vivid-000: reconnect [ 152.565586][ T6840] warning: `syz.3.347' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 155.116186][ T12] wlan1: Trigger new scan to find an IBSS to join [ 156.494316][ T881] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 156.678146][ T881] usb 4-1: Using ep0 maxpacket: 32 [ 156.680603][ T881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.680627][ T881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.680657][ T881] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 156.680673][ T881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.771457][ T881] usb 4-1: config 0 descriptor?? [ 156.792659][ T881] hub 4-1:0.0: USB hub found [ 156.981930][ T881] hub 4-1:0.0: 1 port detected [ 157.183857][ T881] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 157.183886][ T881] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 157.239890][ T881] usbhid 4-1:0.0: can't add hid device: -71 [ 157.239983][ T881] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 157.303049][ T881] usb 4-1: USB disconnect, device number 5 [ 159.432736][ T157] wlan1: Trigger new scan to find an IBSS to join [ 160.497315][ T6940] binder: 6937:6940 ioctl c0306201 0 returned -14 [ 160.497931][ T6940] binder: 6937:6940 ioctl c0306201 2000000003c0 returned -11 [ 161.024259][ T12] wlan1: Creating new IBSS network, BSSID de:fb:04:8d:4d:4c [ 164.051694][ T6974] ======================================================= [ 164.051694][ T6974] WARNING: The mand mount option has been deprecated and [ 164.051694][ T6974] and is ignored by this kernel. Remove the mand [ 164.051694][ T6974] option from the mount to silence this warning. [ 164.051694][ T6974] ======================================================= [ 164.355261][ T6979] Bluetooth: MGMT ver 1.23 [ 164.757543][ T5796] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 164.784014][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'. [ 165.229952][ T7007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.316377][ T7043] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 166.730588][ T7043] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 167.089582][ T5784] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 167.208323][ T1245] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 167.238157][ T5784] usb 4-1: Using ep0 maxpacket: 32 [ 167.241829][ T5784] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 167.241857][ T5784] usb 4-1: config 0 has no interface number 0 [ 167.244308][ T5784] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 167.244337][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.244357][ T5784] usb 4-1: Product: syz [ 167.244373][ T5784] usb 4-1: Manufacturer: syz [ 167.244388][ T5784] usb 4-1: SerialNumber: syz [ 167.305519][ T5784] usb 4-1: config 0 descriptor?? [ 167.326727][ T5784] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 167.360498][ T1245] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 167.360526][ T1245] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.360548][ T1245] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 167.360606][ T1245] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 167.391746][ T1245] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 167.391778][ T1245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.391821][ T1245] usb 5-1: Product: syz [ 167.392012][ T1245] usb 5-1: Manufacturer: syz [ 167.392058][ T1245] usb 5-1: SerialNumber: syz [ 167.469226][ T1245] usb 5-1: config 0 descriptor?? [ 167.553444][ T5784] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 167.577378][ T5784] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 167.717706][ T1245] uvcvideo 5-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 167.717751][ T1245] uvcvideo 5-1:0.0: No valid video chain found. [ 167.950074][ T1245] usb 5-1: USB disconnect, device number 4 [ 167.990991][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 168.033724][ T36] usb 4-1: USB disconnect, device number 6 [ 168.109417][ T36] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 168.146891][ T36] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 168.147802][ T36] quatech2 4-1:0.51: device disconnected [ 169.918148][ T5784] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 170.068666][ T5784] usb 1-1: Using ep0 maxpacket: 8 [ 170.070503][ T5784] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 170.070523][ T5784] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 170.070536][ T5784] usb 1-1: config 179 has no interface number 0 [ 170.070568][ T5784] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 170.070585][ T5784] usb 1-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 170.070604][ T5784] usb 1-1: config 179 interface 65 has no altsetting 0 [ 170.070627][ T5784] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 170.070644][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.317752][ T7095] IPVS: length: 117 != 8 [ 170.325103][ T7095] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20004 [ 170.446184][ T7088] netlink: 'syz.0.449': attribute type 3 has an invalid length. [ 170.446208][ T7088] netlink: 666 bytes leftover after parsing attributes in process `syz.0.449'. [ 170.898365][ T5784] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 170.996646][ T10] usb 1-1: USB disconnect, device number 3 [ 171.048218][ T5784] usb 3-1: Using ep0 maxpacket: 16 [ 171.067695][ T5784] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 171.067723][ T5784] usb 3-1: config 0 has no interface number 0 [ 171.067767][ T5784] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.067792][ T5784] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.067831][ T5784] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 171.067876][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.177762][ T5784] usb 3-1: config 0 descriptor?? [ 171.632213][ T7103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.632802][ T7103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.867885][ T1245] usb 3-1: USB disconnect, device number 5 [ 172.143385][ T7139] IPv6: NLM_F_CREATE should be specified when creating new route [ 172.833820][ T7162] program syz.4.483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.048168][ T1245] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 174.188828][ T1245] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 174.188859][ T1245] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 174.188879][ T1245] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 174.188927][ T1245] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.206035][ T1245] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 174.206118][ T1245] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 174.206172][ T1245] usb 1-1: Product: syz [ 174.206211][ T1245] usb 1-1: Manufacturer: syz [ 174.285429][ T1245] cdc_wdm 1-1:1.0: skipping garbage [ 174.285452][ T1245] cdc_wdm 1-1:1.0: skipping garbage [ 174.285466][ T1245] cdc_wdm 1-1:1.0: skipping garbage [ 174.285501][ T1245] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 174.534966][ T5784] usb 1-1: USB disconnect, device number 4 [ 174.806475][ T7199] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 174.928247][ T5810] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.932361][ T5796] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 176.574810][ T7230] GUP no longer grows the stack in syz.2.511 (7230): 200000009000-20000000a000 (200000005000) [ 176.574879][ T7230] CPU: 1 UID: 0 PID: 7230 Comm: syz.2.511 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 176.574905][ T7230] Tainted: [L]=SOFTLOCKUP [ 176.574918][ T7230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 176.574935][ T7230] Call Trace: [ 176.574948][ T7230] [ 176.574960][ T7230] dump_stack_lvl+0xe8/0x150 [ 176.575010][ T7230] __get_user_pages+0x22b6/0x2800 [ 176.575052][ T7230] ? __gup_longterm_locked+0xc4e/0x1630 [ 176.575099][ T7230] __gup_longterm_locked+0xdcf/0x1630 [ 176.575163][ T7230] gup_fast_fallback+0x1cf1/0x2240 [ 176.575246][ T7230] ? __pfx_gup_fast_fallback+0x10/0x10 [ 176.575275][ T7230] ? futex_unqueue+0x22/0x240 [ 176.575307][ T7230] ? futex_unqueue+0x22/0x240 [ 176.575339][ T7230] ? is_valid_gup_args+0x11f/0x200 [ 176.575373][ T7230] ? get_user_pages_fast+0x4d/0xb0 [ 176.575406][ T7230] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 176.575441][ T7230] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 176.575478][ T7230] iov_iter_get_pages2+0x5e/0xa0 [ 176.575510][ T7230] __se_sys_vmsplice+0x7b6/0x14a0 [ 176.575557][ T7230] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 176.575594][ T7230] ? __pfx_futex_wait+0x10/0x10 [ 176.575633][ T7230] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 176.575720][ T7230] do_syscall_64+0x14d/0xf80 [ 176.575751][ T7230] ? trace_irq_disable+0x3b/0x150 [ 176.575777][ T7230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.575800][ T7230] ? clear_bhb_loop+0x40/0x90 [ 176.575827][ T7230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.575851][ T7230] RIP: 0033:0x7f4d9ad9c799 [ 176.575877][ T7230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.575895][ T7230] RSP: 002b:00007f4d98fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 176.575927][ T7230] RAX: ffffffffffffffda RBX: 00007f4d9b015fa0 RCX: 00007f4d9ad9c799 [ 176.575944][ T7230] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000004 [ 176.575957][ T7230] RBP: 00007f4d9ae32c99 R08: 0000000000000000 R09: 0000000000000000 [ 176.575970][ T7230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.575981][ T7230] R13: 00007f4d9b016038 R14: 00007f4d9b015fa0 R15: 00007ffcfed359d8 [ 176.576015][ T7230] [ 176.999255][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 177.492767][ T7260] netlink: 104 bytes leftover after parsing attributes in process `syz.3.522'. [ 178.481198][ T7289] sch_fq: defrate 7 ignored. [ 179.013814][ T7294] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 179.014041][ T7294] syzkaller0: linktype set to 1 [ 179.768006][ T37] audit: type=1326 audit(1773194299.447:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7333 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2870cfc799 code=0x7ffc0000 [ 179.774233][ T37] audit: type=1326 audit(1773194299.447:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7333 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2870cfc799 code=0x7ffc0000 [ 179.971551][ T37] audit: type=1326 audit(1773194299.527:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7333 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2870cfc799 code=0x7ffc0000 [ 179.971607][ T37] audit: type=1326 audit(1773194299.657:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7333 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2870cfc799 code=0x7ffc0000 [ 179.971654][ T37] audit: type=1326 audit(1773194299.657:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7333 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2870cfc799 code=0x7ffc0000 [ 179.971703][ T37] audit: type=1326 audit(1773194299.657:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7333 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2870cfc799 code=0x7ffc0000 [ 179.972931][ T37] audit: type=1326 audit(1773194299.657:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7333 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2870cfc799 code=0x7ffc0000 [ 179.972985][ T37] audit: type=1326 audit(1773194299.657:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7333 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2870cfc799 code=0x7ffc0000 [ 179.973033][ T37] audit: type=1326 audit(1773194299.657:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7333 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f2870cfc799 code=0x7ffc0000 [ 179.973080][ T37] audit: type=1326 audit(1773194299.657:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7333 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2870cfc799 code=0x7ffc0000 [ 180.616208][ T10] hid-generic 000A:0004:0009.0004: unknown main item tag 0x0 [ 180.616259][ T10] hid-generic 000A:0004:0009.0004: unknown main item tag 0x0 [ 180.616286][ T10] hid-generic 000A:0004:0009.0004: unknown main item tag 0x0 [ 180.616320][ T10] hid-generic 000A:0004:0009.0004: unknown main item tag 0x0 [ 180.616347][ T10] hid-generic 000A:0004:0009.0004: unknown main item tag 0x0 [ 180.616374][ T10] hid-generic 000A:0004:0009.0004: unknown main item tag 0x0 [ 180.616400][ T10] hid-generic 000A:0004:0009.0004: unknown main item tag 0x0 [ 180.616427][ T10] hid-generic 000A:0004:0009.0004: unknown main item tag 0x0 [ 180.616454][ T10] hid-generic 000A:0004:0009.0004: unknown main item tag 0x0 [ 180.616480][ T10] hid-generic 000A:0004:0009.0004: unknown main item tag 0x0 [ 180.714956][ T10] hid-generic 000A:0004:0009.0004: hidraw0: HID v0.04 Device [syz1] on syz0 [ 181.009630][ T7352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.546'. [ 181.212548][ T7346] fido_id[7346]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 181.530646][ T7364] sch_fq: defrate 7 ignored. [ 185.439691][ T7464] Illegal XDP return value 4294967274 on prog (id 45) dev N/A, expect packet loss! [ 187.167101][ T7490] pim6reg: tun_chr_ioctl cmd 3223385353 [ 189.703049][ T7540] netlink: 27 bytes leftover after parsing attributes in process `syz.2.607'. [ 190.555443][ T7557] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.922218][ T7557] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.079889][ T1369] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 191.869241][ T7557] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.492461][ T7557] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.808277][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.646'. [ 193.808326][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.646'. [ 193.808342][ T7627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.646'. [ 194.015241][ T1396] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.210455][ T6295] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.245865][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 194.245897][ T37] audit: type=1326 audit(1773194313.927:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7638 comm="syz.2.651" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d9ad9c799 code=0x0 [ 194.324586][ T6303] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.363353][ T6303] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.458275][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.458348][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.577708][ T37] audit: type=1326 audit(1773194314.257:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbe57c799 code=0x7ffc0000 [ 194.601371][ T37] audit: type=1326 audit(1773194314.287:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbe57c799 code=0x7ffc0000 [ 194.629853][ T37] audit: type=1326 audit(1773194314.317:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5fbe57c799 code=0x7ffc0000 [ 194.630195][ T37] audit: type=1326 audit(1773194314.317:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbe57c799 code=0x7ffc0000 [ 194.634136][ T37] audit: type=1326 audit(1773194314.317:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5fbe57c799 code=0x7ffc0000 [ 194.634191][ T37] audit: type=1326 audit(1773194314.317:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbe57c799 code=0x7ffc0000 [ 194.673267][ T37] audit: type=1326 audit(1773194314.317:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbe57c799 code=0x7ffc0000 [ 194.673413][ T37] audit: type=1326 audit(1773194314.357:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5fbe57c799 code=0x7ffc0000 [ 194.740175][ T37] audit: type=1326 audit(1773194314.387:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbe57c799 code=0x7ffc0000 [ 195.329643][ T7679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.667'. [ 195.944328][ T7690] bond1: option mode: invalid value (70) [ 196.041685][ T7690] bond1 (unregistering): Released all slaves [ 196.408292][ T1245] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 196.564705][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.685'. [ 196.568284][ T1245] usb 4-1: Using ep0 maxpacket: 16 [ 196.589879][ T1245] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 196.589936][ T1245] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 196.589970][ T1245] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 196.589995][ T1245] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 196.590016][ T1245] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 196.590037][ T1245] usb 4-1: config 1 interface 0 has no altsetting 0 [ 196.590066][ T1245] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 196.590089][ T1245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.772390][ T1245] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 196.897564][ T7726] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.897698][ T7726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.937747][ T1245] scsi host1: usb-storage 4-1:1.0 [ 197.126272][ T881] usb 4-1: USB disconnect, device number 7 [ 197.716419][ T7751] process 'syz.2.697' launched './file2' with NULL argv: empty string added [ 199.942193][ T7811] netlink: 44 bytes leftover after parsing attributes in process `syz.3.724'. [ 200.682344][ T7805] syz.2.721 (7805) used greatest stack depth: 18592 bytes left [ 200.998984][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 201.860422][ T7844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.736'. [ 201.862289][ T7842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.735'. [ 202.109777][ T7849] netlink: 'syz.0.738': attribute type 8 has an invalid length. [ 203.421116][ T7884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.751'. [ 203.661816][ T5782] kernel read not supported for file /dsp1 (pid: 5782 comm: kworker/0:3) [ 208.066503][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'. [ 208.066541][ T7919] netlink: 'syz.3.766': attribute type 30 has an invalid length. [ 208.133597][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'. [ 208.133635][ T7921] netlink: 'syz.3.766': attribute type 30 has an invalid length. [ 208.269962][ T6290] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.276051][ T6290] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.276103][ T6290] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.276143][ T6290] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.316219][ T7948] team0: Device gtp0 is of different type [ 213.032109][ T7993] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 213.248187][ T1245] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 214.228209][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 214.484148][ T1245] usb 2-1: Using ep0 maxpacket: 32 [ 214.574462][ T1245] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 214.574496][ T1245] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.599506][ T1245] usb 2-1: config 0 descriptor?? [ 214.602084][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 214.602113][ T10] usb 5-1: config 0 has no interface number 0 [ 214.602159][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.602186][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.602226][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 214.602251][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.097562][ T10] usb 5-1: config 0 descriptor?? [ 215.478858][ T1245] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 215.524143][ T1245] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 215.524209][ T1245] dib0700: firmware download failed at 7 with -22 [ 215.552402][ T1245] usb 2-1: USB disconnect, device number 3 [ 215.581234][ T8030] bpf: Bad value for 'uid' [ 215.624679][ T10] prodikeys 0003:041E:2801.0005: item fetching failed at offset 5/7 [ 215.625490][ T10] prodikeys 0003:041E:2801.0005: hid parse failed [ 215.625601][ T10] prodikeys 0003:041E:2801.0005: probe with driver prodikeys failed with error -22 [ 215.759462][ T10] usb 5-1: USB disconnect, device number 5 [ 217.991040][ T8059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.435204][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 222.435334][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 222.435367][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 222.435397][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 222.435477][ T5808] Bluetooth: hci3: command 0x0406 tx timeout [ 228.338258][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 228.498316][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 228.500730][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.500763][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.500787][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 228.500821][ T10] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 228.500846][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.581501][ T10] usb 2-1: config 0 descriptor?? [ 229.081584][ T10] hid_parser_main: 7 callbacks suppressed [ 229.081609][ T10] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 229.081642][ T10] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 229.081669][ T10] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 229.081696][ T10] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 229.081722][ T10] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 229.081758][ T10] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 229.081785][ T10] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 229.081813][ T10] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 229.081840][ T10] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 229.081868][ T10] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 229.084121][ T10] cougar 0003:060B:500A.0006: unexpected long global item [ 229.084950][ T10] cougar 0003:060B:500A.0006: parse failed [ 229.085059][ T10] cougar 0003:060B:500A.0006: probe with driver cougar failed with error -22 [ 229.228261][ T10] usb 2-1: USB disconnect, device number 4 [ 229.623331][ T8146] netlink: 40 bytes leftover after parsing attributes in process `syz.4.857'. [ 232.350121][ T8205] netlink: 268 bytes leftover after parsing attributes in process `syz.2.882'. [ 232.879978][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.885'. [ 233.063342][ T8217] veth0_macvtap: left promiscuous mode [ 234.248169][ T5114] Bluetooth: hci0: command 0x0c1a tx timeout [ 234.248223][ T5803] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 235.213293][ T8234] input: syz1 as /devices/virtual/input/input8 [ 235.899726][ T8249] pim6reg1: entered promiscuous mode [ 235.899755][ T8249] pim6reg1: entered allmulticast mode [ 236.471719][ T8262] sch_fq: defrate 7 ignored. [ 236.671747][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'. [ 237.164134][ T8316] ptrace attach of "./syz-executor exec"[5801] was attempted by " \x0c     \x07 t %  4p     \x09  phy6  .  D  @ <  8 \x0d   \x09        \x09  \x0a  \x0b  \x0c     \x07 < %  4p     \x09  phy6  .  \x0c     H %  4p     \x09  phy6  .         ~       \x0c \x07   l\x09  \x0c      \x0a  x@          \x07 \x0d \x09 ?7 \x0a \x0a  \x0b  \x0c     \x09 \x0a  x@          \x07 \x0d \x09 ?7 \x0a \x0a  \x0b X     \x07 \x0a  p@        d  \x0c   < \x0c    Z \x0c    x \x0c    \x0c    \x0c    h \x0c     \x0c \x07    h %  4p     \x09  phy6  .  [ 237.988137][ T6440] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 238.161321][ T6440] usb 4-1: Using ep0 maxpacket: 8 [ 238.163902][ T6440] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 238.164020][ T6440] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.164046][ T6440] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.164072][ T6440] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.164097][ T6440] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.164143][ T6440] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 238.164167][ T6440] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.468169][ T6440] usb 4-1: usb_control_msg returned -32 [ 238.468234][ T6440] usbtmc 4-1:16.0: can't read capabilities [ 238.505989][ T8347] sch_fq: defrate 7 ignored. [ 238.837869][ T8358] usbtmc 4-1:16.0: stb usb_control_msg returned -32 [ 238.859071][ T10] usb 4-1: USB disconnect, device number 8 [ 239.740314][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.933'. [ 240.691814][ T8420] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 240.719970][ T8423] netlink: 172 bytes leftover after parsing attributes in process `syz.1.942'. [ 240.725998][ T5784] IPVS: starting estimator thread 0... [ 240.765634][ T8423] netlink: 172 bytes leftover after parsing attributes in process `syz.1.942'. [ 240.808503][ T8425] IPVS: using max 11 ests per chain, 26400 per kthread [ 241.888163][ T5803] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 241.888219][ T5114] Bluetooth: hci5: command 0x1003 tx timeout [ 242.048271][ T5984] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 242.227480][ T5984] usb 4-1: Using ep0 maxpacket: 8 [ 242.234979][ T5984] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 242.235010][ T5984] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 242.235037][ T5984] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 242.235062][ T5984] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.235107][ T5984] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 242.235131][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.583457][ T5984] usb 4-1: GET_CAPABILITIES returned 0 [ 242.583506][ T5984] usbtmc 4-1:16.0: can't read capabilities [ 242.812443][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.814857][ T881] usb 4-1: USB disconnect, device number 9 [ 243.184960][ T8474] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.962'. [ 243.205049][ T8474] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.962'. [ 243.437112][ T8476] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 244.449935][ T8507] netlink: 7 bytes leftover after parsing attributes in process `syz.3.977'. [ 245.078148][ T5984] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 245.138177][ T5784] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 245.230186][ T5984] usb 2-1: Using ep0 maxpacket: 16 [ 245.236949][ T5984] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 245.236981][ T5984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.237001][ T5984] usb 2-1: Product: syz [ 245.237016][ T5984] usb 2-1: Manufacturer: syz [ 245.237031][ T5984] usb 2-1: SerialNumber: syz [ 245.297639][ T5784] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.297730][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 245.297760][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 245.297788][ T5784] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.297831][ T5784] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.297906][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.486025][ T5784] usb 3-1: config 0 descriptor?? [ 245.497714][ T8520] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 245.593707][ T5984] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 245.870519][ T5984] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 245.874516][ T5984] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 245.874736][ T5984] usb 2-1: media controller created [ 245.942858][ T5784] hid_parser_main: 190 callbacks suppressed [ 245.942885][ T5784] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 245.942920][ T5784] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 245.942950][ T5784] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 245.942977][ T5784] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 245.943006][ T5784] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 245.943034][ T5784] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 245.943061][ T5784] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 245.943088][ T5784] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 245.943116][ T5784] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 245.943142][ T5784] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 246.126547][ T5984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.297823][ T6295] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 246.341683][ T5784] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 246.390215][ T5984] zl10353_read_register: readreg error (reg=127, ret==-71) [ 246.418990][ T5784] usb 3-1: USB disconnect, device number 6 [ 246.525468][ T8546] fido_id[8546]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 246.701248][ T5984] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 246.729362][ T5984] usb 2-1: USB disconnect, device number 5 [ 247.585342][ T8579] can0: slcan on pty20. [ 247.786879][ T8587] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 248.481768][ T8573] can0 (unregistered): slcan off pty20. [ 248.680200][ T8622] netlink: 'syz.0.1022': attribute type 12 has an invalid length. [ 248.680225][ T8622] netlink: 'syz.0.1022': attribute type 29 has an invalid length. [ 248.680240][ T8622] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1022'. [ 248.680277][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 251.036291][ T8691] input: syz0 as /devices/virtual/input/input9 [ 251.722143][ T8698] trusted_key: syz.2.1048 sent an empty control message without MSG_MORE. [ 252.256613][ T6440] kernel write not supported for file bpf-prog (pid: 6440 comm: kworker/1:7) [ 252.813562][ T8717] loop8: detected capacity change from 0 to 8 [ 252.944205][ T8717] Dev loop8: unable to read RDB block 8 [ 252.944263][ T8717] loop8: unable to read partition table [ 252.944498][ T8717] loop8: partition table beyond EOD, truncated [ 252.944536][ T8717] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 253.121796][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1060'. [ 253.614383][ T8733] sock: sock_timestamping_bind_phc: sock not bind to device [ 253.653833][ T8733] IPv6: addrconf: prefix option has invalid lifetime [ 253.653850][ T8733] IPv6: addrconf: prefix option has invalid lifetime [ 255.468229][ T5984] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 255.639851][ T5984] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.639943][ T5984] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.639989][ T5984] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 255.640016][ T5984] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.644633][ T5984] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.644664][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.644685][ T5984] usb 4-1: Product: syz [ 255.644701][ T5984] usb 4-1: Manufacturer: syz [ 255.644716][ T5984] usb 4-1: SerialNumber: syz [ 255.752082][ T5984] cdc_mbim 4-1:1.0: skipping garbage [ 255.898777][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.899756][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.967186][ T8761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 256.225033][ T8783] syzkaller1: entered promiscuous mode [ 256.225063][ T8783] syzkaller1: entered allmulticast mode [ 256.290728][ T8787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.589641][ T8761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 256.768139][ T1245] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 256.790851][ T5984] cdc_mbim 4-1:1.0: bind() failure [ 256.831299][ T5984] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 256.832251][ T5984] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 256.834012][ T5984] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 256.874713][ T5984] usb 4-1: USB disconnect, device number 10 [ 256.959368][ T1245] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.959423][ T1245] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 256.959441][ T1245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.964333][ T1245] usb 1-1: config 0 descriptor?? [ 257.405063][ T1245] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 257.491465][ T1245] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0008/input/input10 [ 257.551081][ T8811] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1097'. [ 258.054417][ T1245] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 258.078549][ T1245] usb 1-1: USB disconnect, device number 5 [ 258.393467][ T8824] fido_id[8824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 258.589887][ T8833] 9p: Invalid gid '0x00000000ffffffff' [ 259.273797][ T8859] input: syz0 as /devices/virtual/input/input11 [ 259.591127][ T8864] ALSA: seq fatal error: cannot create timer (-19) [ 260.030242][ T1245] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 260.178250][ T1245] usb 3-1: Using ep0 maxpacket: 16 [ 260.180837][ T1245] usb 3-1: unable to get BOS descriptor or descriptor too short [ 260.182588][ T1245] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.185159][ T1245] usb 3-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 260.185188][ T1245] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.185209][ T1245] usb 3-1: Product: syz [ 260.185226][ T1245] usb 3-1: Manufacturer: syz [ 260.185389][ T1245] usb 3-1: SerialNumber: syz [ 260.815961][ T1245] usb 3-1: unit 2 not found! [ 260.950087][ T1245] usb 3-1: can't set first interface for hiFace device. [ 260.950131][ T1245] snd-usb-hiface 3-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 260.979041][ T1245] usb 3-1: can't set first interface for hiFace device. [ 260.979079][ T1245] snd-usb-hiface 3-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 260.982218][ T1245] usb 3-1: USB disconnect, device number 7 [ 261.096401][ T6449] udevd[6449]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.462838][ T8906] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1135'. [ 262.320972][ T8932] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1146'. [ 262.858418][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1149'. [ 262.910394][ T8947] sctp: [Deprecated]: syz.1.1153 (pid 8947) Use of int in max_burst socket option deprecated. [ 262.910394][ T8947] Use struct sctp_assoc_value instead [ 263.186658][ T8955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1148'. [ 264.398149][ T1245] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 264.558270][ T1245] usb 2-1: Using ep0 maxpacket: 32 [ 264.578598][ T1245] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 264.578631][ T1245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.578651][ T1245] usb 2-1: Product: syz [ 264.578667][ T1245] usb 2-1: Manufacturer: syz [ 264.578681][ T1245] usb 2-1: SerialNumber: syz [ 264.626522][ T1245] usb 2-1: config 0 descriptor?? [ 264.673537][ T1245] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 264.738187][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 264.902978][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.903015][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.903039][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.903085][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.903110][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.916493][ T10] usb 5-1: config 0 descriptor?? [ 265.183763][ T9002] batadv_slave_1: entered promiscuous mode [ 265.186581][ T9001] batadv_slave_1: left promiscuous mode [ 265.263591][ T1245] gspca_ov534_9: reg_w failed -71 [ 265.349628][ T10] hid_parser_main: 5 callbacks suppressed [ 265.349653][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 265.349685][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 265.349711][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 265.349738][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 265.349765][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 265.349792][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 265.349820][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 265.349846][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 265.349872][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 265.349900][ T10] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 265.452340][ T10] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 265.614798][ T36] usb 5-1: USB disconnect, device number 6 [ 265.628141][ T1245] gspca_ov534_9: Unknown sensor 0000 [ 265.628234][ T1245] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 265.677590][ T1245] usb 2-1: USB disconnect, device number 6 [ 266.178526][ T36] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 266.321355][ T9022] tap0: tun_chr_ioctl cmd 1074025675 [ 266.321381][ T9022] tap0: persist disabled [ 266.322284][ T9022] tap0: tun_chr_ioctl cmd 1074025675 [ 266.322303][ T9022] tap0: persist disabled [ 266.338107][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 266.344170][ T36] usb 1-1: config 139 has an invalid interface number: 49 but max is 0 [ 266.344200][ T36] usb 1-1: config 139 has no interface number 0 [ 266.344234][ T36] usb 1-1: config 139 interface 49 has no altsetting 0 [ 266.379291][ T36] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 266.379322][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.379343][ T36] usb 1-1: Product: syz [ 266.379358][ T36] usb 1-1: Manufacturer: syz [ 266.379372][ T36] usb 1-1: SerialNumber: syz [ 266.803057][ T36] radio-usb-si4713 1-1:139.49: Si4713 development board discovered: (10C4:8244) [ 267.429206][ T36] radio-usb-si4713 1-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 267.429666][ T36] usbhid 1-1:139.49: couldn't find an input interrupt endpoint [ 267.478152][ T36] usb 1-1: USB disconnect, device number 6 [ 269.011142][ T9076] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1208'. [ 269.011229][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1208'. [ 269.011246][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 269.089183][ T9074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1207'. [ 269.474724][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 269.474756][ T9086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1214'. [ 269.477010][ T37] kauditd_printk_skb: 25 callbacks suppressed [ 269.477027][ T37] audit: type=1326 audit(1773194641.154:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9083 comm="syz.3.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbe57c799 code=0x7ffc0000 [ 269.477871][ T37] audit: type=1326 audit(1773194641.154:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9083 comm="syz.3.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5fbe57c799 code=0x7ffc0000 [ 269.557128][ T37] audit: type=1326 audit(1773194641.234:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9083 comm="syz.3.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbe57c799 code=0x7ffc0000 [ 269.557182][ T37] audit: type=1326 audit(1773194641.234:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9083 comm="syz.3.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbe57c799 code=0x7ffc0000 [ 270.903175][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1236'. [ 271.336401][ T9136] nbd: socks must be embedded in a SOCK_ITEM attr [ 271.599742][ T9158] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1244'. [ 271.599776][ T9158] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1244'. [ 271.600348][ T9158] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 272.094830][ T6449] udevd[6449]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 272.806274][ T9183] input: syz1 as /devices/virtual/input/input12 [ 272.818129][ T36] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 272.988119][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 272.991307][ T36] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.991331][ T36] usb 1-1: config 0 has no interface number 0 [ 272.991369][ T36] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 272.991390][ T36] usb 1-1: config 0 interface 1 has no altsetting 0 [ 272.994629][ T36] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 272.994657][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.994754][ T36] usb 1-1: Product: syz [ 272.994769][ T36] usb 1-1: Manufacturer: syz [ 272.994783][ T36] usb 1-1: SerialNumber: syz [ 273.083676][ T36] usb 1-1: config 0 descriptor?? [ 273.327611][ T36] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 273.353408][ T36] cx231xx 1-1:0.1: Failed to read PCB config [ 273.353488][ T36] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 273.372787][ T36] usb 1-1: USB disconnect, device number 7 [ 273.783322][ T9201] netlink: 36752 bytes leftover after parsing attributes in process `syz.2.1264'. [ 273.809483][ T36] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 273.968262][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 273.974321][ T36] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 273.974348][ T36] usb 1-1: config 0 has no interface number 0 [ 273.974394][ T36] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 273.974417][ T36] usb 1-1: config 0 interface 1 has no altsetting 0 [ 273.977476][ T36] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 273.977507][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.977589][ T36] usb 1-1: Product: syz [ 273.977605][ T36] usb 1-1: Manufacturer: syz [ 273.977619][ T36] usb 1-1: SerialNumber: syz [ 274.066230][ T36] usb 1-1: config 0 descriptor?? [ 274.408193][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 274.431617][ T36] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 274.921685][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 274.921736][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.967906][ T10] usb 3-1: config 0 descriptor?? [ 274.988322][ T10] cp210x 3-1:0.0: cp210x converter detected [ 275.205736][ T36] cx231xx 1-1:0.1: Failed to read PCB config [ 275.205829][ T36] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 275.219679][ T36] usb 1-1: USB disconnect, device number 8 [ 275.367516][ T9195] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.512883][ T10] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 275.514460][ T10] cp210x 3-1:0.0: GPIO initialisation failed: -524 [ 275.542385][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 275.724306][ T36] usb 3-1: USB disconnect, device number 8 [ 275.737067][ T36] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 275.737856][ T36] cp210x 3-1:0.0: device disconnected [ 275.794127][ T9195] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.158186][ T9195] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.610486][ T9195] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.776363][ T9242] sch_fq: defrate 7 ignored. [ 277.057431][ T3516] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.203657][ T6297] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.484741][ T6303] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.484791][ T6303] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.653476][ T6440] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 277.818286][ T6440] usb 1-1: Using ep0 maxpacket: 32 [ 277.845743][ T6440] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 277.845775][ T6440] usb 1-1: config 0 has no interface number 0 [ 277.845822][ T6440] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 277.845850][ T6440] usb 1-1: config 0 interface 85 has no altsetting 0 [ 277.884572][ T6440] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 277.884605][ T6440] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.884625][ T6440] usb 1-1: Product: syz [ 277.884639][ T6440] usb 1-1: Manufacturer: syz [ 277.884654][ T6440] usb 1-1: SerialNumber: syz [ 277.964130][ T6440] usb 1-1: config 0 descriptor?? [ 278.300660][ T6304] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 278.596926][ T6440] appletouch 1-1:0.85: Geyser mode initialized. [ 278.605655][ T6440] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input13 [ 278.858363][ T6440] usb 1-1: USB disconnect, device number 9 [ 278.978230][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 279.068615][ T6440] appletouch 1-1:0.85: input: appletouch disconnected [ 279.130318][ T10] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 279.132326][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.132382][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.132411][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 279.135265][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.135322][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.135351][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 279.146509][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.146566][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.146594][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 279.168466][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.168540][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.168577][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 279.198133][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.198188][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.198215][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 279.236333][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.236395][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.236423][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 279.288667][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.288726][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.288755][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 279.320022][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.320085][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.320115][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 279.371787][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 279.371818][ T10] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 279.371840][ T10] usb 5-1: Product: syz [ 279.371856][ T10] usb 5-1: Manufacturer: syz [ 279.371871][ T10] usb 5-1: SerialNumber: syz [ 279.421109][ T10] usb 5-1: config 0 descriptor?? [ 279.458972][ T10] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 279.693996][ T5984] usb 5-1: USB disconnect, device number 7 [ 279.713405][ T5984] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 281.866317][ T9369] netlink: 'syz.1.1306': attribute type 4 has an invalid length. [ 281.923268][ T9371] netlink: 'syz.1.1306': attribute type 4 has an invalid length. [ 283.143595][ T6295] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x8 [ 283.323534][ T9406] netlink: 'syz.3.1319': attribute type 1 has an invalid length. [ 283.396957][ T9406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 283.527220][ T9408] bond1: (slave ip6erspan0): making interface the new active one [ 283.542560][ T9408] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 283.858358][ T9423] netlink: 'syz.3.1325': attribute type 1 has an invalid length. [ 283.915182][ T9423] bond2: entered promiscuous mode [ 283.923999][ T9423] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.991287][ T9426] 8021q: adding VLAN 0 to HW filter on device bond3 [ 284.006154][ T9426] bond2: (slave bond3): making interface the new active one [ 284.015538][ T9426] bond3: entered promiscuous mode [ 284.016774][ T9426] bond2: (slave bond3): Enslaving as an active interface with an up link [ 286.759296][ T9483] netlink: 'syz.3.1349': attribute type 12 has an invalid length. [ 286.759320][ T9483] netlink: 'syz.3.1349': attribute type 29 has an invalid length. [ 286.759336][ T9483] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1349'. [ 286.759362][ T9483] netlink: 'syz.3.1349': attribute type 1 has an invalid length. [ 286.759376][ T9483] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1349'. [ 288.618149][ T5984] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 288.768726][ T5984] usb 4-1: Using ep0 maxpacket: 8 [ 288.771368][ T5984] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 288.771427][ T5984] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 288.771455][ T5984] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 288.771481][ T5984] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 288.771509][ T5984] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 288.771533][ T5984] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.771578][ T5984] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 288.771601][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.098525][ T5984] usb 4-1: usb_control_msg returned -32 [ 289.098577][ T5984] usbtmc 4-1:16.0: can't read capabilities [ 289.473741][ T9547] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -71 [ 289.474512][ T9547] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 289.480195][ T5984] usb 4-1: USB disconnect, device number 11 [ 289.712822][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1378'. [ 289.712903][ T9554] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 290.466417][ T9576] netlink: 'syz.4.1389': attribute type 3 has an invalid length. [ 291.717777][ T9596] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1397'. [ 292.357324][ T37] audit: type=1326 audit(1773194664.034:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.3.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbe57c799 code=0x7fc00000 [ 292.461496][ T5984] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 292.630447][ T5984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 292.630503][ T5984] usb 2-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 292.630528][ T5984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.712497][ T5984] usb 2-1: config 0 descriptor?? [ 292.713647][ T9611] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 292.782376][ T9620] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 293.211346][ T5984] hid_parser_main: 5 callbacks suppressed [ 293.211373][ T5984] magicmouse 0003:05AC:0324.000A: unknown main item tag 0x0 [ 293.211407][ T5984] magicmouse 0003:05AC:0324.000A: unknown main item tag 0x0 [ 293.211436][ T5984] magicmouse 0003:05AC:0324.000A: unknown main item tag 0x0 [ 293.211463][ T5984] magicmouse 0003:05AC:0324.000A: unknown main item tag 0x0 [ 293.211490][ T5984] magicmouse 0003:05AC:0324.000A: unknown main item tag 0x0 [ 293.211517][ T5984] magicmouse 0003:05AC:0324.000A: unknown main item tag 0x0 [ 293.211544][ T5984] magicmouse 0003:05AC:0324.000A: unknown main item tag 0x0 [ 293.211569][ T5984] magicmouse 0003:05AC:0324.000A: unknown main item tag 0x0 [ 293.211597][ T5984] magicmouse 0003:05AC:0324.000A: unknown main item tag 0x0 [ 293.211624][ T5984] magicmouse 0003:05AC:0324.000A: unknown main item tag 0x0 [ 293.214970][ T5984] magicmouse 0003:05AC:0324.000A: unexpected long global item [ 293.215800][ T5984] magicmouse 0003:05AC:0324.000A: magicmouse hid parse failed [ 293.215909][ T5984] magicmouse 0003:05AC:0324.000A: probe with driver magicmouse failed with error -22 [ 293.396884][ T5984] usb 2-1: USB disconnect, device number 7 [ 294.268451][ T36] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 294.418123][ T36] usb 3-1: Using ep0 maxpacket: 16 [ 294.420093][ T36] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.420127][ T36] usb 3-1: config 0 interface 0 has no altsetting 0 [ 294.420172][ T36] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 294.420197][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.448545][ T1245] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 294.488302][ T36] usb 3-1: config 0 descriptor?? [ 294.618235][ T1245] usb 5-1: Using ep0 maxpacket: 8 [ 294.626195][ T1245] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 294.626257][ T1245] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.626342][ T1245] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.626369][ T1245] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.626394][ T1245] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.626439][ T1245] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 294.626519][ T1245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.952694][ T1245] usb 5-1: usb_control_msg returned -32 [ 294.952730][ T1245] usbtmc 5-1:16.0: can't read capabilities [ 295.001446][ T36] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 295.402065][ T5784] usb 3-1: USB disconnect, device number 9 [ 295.588559][ T9674] veth0: entered promiscuous mode [ 295.630140][ T9673] veth0: left promiscuous mode [ 295.690082][ T9677] usbtmc 5-1:16.0: CHECK_CLEAR_STATUS returned 4 [ 295.894938][ T6440] usb 5-1: USB disconnect, device number 8 [ 295.949016][ T9688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1434'. [ 295.956766][ T9688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1434'. [ 298.758513][ T9741] kvm: user requested TSC rate below hardware speed [ 300.361015][ T37] audit: type=1326 audit(1773194672.014:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9774 comm="syz.3.1470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fbe57c799 code=0x0 [ 303.799349][ T6440] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 303.999355][ T6440] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.999393][ T6440] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.999435][ T6440] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 303.999459][ T6440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.161940][ T6440] usb 5-1: config 0 descriptor?? [ 304.820850][ T9855] binder: 9853:9855 ioctl c0306201 0 returned -14 [ 305.279928][ T6440] hid_parser_main: 307 callbacks suppressed [ 305.279951][ T6440] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 305.312486][ T6440] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 305.488845][ T6440] cp2112 0003:10C4:EA90.000C: Part Number: 0x82 Device Version: 0xFE [ 305.839051][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1507'. [ 305.866100][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1507'. [ 305.919469][ T9871] syz.3.1505 (9871) used greatest stack depth: 18368 bytes left [ 306.052602][ T881] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 306.284878][ T881] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 306.284912][ T881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.366999][ T881] usb 1-1: config 0 descriptor?? [ 307.018146][ T5984] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 307.171073][ T5984] usb 3-1: Using ep0 maxpacket: 8 [ 307.177527][ T5984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.177582][ T5984] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 307.177608][ T5984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.259427][ T5984] usb 3-1: config 0 descriptor?? [ 307.519445][ T5984] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 307.565402][ T9896] netlink: 'syz.3.1516': attribute type 11 has an invalid length. [ 307.566183][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1516'. [ 308.302087][ T5984] libceph: connect (1)[c::]:6789 error -101 [ 308.302757][ T5984] libceph: mon0 (1)[c::]:6789 connect error [ 308.326341][ T5984] libceph: connect (1)[c::]:6789 error -101 [ 308.326573][ T5984] libceph: mon0 (1)[c::]:6789 connect error [ 308.347894][ T9898] ceph: No mds server is up or the cluster is laggy [ 308.583439][ T5984] libceph: connect (1)[c::]:6789 error -101 [ 308.583658][ T5984] libceph: mon0 (1)[c::]:6789 connect error [ 308.753159][ T881] usb 1-1: Cannot set autoneg [ 308.753423][ T881] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 308.756442][ T36] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 308.845187][ T5900] usb 3-1: USB disconnect, device number 10 [ 308.853762][ T881] usb 1-1: USB disconnect, device number 10 [ 308.995136][ T36] usb 5-1: device firmware changed [ 309.103484][ T6440] usb 5-1: USB disconnect, device number 9 [ 309.738124][ T6440] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 309.902325][ T6440] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.902381][ T6440] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 309.902416][ T6440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.907488][ T6440] usb 5-1: config 0 descriptor?? [ 310.290588][ T68] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 310.293024][ T6440] usbhid 5-1:0.0: can't add hid device: -71 [ 310.293149][ T6440] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 310.330603][ T6440] usb 5-1: USB disconnect, device number 10 [ 310.618219][ T5900] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 310.776333][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.776371][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.776412][ T5900] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 310.776437][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.807500][ T5900] usb 4-1: config 0 descriptor?? [ 311.350562][ T5900] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 311.350602][ T5900] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 311.350630][ T5900] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 311.350657][ T5900] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 311.350683][ T5900] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 311.413369][ T5900] playstation 0003:054C:0DF2.000D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 311.546825][ T5900] playstation 0003:054C:0DF2.000D: Invalid reportID received, expected 9 got 32 [ 311.546861][ T5900] playstation 0003:054C:0DF2.000D: Failed to retrieve DualSense pairing info: -22 [ 311.546918][ T5900] playstation 0003:054C:0DF2.000D: Failed to get MAC address from DualSense [ 311.546940][ T5900] playstation 0003:054C:0DF2.000D: Failed to create dualsense. [ 311.627024][ T5900] playstation 0003:054C:0DF2.000D: probe with driver playstation failed with error -22 [ 311.746357][ T9939] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.858299][ T6440] usb 4-1: USB disconnect, device number 12 [ 312.336642][ T68] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.600212][ T68] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.681412][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 312.685257][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 312.686609][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 312.701047][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 312.705442][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.487520][ T68] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.874446][ T68] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.978293][ T5984] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 314.148171][ T5984] usb 2-1: Using ep0 maxpacket: 32 [ 314.151382][ T5984] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 314.151412][ T5984] usb 2-1: config 0 has no interface number 0 [ 314.151468][ T5984] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 314.193998][ T5984] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 314.194029][ T5984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.194048][ T5984] usb 2-1: Product: syz [ 314.194061][ T5984] usb 2-1: Manufacturer: syz [ 314.194075][ T5984] usb 2-1: SerialNumber: syz [ 314.257900][ T5984] usb 2-1: config 0 descriptor?? [ 314.264965][ T9976] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 314.470000][ T9976] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 314.862141][ T5114] Bluetooth: hci3: command tx timeout [ 314.965840][ T9985] netlink: 'syz.0.1548': attribute type 1 has an invalid length. [ 314.965863][ T9985] netlink: 'syz.0.1548': attribute type 4 has an invalid length. [ 314.965878][ T9985] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1548'. [ 315.488177][ T5984] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 315.488468][ T5984] asix 2-1:0.188: probe with driver asix failed with error -32 [ 315.530619][ T5984] usb 2-1: USB disconnect, device number 8 [ 315.757645][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1555'. [ 316.030273][ T68] bridge_slave_1: left allmulticast mode [ 316.030457][ T68] bridge_slave_1: left promiscuous mode [ 316.064444][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.121043][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1555'. [ 316.204883][ T68] bridge_slave_0: left allmulticast mode [ 316.204914][ T68] bridge_slave_0: left promiscuous mode [ 316.205831][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.835831][T10009] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 316.836120][T10009] block device autoloading is deprecated and will be removed. [ 316.928119][ T5114] Bluetooth: hci3: command tx timeout [ 317.337477][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.337554][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.638201][ T36] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 317.698953][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.758786][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.780503][ T68] bond0 (unregistering): Released all slaves [ 317.796022][ T36] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 317.796054][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.807382][ T36] usb 3-1: config 0 descriptor?? [ 317.831577][ T36] cp210x 3-1:0.0: cp210x converter detected [ 318.204247][T10020] bond_slave_0: entered promiscuous mode [ 318.204643][T10020] bond_slave_1: entered promiscuous mode [ 318.248978][T10020] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 318.253885][T10020] team0: Port device macvlan2 added [ 318.694245][T10050] netlink: 'syz.1.1567': attribute type 83 has an invalid length. [ 318.974826][ T36] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 318.974858][ T36] cp210x 3-1:0.0: querying part number failed [ 319.009489][ T5114] Bluetooth: hci3: command tx timeout [ 319.049837][ T36] usb 3-1: cp210x converter now attached to ttyUSB0 [ 319.057651][ T36] usb 3-1: USB disconnect, device number 11 [ 319.131932][ T36] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 319.133131][ T36] cp210x 3-1:0.0: device disconnected [ 320.380460][ T9961] chnl_net:caif_netlink_parms(): no params data found [ 321.088655][ T5114] Bluetooth: hci3: command tx timeout [ 321.308154][ T68] hsr_slave_0: left promiscuous mode [ 321.426083][ T68] hsr_slave_1: left promiscuous mode [ 321.427531][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.427647][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.512364][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.512394][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.197457][ T68] veth1_macvtap: left promiscuous mode [ 322.197709][ T68] veth0_macvtap: left promiscuous mode [ 322.210157][ T68] veth1_vlan: left promiscuous mode [ 324.025241][T10131] Device name cannot be null; rc = [-22] [ 324.963401][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1589'. [ 325.148116][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 325.300615][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 325.300652][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 325.300691][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 325.300715][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.394990][T10138] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 325.451146][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 325.823685][ T10] usb 1-1: USB disconnect, device number 11 [ 326.170314][ T68] team0 (unregistering): Port device team_slave_1 removed [ 326.372397][ T68] team0 (unregistering): Port device team_slave_0 removed [ 327.125733][ T5784] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 327.259729][ T5784] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 327.553765][ T5784] IPVS: starting estimator thread 0... [ 327.649867][T10166] IPVS: using max 11 ests per chain, 26400 per kthread [ 327.654656][T10140] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 327.864980][ T9961] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.865215][ T9961] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.865462][ T9961] bridge_slave_0: entered allmulticast mode [ 327.910042][ T9961] bridge_slave_0: entered promiscuous mode [ 327.966170][ T9961] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.966317][ T9961] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.966551][ T9961] bridge_slave_1: entered allmulticast mode [ 328.016382][ T9961] bridge_slave_1: entered promiscuous mode [ 328.163210][ T37] audit: type=1326 audit(1773194699.844:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c6edc799 code=0x7fc00000 [ 328.163268][ T37] audit: type=1326 audit(1773194699.844:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f13c6edc799 code=0x7fc00000 [ 328.163325][ T37] audit: type=1326 audit(1773194699.844:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c6edc799 code=0x7fc00000 [ 328.163370][ T37] audit: type=1326 audit(1773194699.844:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c6edc799 code=0x7fc00000 [ 328.163416][ T37] audit: type=1326 audit(1773194699.844:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c6edc799 code=0x7fc00000 [ 328.163460][ T37] audit: type=1326 audit(1773194699.844:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c6edc799 code=0x7fc00000 [ 328.163503][ T37] audit: type=1326 audit(1773194699.844:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c6edc799 code=0x7fc00000 [ 328.163549][ T37] audit: type=1326 audit(1773194699.844:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c6edc799 code=0x7fc00000 [ 328.163599][ T37] audit: type=1326 audit(1773194699.844:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c6edc799 code=0x7fc00000 [ 328.312945][ T37] audit: type=1326 audit(1773194699.844:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10170 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c6edc799 code=0x7fc00000 [ 328.568995][ T9961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.579860][ T9961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.951814][ T9961] team0: Port device team_slave_0 added [ 328.955559][ T9961] team0: Port device team_slave_1 added [ 329.158279][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.158299][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.158328][ T9961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.164041][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.164058][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.164087][ T9961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.580032][ T9961] hsr_slave_0: entered promiscuous mode [ 329.581399][ T9961] hsr_slave_1: entered promiscuous mode [ 329.582334][ T9961] debugfs: 'hsr0' already exists in 'hsr' [ 329.582360][ T9961] Cannot create hsr debugfs directory [ 329.856269][T10212] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1608'. [ 330.455029][ T68] IPVS: stop unused estimator thread 0... [ 330.918762][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1613'. [ 331.620170][T10239] team0: Port device team_slave_0 removed [ 333.146417][ T9961] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 333.272916][ T9961] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 333.448135][ T9961] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 333.580517][ T9961] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 334.008526][T10325] sch_fq: defrate 7 ignored. [ 334.259062][ T36] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 334.432051][ T36] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.432109][ T36] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 334.432131][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.497247][ T36] usb 4-1: config 0 descriptor?? [ 334.544151][ T36] pwc: Askey VC010 type 2 USB webcam detected. [ 334.812753][ C0] ================================================================== [ 334.812769][ C0] BUG: KASAN: null-ptr-deref in smc_tcp_syn_recv_sock+0x92/0x4b0 [ 334.812804][ C0] Read of size 4 at addr 0000000000000db4 by task syz.0.162[ 334.812804][ C0] Read of size 4 at addr 0000000000000db4 by task syz.0.1628/10339 [ 334.812822][ C0] [ 334.812838][ C0] CPU: 0 UID: 0 PID: 10339 Comm: syz.0.1628 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 334.812869][ C0] Tainted: [L]=SOFTLOCKUP [ 334.812877][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 334.812896][ C0] Call Trace: [ 334.812905][ C0] [ 334.812915][ C0] dump_stack_lvl+0xe8/0x150 [ 334.812952][ C0] ? smc_tcp_syn_recv_sock+0x92/0x4b0 [ 334.812977][ C0] kasan_report+0x117/0x150 [ 334.813015][ C0] ? smc_tcp_syn_recv_sock+0x92/0x4b0 [ 334.813046][ C0] kasan_check_range+0x264/0x2c0 [ 334.813070][ C0] smc_tcp_syn_recv_sock+0x92/0x4b0 [ 334.813100][ C0] tcp_check_req+0x1405/0x1f90 [ 334.813138][ C0] ? __pfx_tcp_check_req+0x10/0x10 [ 334.813165][ C0] ? sk_filter_trim_cap+0x1e1/0xd90 [ 334.813212][ C0] ? tcp_v4_fill_cb+0x3d/0x4c0 [ 334.813236][ C0] ? __kasan_check_write+0x20/0x20 [ 334.813266][ C0] ? tcp_v4_fill_cb+0x25c/0x4c0 [ 334.813291][ C0] tcp_v4_rcv+0x1786/0x31f0 [ 334.813334][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 334.813355][ C0] ? raw_local_deliver+0x30a/0xf40 [ 334.813383][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 334.813405][ C0] ip_protocol_deliver_rcu+0x221/0x440 [ 334.813441][ C0] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 334.813480][ C0] ip_local_deliver_finish+0x3bb/0x6f0 [ 334.813517][ C0] NF_HOOK+0x336/0x3c0 [ 334.813551][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 334.813585][ C0] ? NF_HOOK+0x9e/0x3c0 [ 334.813616][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 334.813647][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 334.813683][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 334.813719][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 334.813754][ C0] NF_HOOK+0x336/0x3c0 [ 334.813786][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 334.813819][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 334.813852][ C0] ? NF_HOOK+0x9e/0x3c0 [ 334.813880][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 334.813941][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 334.813979][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 334.814011][ C0] ? process_backlog+0x271/0xc60 [ 334.814037][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 334.814069][ C0] process_backlog+0x569/0xc60 [ 334.814095][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 334.814136][ C0] __napi_poll+0xaf/0x580 [ 334.814160][ C0] ? skb_defer_free_flush+0x233/0x260 [ 334.814193][ C0] net_rx_action+0x696/0xe00 [ 334.814229][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 334.814255][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 334.814290][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 334.814327][ C0] handle_softirqs+0x1de/0x6f0 [ 334.814366][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 334.814396][ C0] ? __dev_queue_xmit+0x27d/0x39b0 [ 334.814433][ C0] __dev_queue_xmit+0x1ebb/0x39b0 [ 334.814474][ C0] ? __dev_queue_xmit+0x27d/0x39b0 [ 334.814508][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 334.814538][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 334.814585][ C0] ? ip_output+0x29f/0x450 [ 334.814613][ C0] ? ip_finish_output2+0xacc/0x10b0 [ 334.814643][ C0] ? ip_finish_output2+0x3c2/0x10b0 [ 334.814671][ C0] ip_finish_output2+0xcab/0x10b0 [ 334.814699][ C0] ? ip_finish_output2+0x3c2/0x10b0 [ 334.814732][ C0] ip_output+0x29f/0x450 [ 334.814758][ C0] ? ip_output+0x5b/0x450 [ 334.814781][ C0] ? __ip_queue_xmit+0x5c/0x1bb0 [ 334.814806][ C0] __ip_queue_xmit+0x116a/0x1bb0 [ 334.814833][ C0] ? csum_tcpudp_nofold+0x1f/0x60 [ 334.814865][ C0] ? __ip_queue_xmit+0x5c/0x1bb0 [ 334.814891][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 334.814916][ C0] __tcp_transmit_skb+0x2b30/0x43e0 [ 334.814959][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 334.814993][ C0] ? __tcp_send_ack+0x21a/0x4f0 [ 334.815023][ C0] tcp_rcv_state_process+0x2f6d/0x4810 [ 334.815062][ C0] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 334.815104][ C0] tcp_v4_do_rcv+0xa25/0x12b0 [ 334.815142][ C0] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 334.815174][ C0] __release_sock+0x285/0x3d0 [ 334.815240][ C0] ? __release_sock+0xa4/0x3d0 [ 334.815278][ C0] release_sock+0x75/0x210 [ 334.815304][ C0] ? release_sock+0x2f/0x210 [ 334.815331][ C0] __inet_stream_connect+0x85d/0xdd0 [ 334.815368][ C0] ? __pfx___inet_stream_connect+0x10/0x10 [ 334.815398][ C0] ? __pfx_woken_wake_function+0x10/0x10 [ 334.815423][ C0] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 334.815455][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 334.815490][ C0] inet_stream_connect+0x66/0xa0 [ 334.815520][ C0] kernel_connect+0x141/0x1c0 [ 334.815544][ C0] ? __pfx_kernel_connect+0x10/0x10 [ 334.815574][ C0] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 334.815606][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 334.815640][ C0] smc_connect+0x7a5/0xd90 [ 334.815670][ C0] __sys_connect+0x315/0x450 [ 334.815701][ C0] ? __pfx___sys_connect+0x10/0x10 [ 334.815737][ C0] ? rcu_is_watching+0x15/0xb0 [ 334.815768][ C0] __x64_sys_connect+0x7a/0x90 [ 334.815796][ C0] do_syscall_64+0x14d/0xf80 [ 334.815825][ C0] ? trace_irq_disable+0x3b/0x150 [ 334.815852][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.815875][ C0] ? clear_bhb_loop+0x40/0x90 [ 334.815903][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.815924][ C0] RIP: 0033:0x7f13c6edc799 [ 334.815946][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.815967][ C0] RSP: 002b:00007f13c5136028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 334.815994][ C0] RAX: ffffffffffffffda RBX: 00007f13c7155fa0 RCX: 00007f13c6edc799 [ 334.816012][ C0] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 334.816028][ C0] RBP: 00007f13c6f72c99 R08: 0000000000000000 R09: 0000000000000000 [ 334.816043][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.816058][ C0] R13: 00007f13c7156038 R14: 00007f13c7155fa0 R15: 00007ffc3977d9c8 [ 334.816087][ C0] [ 334.816095][ C0] ================================================================== [ 334.841789][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 334.841874][ C0] CPU: 0 UID: 0 PID: 10339 Comm: syz.0.1628 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 334.841909][ C0] Tainted: [L]=SOFTLOCKUP [ 334.841919][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 334.841940][ C0] Call Trace: [ 334.841971][ C0] [ 334.841994][ C0] vpanic+0x56c/0xa60 [ 334.842065][ C0] ? __pfx_vpanic+0x10/0x10 [ 334.842106][ C0] ? __pfx___schedule+0x10/0x10 [ 334.842192][ C0] panic+0xc5/0xd0 [ 334.842231][ C0] ? __pfx_panic+0x10/0x10 [ 334.842280][ C0] ? preempt_schedule_common+0x82/0xd0 [ 334.842369][ C0] ? smc_tcp_syn_recv_sock+0x92/0x4b0 [ 334.842397][ C0] check_panic_on_warn+0x89/0xb0 [ 334.842432][ C0] ? smc_tcp_syn_recv_sock+0x92/0x4b0 [ 334.842497][ C0] end_report+0x73/0x180 [ 334.842553][ C0] ? smc_tcp_syn_recv_sock+0x92/0x4b0 [ 334.842578][ C0] kasan_report+0x128/0x150 [ 334.842668][ C0] ? smc_tcp_syn_recv_sock+0x92/0x4b0 [ 334.842712][ C0] kasan_check_range+0x264/0x2c0 [ 334.842740][ C0] smc_tcp_syn_recv_sock+0x92/0x4b0 [ 334.842810][ C0] tcp_check_req+0x1405/0x1f90 [ 334.842877][ C0] ? __pfx_tcp_check_req+0x10/0x10 [ 334.842904][ C0] ? sk_filter_trim_cap+0x1e1/0xd90 [ 334.842974][ C0] ? tcp_v4_fill_cb+0x3d/0x4c0 [ 334.843038][ C0] ? __kasan_check_write+0x20/0x20 [ 334.843069][ C0] ? tcp_v4_fill_cb+0x25c/0x4c0 [ 334.843117][ C0] tcp_v4_rcv+0x1786/0x31f0 [ 334.843219][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 334.843239][ C0] ? raw_local_deliver+0x30a/0xf40 [ 334.843268][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 334.843288][ C0] ip_protocol_deliver_rcu+0x221/0x440 [ 334.843356][ C0] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 334.843393][ C0] ip_local_deliver_finish+0x3bb/0x6f0 [ 334.843466][ C0] NF_HOOK+0x336/0x3c0 [ 334.843584][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 334.843618][ C0] ? NF_HOOK+0x9e/0x3c0 [ 334.843688][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 334.843754][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 334.843790][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 334.843868][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 334.843930][ C0] NF_HOOK+0x336/0x3c0 [ 334.843962][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 334.844041][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 334.844093][ C0] ? NF_HOOK+0x9e/0x3c0 [ 334.844125][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 334.844206][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 334.844262][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 334.844303][ C0] ? process_backlog+0x271/0xc60 [ 334.844377][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 334.844426][ C0] process_backlog+0x569/0xc60 [ 334.844453][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 334.844569][ C0] __napi_poll+0xaf/0x580 [ 334.844593][ C0] ? skb_defer_free_flush+0x233/0x260 [ 334.844635][ C0] net_rx_action+0x696/0xe00 [ 334.844726][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 334.844752][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 334.844816][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 334.844896][ C0] handle_softirqs+0x1de/0x6f0 [ 334.844936][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 334.845007][ C0] ? __dev_queue_xmit+0x27d/0x39b0 [ 334.845071][ C0] __dev_queue_xmit+0x1ebb/0x39b0 [ 334.845126][ C0] ? __dev_queue_xmit+0x27d/0x39b0 [ 334.845212][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 334.845243][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 334.845331][ C0] ? ip_output+0x29f/0x450 [ 334.845387][ C0] ? ip_finish_output2+0xacc/0x10b0 [ 334.845418][ C0] ? ip_finish_output2+0x3c2/0x10b0 [ 334.845475][ C0] ip_finish_output2+0xcab/0x10b0 [ 334.845543][ C0] ? ip_finish_output2+0x3c2/0x10b0 [ 334.845577][ C0] ip_output+0x29f/0x450 [ 334.845618][ C0] ? ip_output+0x5b/0x450 [ 334.845682][ C0] ? __ip_queue_xmit+0x5c/0x1bb0 [ 334.845722][ C0] __ip_queue_xmit+0x116a/0x1bb0 [ 334.845749][ C0] ? csum_tcpudp_nofold+0x1f/0x60 [ 334.845840][ C0] ? __ip_queue_xmit+0x5c/0x1bb0 [ 334.845887][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 334.845913][ C0] __tcp_transmit_skb+0x2b30/0x43e0 [ 334.846024][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 334.846067][ C0] ? __tcp_send_ack+0x21a/0x4f0 [ 334.846095][ C0] tcp_rcv_state_process+0x2f6d/0x4810 [ 334.846175][ C0] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 334.846232][ C0] tcp_v4_do_rcv+0xa25/0x12b0 [ 334.846305][ C0] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 334.846375][ C0] __release_sock+0x285/0x3d0 [ 334.846413][ C0] ? __release_sock+0xa4/0x3d0 [ 334.846502][ C0] release_sock+0x75/0x210 [ 334.846541][ C0] ? release_sock+0x2f/0x210 [ 334.846569][ C0] __inet_stream_connect+0x85d/0xdd0 [ 334.846661][ C0] ? __pfx___inet_stream_connect+0x10/0x10 [ 334.846704][ C0] ? __pfx_woken_wake_function+0x10/0x10 [ 334.846729][ C0] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 334.846800][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 334.846861][ C0] inet_stream_connect+0x66/0xa0 [ 334.846893][ C0] kernel_connect+0x141/0x1c0 [ 334.846938][ C0] ? __pfx_kernel_connect+0x10/0x10 [ 334.847014][ C0] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 334.847046][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 334.847099][ C0] smc_connect+0x7a5/0xd90 [ 334.847176][ C0] __sys_connect+0x315/0x450 [ 334.847208][ C0] ? __pfx___sys_connect+0x10/0x10 [ 334.847278][ C0] ? rcu_is_watching+0x15/0xb0 [ 334.847358][ C0] __x64_sys_connect+0x7a/0x90 [ 334.847388][ C0] do_syscall_64+0x14d/0xf80 [ 334.847481][ C0] ? trace_irq_disable+0x3b/0x150 [ 334.847515][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.847539][ C0] ? clear_bhb_loop+0x40/0x90 [ 334.847600][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.847658][ C0] RIP: 0033:0x7f13c6edc799 [ 334.847679][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.847701][ C0] RSP: 002b:00007f13c5136028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 334.847724][ C0] RAX: ffffffffffffffda RBX: 00007f13c7155fa0 RCX: 00007f13c6edc799 [ 334.847741][ C0] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 334.847757][ C0] RBP: 00007f13c6f72c99 R08: 0000000000000000 R09: 0000000000000000 [ 334.847774][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.847790][ C0] R13: 00007f13c7156038 R14: 00007f13c7155fa0 R15: 00007ffc3977d9c8 [ 334.847818][ C0] [ 334.848004][ C0] Kernel Offset: disabled