last executing test programs: 770.553663ms ago: executing program 1 (id=571): io_uring_setup(0x1001, &(0x7f00000002c0)={0x0, 0xa49f, 0x8, 0x1, 0x17d}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 769.998916ms ago: executing program 1 (id=574): setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000080)=ANY=[@ANYRES8], 0x24, 0x2) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fanotify_init(0x0, 0x0) socket$inet6(0x10, 0x2, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x0, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x4, 0x80, 0x2, 0x3, 0x8001, 0x20000006, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x8, 0x0, 0x5, 0x27, 0x1, 0x7, 0x3c5b, 0x1, 0x34, 0x6, 0x1, 0x5, 0x9b400000, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x7, 0x7fffffff, 0x407, 0x2323, 0xfffffff7, 0x8, 0x4006, 0x6, 0x7, 0x0, 0x4, 0x8, 0x1400, 0x100080, 0x0, 0x5, 0x6, 0x5, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012b, 0x8004, 0x5, 0x6, 0x129432e2, 0x1, 0xf9, 0xe, 0x5, 0x6c7, 0x9, 0xfffffffc, 0x80000003, 0x200203, 0x200, 0x3, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xa1, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ff, 0x401, 0x800, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x401, 0x101, 0x8, 0x9, 0xc, 0x47, 0x8000, 0x1, 0xfdffffff, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0xb, 0x250, 0x0, 0x6c0, 0xbc45, 0x48c93690, 0x6, 0x3], [0x7, 0x404, 0x0, 0x5, 0x4dfb, 0x100, 0x6, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0xaab1, 0x8, 0x0, 0x2, 0xc, 0x9, 0x401, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20080008, 0x9, 0x6d01, 0x0, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x1, 0x2950bfaf, 0xdfe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x80bf, 0x2, 0x8, 0x7ff, 0x12b, 0xb8a, 0x803c, 0x4, 0x7ff, 0x5, 0x1c, 0x120000, 0x1, 0x2006, 0x80a2ed, 0x0, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0xa, 0x6, 0x0, 0xb5, 0xce7, 0x43, 0x1fcf8d94, 0x57, 0x5, 0xffffff28, 0x101, 0x10010000, 0x4, 0x7fff, 0x10ffff, 0x2000a620, 0x2, 0x200, 0x1, 0x2, 0x7, 0xe7, 0x6, 0x16, 0xfffffff9, 0x80000004, 0x85, 0xfffffff9, 0xc9, 0x9, 0x7, 0x7, 0x3, 0x7e, 0x100, 0x9602, 0xfffffffb, 0xaf, 0xfffffff6, 0x6, 0x226, 0x8, 0x7, 0xb, 0x30b1d693, 0xaed, 0x1000f40, 0x5, 0x2, 0x6c1b, 0x0, 0x4, 0xffef, 0xb1e, 0xd7, 0x6, 0xffff3441, 0x40fff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) fanotify_mark(r4, 0x21, 0x8000000, r4, 0x0) fanotify_mark(r4, 0x22, 0x4000003b, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = fsopen(&(0x7f0000000000)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0x1, 0x0) getdents64(r7, 0x0, 0x22) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, 0x0, 0x25, 0x0, @void}, 0x10) r8 = socket(0x10, 0x803, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./bus\x00') 769.84652ms ago: executing program 2 (id=575): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = add_key(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 709.975564ms ago: executing program 1 (id=577): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 709.875844ms ago: executing program 0 (id=578): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 650.558754ms ago: executing program 0 (id=579): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="200404000300000024001280110001006272696467655f736c617665000000000c000580080026"], 0x44}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4000000) 650.355455ms ago: executing program 1 (id=580): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) 650.032045ms ago: executing program 0 (id=581): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2}, 0x40) syz_emit_ethernet(0x56, &(0x7f0000000240)={@link_local, @local, @void, {@canfd={0xd, {{}, 0x14, 0x3, 0x0, 0x0, "0e3957e66b81ba57875e16e9be4d6f582a0150fb97a3aeaae26b9f8b0d65d27ce4c9011be871720b83586357cd6917964268aaa656c15620dce9842ba9efdc3c"}}}}, 0x0) 647.84224ms ago: executing program 1 (id=582): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x20, 0x1a, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4926}]}]}, 0x20}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$setregset(0x4205, r0, 0x402, &(0x7f0000000000)={0x0}) ptrace$setregset(0x4205, r0, 0x403, &(0x7f0000000000)={0x0}) 590.282449ms ago: executing program 0 (id=583): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000380)=0x10, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 590.034419ms ago: executing program 1 (id=584): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0xb, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc040) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) readv(r0, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201}, 0x94) syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000406b1d010140000102030109022bff03010000000904000000"], 0x0) 589.900245ms ago: executing program 0 (id=585): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000a40)=ANY=[@ANYBLOB="040e07011020"], 0x7) 499.859024ms ago: executing program 0 (id=586): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) syz_emit_ethernet(0xda, &(0x7f0000000300)={@local, @random='?\x00', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0xcc, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x2e, 0x10, 0x7, 0x0, 0x67, {[@mptcp=@remove_addr={0x1e, 0xa2, 0x2, 0x0, "88391a84ed441d2486917d411bdd858b3945eb7b104049c25287cdf6564600b902e2e7d74b3c7698494b8b50fa2b86bdbac1834970ce2e08de17956124ca5ee57d308aea922869ee99052ca0cc15e589b578c40502623347eab29dd06a7e39006f1e876f0d74018986d4197c893a5072c75719294c8032d8ee1c9fcba8b0e13b58860d00fa15157cf689d0793fbee117500fde096b6aabdc5218cec21c0a78"}]}}}}}}}, 0x0) 499.706299ms ago: executing program 2 (id=587): syz_emit_ethernet(0x46, &(0x7f0000000400)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2e, 0x38, 0x69, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @time_exceeded={0xb, 0x2, 0x0, 0x0, 0x11, 0x0, {0x5, 0x4, 0x0, 0x4, 0x8, 0x66, 0x1, 0xc, 0x4, 0xdd32, @multicast1, @remote}, '\b\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) 497.24933ms ago: executing program 2 (id=588): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(r0, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = socket(0xa, 0x3, 0x87) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x84, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 350.026326ms ago: executing program 2 (id=592): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r1, &(0x7f0000001400)={@void, @val={0x3, 0x3, 0x8, 0x6ed, 0x19, 0xc}, @ipv4=@tcp={{0x7, 0x4, 0x1, 0x1, 0x69, 0x67, 0x0, 0x4a, 0x6, 0x0, @empty, @multicast1, {[@generic={0x88, 0x5, "a50abb"}]}}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0xece5}, {"37133e621c2638a33e86ba9549f70bcb5248d5ec42b8d998cb66f8be7954ed58d31e76dc6a63b33af97be654129e2c261c13069126075cf7bf"}}}}, 0x73) 250.403796ms ago: executing program 3 (id=594): socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) 250.305192ms ago: executing program 3 (id=595): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000000)='./file2\x00', 0x0, 0x0) 169.927463ms ago: executing program 3 (id=596): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001940)={0x6, 0x4, &(0x7f0000001880)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 169.720144ms ago: executing program 2 (id=597): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) io_setup(0x101, &(0x7f0000000340)=0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)=ANY=[], 0x8) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x8, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 169.529103ms ago: executing program 3 (id=598): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000221d711868000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x40}, 0x94) 80.286434ms ago: executing program 3 (id=599): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010025bd", @ANYRES32=r2, @ANYBLOB="200404000300000024001280110001006272696467655f736c617665000000000c000580080026"], 0x44}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4000000) 79.778944ms ago: executing program 3 (id=600): flock(0xffffffffffffffff, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000002) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 0s ago: executing program 2 (id=601): setxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x24, 0x2) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fanotify_init(0x0, 0x0) socket$inet6(0x10, 0x2, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x0, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x4, 0x80, 0x2, 0x3, 0x8001, 0x20000006, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x8, 0x0, 0x5, 0x27, 0x1, 0x7, 0x3c5b, 0x1, 0x34, 0x6, 0x1, 0x5, 0x9b400000, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x7, 0x7fffffff, 0x407, 0x2323, 0xfffffff7, 0x8, 0x4006, 0x6, 0x7, 0x0, 0x4, 0x8, 0x1400, 0x100080, 0x0, 0x5, 0x6, 0x5, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012b, 0x8004, 0x5, 0x6, 0x129432e2, 0x1, 0xf9, 0xe, 0x5, 0x6c7, 0x9, 0xfffffffc, 0x80000003, 0x200203, 0x200, 0x3, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xa1, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ff, 0x401, 0x800, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x401, 0x101, 0x8, 0x9, 0xc, 0x47, 0x8000, 0x1, 0xfdffffff, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0xb, 0x250, 0x0, 0x6c0, 0xbc45, 0x48c93690, 0x6, 0x3], [0x7, 0x404, 0x0, 0x5, 0x4dfb, 0x100, 0x6, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0xaab1, 0x8, 0x0, 0x2, 0xc, 0x9, 0x401, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20080008, 0x9, 0x6d01, 0x0, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x1, 0x2950bfaf, 0xdfe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x80bf, 0x2, 0x8, 0x7ff, 0x12b, 0xb8a, 0x803c, 0x4, 0x7ff, 0x5, 0x1c, 0x120000, 0x1, 0x2006, 0x80a2ed, 0x0, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0xa, 0x6, 0x0, 0xb5, 0xce7, 0x43, 0x1fcf8d94, 0x57, 0x5, 0xffffff28, 0x101, 0x10010000, 0x4, 0x7fff, 0x10ffff, 0x2000a620, 0x2, 0x200, 0x1, 0x2, 0x7, 0xe7, 0x6, 0x16, 0xfffffff9, 0x80000004, 0x85, 0xfffffff9, 0xc9, 0x9, 0x7, 0x7, 0x3, 0x7e, 0x100, 0x9602, 0xfffffffb, 0xaf, 0xfffffff6, 0x6, 0x226, 0x8, 0x7, 0xb, 0x30b1d693, 0xaed, 0x1000f40, 0x5, 0x2, 0x6c1b, 0x0, 0x4, 0xffef, 0xb1e, 0xd7, 0x6, 0xffff3441, 0x40fff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) fanotify_mark(r4, 0x21, 0x8000000, r4, 0x0) fanotify_mark(r4, 0x22, 0x4000003b, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = fsopen(&(0x7f0000000000)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0x1, 0x0) getdents64(r7, 0x0, 0x22) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, 0x0, 0x25, 0x0, @void}, 0x10) r8 = socket(0x10, 0x803, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./bus\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:43102' (ED25519) to the list of known hosts. [ 49.353295][ T5931] cgroup: Unknown subsys name 'net' [ 49.498822][ T5931] cgroup: Unknown subsys name 'cpuset' [ 49.503650][ T5931] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.493421][ T5931] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.524080][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.527409][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.530721][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.534822][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.538122][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.559653][ T5301] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.563269][ T5301] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.567310][ T5301] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.572339][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.575342][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.587677][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.594533][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.597843][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.601399][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.602283][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.604947][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.607272][ T5951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.612171][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.614943][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.617821][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.760193][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 54.964420][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 54.973907][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.977473][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.980530][ T5943] bridge_slave_0: entered allmulticast mode [ 54.984032][ T5943] bridge_slave_0: entered promiscuous mode [ 55.024044][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.026669][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.029012][ T5943] bridge_slave_1: entered allmulticast mode [ 55.031669][ T5943] bridge_slave_1: entered promiscuous mode [ 55.076946][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.109558][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.152768][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 55.238157][ T5943] team0: Port device team_slave_0 added [ 55.295190][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 55.304100][ T5943] team0: Port device team_slave_1 added [ 55.429099][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.432272][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.435329][ T5947] bridge_slave_0: entered allmulticast mode [ 55.439319][ T5947] bridge_slave_0: entered promiscuous mode [ 55.464130][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.467034][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.477619][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.484114][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.487034][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.497282][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.500950][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.504148][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.507421][ T5947] bridge_slave_1: entered allmulticast mode [ 55.511186][ T5947] bridge_slave_1: entered promiscuous mode [ 55.612721][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.615892][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.618889][ T5952] bridge_slave_0: entered allmulticast mode [ 55.622801][ T5952] bridge_slave_0: entered promiscuous mode [ 55.627783][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.630804][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.633799][ T5952] bridge_slave_1: entered allmulticast mode [ 55.637794][ T5952] bridge_slave_1: entered promiscuous mode [ 55.757966][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.800393][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.804069][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.808954][ T5949] bridge_slave_0: entered allmulticast mode [ 55.812822][ T5949] bridge_slave_0: entered promiscuous mode [ 55.822578][ T5943] hsr_slave_0: entered promiscuous mode [ 55.826016][ T5943] hsr_slave_1: entered promiscuous mode [ 55.831249][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.836721][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.840323][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.843521][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.846926][ T5949] bridge_slave_1: entered allmulticast mode [ 55.850717][ T5949] bridge_slave_1: entered promiscuous mode [ 55.898520][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.990377][ T5952] team0: Port device team_slave_0 added [ 56.010446][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.015172][ T5947] team0: Port device team_slave_0 added [ 56.020578][ T5952] team0: Port device team_slave_1 added [ 56.030279][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.039924][ T5947] team0: Port device team_slave_1 added [ 56.133309][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.136140][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.144308][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.196818][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.199708][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.208647][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.221508][ T5949] team0: Port device team_slave_0 added [ 56.224373][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.226967][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.235063][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.239786][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.242057][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.251034][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.291675][ T5949] team0: Port device team_slave_1 added [ 56.356756][ T5947] hsr_slave_0: entered promiscuous mode [ 56.359049][ T5947] hsr_slave_1: entered promiscuous mode [ 56.361168][ T5947] debugfs: 'hsr0' already exists in 'hsr' [ 56.363050][ T5947] Cannot create hsr debugfs directory [ 56.427376][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.430328][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.442322][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.449861][ T5952] hsr_slave_0: entered promiscuous mode [ 56.452154][ T5952] hsr_slave_1: entered promiscuous mode [ 56.454288][ T5952] debugfs: 'hsr0' already exists in 'hsr' [ 56.457466][ T5952] Cannot create hsr debugfs directory [ 56.479634][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.482439][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.492208][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.606295][ T5951] Bluetooth: hci1: command tx timeout [ 56.615602][ T5951] Bluetooth: hci0: command tx timeout [ 56.674702][ T5949] hsr_slave_0: entered promiscuous mode [ 56.678911][ T5949] hsr_slave_1: entered promiscuous mode [ 56.681953][ T5949] debugfs: 'hsr0' already exists in 'hsr' [ 56.684288][ T5949] Cannot create hsr debugfs directory [ 56.685771][ T5951] Bluetooth: hci2: command tx timeout [ 56.686728][ T5301] Bluetooth: hci3: command tx timeout [ 56.884480][ T5943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.897926][ T5943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.910251][ T5943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.923917][ T5943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.016707][ T5947] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.023955][ T5947] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.034451][ T5947] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.039717][ T5947] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.098693][ T5952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.103961][ T5952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.110598][ T5952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.118432][ T5952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.189326][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.203810][ T5949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.208789][ T5949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.214492][ T5949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.221354][ T5949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.254531][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.269935][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.272979][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.286616][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.288878][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.299155][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.317742][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.353681][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.359220][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.368201][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.371174][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.381269][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.383841][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.389555][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.392245][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.407625][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.410746][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.448715][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.474728][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.484594][ T5952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.498875][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.501911][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.506585][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.509620][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.638671][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.682053][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.694162][ T5943] veth0_vlan: entered promiscuous mode [ 57.703694][ T5943] veth1_vlan: entered promiscuous mode [ 57.710855][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.750923][ T5943] veth0_macvtap: entered promiscuous mode [ 57.760099][ T5943] veth1_macvtap: entered promiscuous mode [ 57.763293][ T5952] veth0_vlan: entered promiscuous mode [ 57.777527][ T5952] veth1_vlan: entered promiscuous mode [ 57.781884][ T5947] veth0_vlan: entered promiscuous mode [ 57.788637][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.798716][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.803724][ T5947] veth1_vlan: entered promiscuous mode [ 57.815185][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.832198][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.838973][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.851344][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.857659][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.868500][ T5952] veth0_macvtap: entered promiscuous mode [ 57.872264][ T5947] veth0_macvtap: entered promiscuous mode [ 57.880096][ T5952] veth1_macvtap: entered promiscuous mode [ 57.887594][ T5947] veth1_macvtap: entered promiscuous mode [ 57.904914][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.914425][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.922705][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.927556][ T5949] veth0_vlan: entered promiscuous mode [ 57.931445][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.952489][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.955289][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.970084][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.973478][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.976839][ T5949] veth1_vlan: entered promiscuous mode [ 57.992982][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.996391][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.015625][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.019089][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.022789][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.025304][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.055036][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.059559][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.068304][ T5949] veth0_macvtap: entered promiscuous mode [ 58.083402][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.088552][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.096751][ T5949] veth1_macvtap: entered promiscuous mode [ 58.104696][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.108754][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.132250][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.141569][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.143163][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.144802][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.153745][ T5943] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.164941][ T1152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.168115][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.170680][ T1152] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.171908][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.183812][ T1152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.188600][ T1152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.261447][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.263913][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.280288][ T6031] Bluetooth: MGMT ver 1.23 [ 58.323509][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.327394][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.595884][ T1336] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 58.685901][ T5301] Bluetooth: hci0: command tx timeout [ 58.685974][ T5951] Bluetooth: hci1: command tx timeout [ 58.775835][ T5951] Bluetooth: hci2: command tx timeout [ 58.960386][ T1336] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.963617][ T1336] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.967242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.978358][ T1336] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 58.982422][ T1336] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 58.984984][ T1336] usb 8-1: SerialNumber: syz [ 58.996845][ T1336] usb 8-1: 0:2 : does not exist [ 59.005966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.202244][ T59] usb 8-1: USB disconnect, device number 2 [ 59.581615][ T6072] netlink: 'syz.0.18': attribute type 4 has an invalid length. [ 59.601228][ T6072] netlink: 'syz.0.18': attribute type 17 has an invalid length. [ 59.615623][ T6072] netlink: 'syz.0.18': attribute type 4 has an invalid length. [ 59.980881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.078285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.107743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 60.445617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 60.466102][ T59] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 60.605615][ T5951] Bluetooth: hci3: command tx timeout [ 60.657847][ T59] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 60.661379][ T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 60.664886][ T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 60.668678][ T59] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.672786][ T59] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.677033][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.682347][ T59] usb 8-1: config 0 descriptor?? [ 60.685424][ T6096] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 60.765749][ T5951] Bluetooth: hci0: command tx timeout [ 60.767790][ T5951] Bluetooth: hci1: command tx timeout [ 60.845674][ T5301] Bluetooth: hci2: command tx timeout [ 61.097132][ T59] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 61.104162][ T59] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 61.107630][ T59] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x7 [ 61.110382][ T59] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 61.112864][ T59] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x1 [ 61.115408][ T59] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 61.127095][ T59] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 61.302154][ T59] usb 8-1: USB disconnect, device number 3 [ 61.703327][ T40] audit: type=1326 audit(1764147545.852:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.43" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 61.710757][ T40] audit: type=1326 audit(1764147545.852:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.43" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 61.718627][ T40] audit: type=1326 audit(1764147545.852:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.43" exe="/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 61.729983][ T40] audit: type=1326 audit(1764147545.852:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.43" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 61.739816][ T40] audit: type=1326 audit(1764147545.862:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.43" exe="/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 61.750325][ T40] audit: type=1326 audit(1764147545.862:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.43" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 61.759511][ T40] audit: type=1326 audit(1764147545.862:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.43" exe="/syz-executor" sig=0 arch=40000003 syscall=438 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 61.767342][ T40] audit: type=1326 audit(1764147545.862:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.43" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 61.979888][ T6148] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.685915][ T5301] Bluetooth: hci3: command tx timeout [ 62.846896][ T5301] Bluetooth: hci1: command tx timeout [ 62.927389][ T5301] Bluetooth: hci2: command tx timeout [ 63.327462][ T6193] capability: warning: `syz.2.58' uses deprecated v2 capabilities in a way that may be insecure [ 63.486034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 63.505677][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 64.150246][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'. [ 64.336756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.342583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.615602][ T5649] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.775576][ T5649] usb 5-1: Using ep0 maxpacket: 16 [ 64.778947][ T5649] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.782596][ T5649] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.786251][ T5649] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 64.790293][ T5649] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 64.793144][ T5649] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.803153][ T5649] usb 5-1: config 0 descriptor?? [ 65.115821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 65.144344][ T6244] input: syz1 as /devices/virtual/input/input5 [ 65.223563][ T5649] HID 045e:07da: Invalid code 65791 type 1 [ 65.230498][ T5649] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input6 [ 65.250219][ T5649] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 65.428003][ T1336] usb 5-1: USB disconnect, device number 2 [ 65.605614][ T5649] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 65.767600][ T5649] usb 8-1: config index 0 descriptor too short (expected 65323, got 119) [ 65.770356][ T5649] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.773628][ T5649] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.779264][ T5649] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 65.782108][ T5649] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.784787][ T5649] usb 8-1: Product: syz [ 65.786185][ T5649] usb 8-1: Manufacturer: syz [ 65.787655][ T5649] usb 8-1: SerialNumber: syz [ 66.324319][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 67.559311][ T1345] usb 8-1: USB disconnect, device number 4 [ 69.145730][ T1336] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 69.302490][ T1336] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 69.306535][ T1336] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 69.311059][ T1336] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 69.316825][ T1336] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 69.322102][ T1336] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 69.333704][ T1336] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 69.338481][ T1336] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 69.342959][ T1336] usb 8-1: Product: syz [ 69.345414][ T1336] usb 8-1: Manufacturer: syz [ 69.367885][ T1336] cdc_wdm 8-1:1.0: skipping garbage [ 69.370513][ T1336] cdc_wdm 8-1:1.0: skipping garbage [ 69.384152][ T1336] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 69.387050][ T1336] cdc_wdm 8-1:1.0: Unknown control protocol [ 69.982235][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 70.105644][ T34] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 70.255586][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 70.260481][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 117, changing to 10 [ 70.265189][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 42867, setting to 1024 [ 70.272186][ T34] usb 6-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice= 0.00 [ 70.276028][ T34] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 70.279498][ T34] usb 6-1: Product: syz [ 70.281319][ T34] usb 6-1: SerialNumber: syz [ 70.308019][ T34] usb 6-1: config 0 descriptor?? [ 70.311525][ T6355] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 70.518598][ T1336] usb 6-1: USB disconnect, device number 2 [ 70.550653][ T6372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.131'. [ 70.560147][ T6372] bridge1: entered promiscuous mode [ 70.562153][ T6372] bridge1: entered allmulticast mode [ 70.866607][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.931843][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.934814][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.017359][ T10] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 71.021032][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.025552][ T10] usb 5-1: config 0 has no interfaces? [ 71.028047][ T10] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 71.031954][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.039495][ T10] usb 5-1: config 0 descriptor?? [ 71.450756][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.456531][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.466521][ T10] usb 5-1: USB disconnect, device number 3 [ 71.923335][ T34] usb 8-1: USB disconnect, device number 5 [ 72.156347][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 72.265382][ T6429] ======================================================= [ 72.265382][ T6429] WARNING: The mand mount option has been deprecated and [ 72.265382][ T6429] and is ignored by this kernel. Remove the mand [ 72.265382][ T6429] option from the mount to silence this warning. [ 72.265382][ T6429] ======================================================= [ 72.335750][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 72.346224][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 117, changing to 10 [ 72.356728][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 42867, setting to 1024 [ 72.364777][ T10] usb 6-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice= 0.00 [ 72.375441][ T10] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 72.379162][ T10] usb 6-1: Product: syz [ 72.381174][ T10] usb 6-1: SerialNumber: syz [ 72.388625][ T10] usb 6-1: config 0 descriptor?? [ 72.393958][ T6407] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 72.610517][ T6026] usb 6-1: USB disconnect, device number 3 [ 72.851868][ T40] audit: type=1326 audit(1764147557.002:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 72.875865][ T40] audit: type=1326 audit(1764147557.002:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 72.884610][ T40] audit: type=1326 audit(1764147557.002:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=96 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 72.895326][ T40] audit: type=1326 audit(1764147557.002:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 75.465677][ T34] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 75.616426][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 75.620226][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 117, changing to 10 [ 75.625175][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 42867, setting to 1024 [ 75.631017][ T34] usb 8-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice= 0.00 [ 75.633872][ T34] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 75.636962][ T34] usb 8-1: Product: syz [ 75.638764][ T34] usb 8-1: SerialNumber: syz [ 75.642746][ T34] usb 8-1: config 0 descriptor?? [ 75.646126][ T6491] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.852579][ T5313] usb 8-1: USB disconnect, device number 6 [ 76.416751][ T6505] input: syz1 as /devices/virtual/input/input10 [ 77.035578][ T34] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 77.105592][ T1336] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 77.206257][ T34] usb 8-1: config index 0 descriptor too short (expected 65323, got 119) [ 77.209715][ T34] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.213737][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.227790][ T34] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.230941][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.234331][ T34] usb 8-1: Product: syz [ 77.236314][ T34] usb 8-1: Manufacturer: syz [ 77.238351][ T34] usb 8-1: SerialNumber: syz [ 77.280491][ T1336] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 77.296386][ T1336] usb 7-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 77.300368][ T1336] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.311631][ T1336] usb 7-1: config 0 descriptor?? [ 77.640429][ T6529] nfs: Unexpected value for 'acl' [ 77.728735][ T1336] logitech 0003:046D:C626.0004: unknown main item tag 0x0 [ 77.732080][ T1336] logitech 0003:046D:C626.0004: unknown main item tag 0x0 [ 77.735184][ T1336] logitech 0003:046D:C626.0004: unknown main item tag 0x0 [ 77.742565][ T1336] logitech 0003:046D:C626.0004: hidraw1: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.2-1/input0 [ 77.926951][ T1345] usb 7-1: USB disconnect, device number 2 [ 78.358308][ T5649] usb 8-1: USB disconnect, device number 7 [ 78.675684][ T1345] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.835594][ T1345] usb 5-1: Using ep0 maxpacket: 16 [ 78.839786][ T1345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 117, changing to 10 [ 78.844498][ T1345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 42867, setting to 1024 [ 78.852347][ T1345] usb 5-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice= 0.00 [ 78.856292][ T1345] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 78.859669][ T1345] usb 5-1: Product: syz [ 78.861458][ T1345] usb 5-1: SerialNumber: syz [ 78.865672][ T1345] usb 5-1: config 0 descriptor?? [ 78.868616][ T6552] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 79.016016][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 79.075094][ T1345] usb 5-1: USB disconnect, device number 4 [ 79.103598][ T5301] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 79.701954][ T6583] binder: 6582:6583 ioctl c0306201 0 returned -14 [ 79.955555][ T1345] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 80.116040][ T1345] usb 5-1: no configurations [ 80.118273][ T1345] usb 5-1: can't read configurations, error -22 [ 80.265621][ T1345] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 80.426405][ T1345] usb 5-1: no configurations [ 80.428238][ T1345] usb 5-1: can't read configurations, error -22 [ 80.434090][ T1345] usb usb5-port1: attempt power cycle [ 80.668851][ T6606] netlink: 180 bytes leftover after parsing attributes in process `syz.3.216'. [ 80.695556][ T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 80.759556][ T1336] hid-generic 0005:0005:0008.0005: unknown main item tag 0x0 [ 80.773781][ T1336] hid-generic 0005:0005:0008.0005: hidraw1: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 80.795685][ T1345] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 80.818041][ T1345] usb 5-1: no configurations [ 80.819653][ T1345] usb 5-1: can't read configurations, error -22 [ 80.858863][ T29] usb 6-1: config 0 has no interfaces? [ 80.863965][ T29] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 80.867902][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=95 [ 80.871287][ T29] usb 6-1: Product: syz [ 80.873075][ T29] usb 6-1: Manufacturer: syz [ 80.875030][ T29] usb 6-1: SerialNumber: syz [ 80.886023][ T29] usb 6-1: config 0 descriptor?? [ 80.955645][ T1345] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 80.977267][ T1345] usb 5-1: no configurations [ 80.978781][ T1345] usb 5-1: can't read configurations, error -22 [ 80.981171][ T1345] usb usb5-port1: unable to enumerate USB device [ 81.157182][ T6105] usb 6-1: USB disconnect, device number 4 [ 81.551491][ T6618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.223'. [ 81.986155][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 82.137062][ T10] usb 6-1: config 0 has an invalid interface number: 127 but max is 1 [ 82.140306][ T10] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 82.144607][ T10] usb 6-1: config 0 has no interface number 1 [ 82.147664][ T10] usb 6-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.152508][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 82.160449][ T10] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 82.164077][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.167398][ T10] usb 6-1: Product: syz [ 82.169213][ T10] usb 6-1: Manufacturer: syz [ 82.171145][ T10] usb 6-1: SerialNumber: syz [ 82.174912][ T10] usb 6-1: config 0 descriptor?? [ 82.180008][ T10] usb-storage 6-1:0.127: USB Mass Storage device detected [ 82.186504][ T10] usb-storage 6-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 82.274769][ T10] usb-storage 6-1:0.0: USB Mass Storage device detected [ 82.282193][ T10] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 82.382125][ T34] usb 6-1: USB disconnect, device number 5 [ 82.739689][ T6653] input: syz1 as /devices/virtual/input/input12 [ 82.897263][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 82.925558][ T34] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 83.043709][ T6672] usb usb1: usbfs: process 6672 (syz.1.243) did not claim interface 9 before use [ 83.087973][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 83.091445][ T34] usb 7-1: not running at top speed; connect to a high speed hub [ 83.095413][ T34] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 83.099360][ T34] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 83.103074][ T34] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.108971][ T34] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.111824][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.114415][ T34] usb 7-1: Product: syz [ 83.116110][ T34] usb 7-1: Manufacturer: syz [ 83.117644][ T34] usb 7-1: SerialNumber: syz [ 83.124734][ T6678] input: syz1 as /devices/virtual/input/input13 [ 83.655683][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 83.741741][ T34] usb 7-1: 0:2 : does not exist [ 83.818517][ T10] usb 6-1: config index 0 descriptor too short (expected 65323, got 119) [ 83.824002][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.833073][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.847885][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.860576][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.872996][ T10] usb 6-1: Product: syz [ 83.880228][ T10] usb 6-1: Manufacturer: syz [ 83.882627][ T10] usb 6-1: SerialNumber: syz [ 83.953967][ T10] usb 7-1: USB disconnect, device number 3 [ 84.229366][ T6694] binder: 6693:6694 ioctl 80047213 0 returned -22 [ 84.904457][ T1345] usb 6-1: USB disconnect, device number 6 [ 86.025583][ T6105] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 86.196728][ T6105] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 86.200279][ T6105] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 86.204324][ T6105] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 86.215913][ T6105] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 86.226099][ T6105] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 86.237259][ T6105] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 86.241041][ T6105] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 86.244387][ T6105] usb 7-1: Product: syz [ 86.266781][ T6105] usb 7-1: Manufacturer: syz [ 86.279811][ T6105] cdc_wdm 7-1:1.0: skipping garbage [ 86.282011][ T6105] cdc_wdm 7-1:1.0: skipping garbage [ 86.308898][ T60] cfg80211: failed to load regulatory.db [ 86.316789][ T6105] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 86.319289][ T6105] cdc_wdm 7-1:1.0: Unknown control protocol [ 86.626038][ T6726] syz.3.264 (6726): /proc/6725/oom_adj is deprecated, please use /proc/6725/oom_score_adj instead. [ 86.733783][ T6732] Zero length message leads to an empty skb [ 86.899241][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 6 bytes [ 86.985926][ T6105] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 87.145599][ T6105] usb 5-1: device descriptor read/64, error -71 [ 87.406482][ T6105] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 87.545594][ T6105] usb 5-1: device descriptor read/64, error -71 [ 87.585543][ T6740] input: syz1 as /devices/virtual/input/input14 [ 87.656903][ T6105] usb usb5-port1: attempt power cycle [ 88.015571][ T6105] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 88.036530][ T6105] usb 5-1: device descriptor read/8, error -71 [ 88.135566][ T59] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 88.296979][ T59] usb 8-1: config index 0 descriptor too short (expected 65323, got 119) [ 88.299772][ T59] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.305575][ T6105] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 88.315622][ T59] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.321597][ T59] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.324813][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.335896][ T59] usb 8-1: Product: syz [ 88.337409][ T59] usb 8-1: Manufacturer: syz [ 88.339108][ T6105] usb 5-1: device descriptor read/8, error -71 [ 88.345953][ T59] usb 8-1: SerialNumber: syz [ 88.445893][ T6105] usb usb5-port1: unable to enumerate USB device [ 88.796264][ T10] usb 7-1: USB disconnect, device number 4 [ 88.888462][ T40] audit: type=1326 audit(1764147573.042:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.1.275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 88.899119][ T40] audit: type=1326 audit(1764147573.052:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.1.275" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f37598 code=0x7ffc0000 [ 88.908980][ T40] audit: type=1326 audit(1764147573.052:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.1.275" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f37598 code=0x7ffc0000 [ 88.917054][ T40] audit: type=1326 audit(1764147573.052:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.1.275" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f37598 code=0x7ffc0000 [ 88.924967][ T40] audit: type=1326 audit(1764147573.052:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.1.275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 88.928252][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 88.934087][ T40] audit: type=1326 audit(1764147573.052:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.1.275" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f37598 code=0x7ffc0000 [ 88.944834][ T40] audit: type=1326 audit(1764147573.052:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.1.275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 88.953551][ T40] audit: type=1326 audit(1764147573.052:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.1.275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 88.969109][ T40] audit: type=1326 audit(1764147573.052:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.1.275" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f37598 code=0x7ffc0000 [ 88.978897][ T40] audit: type=1326 audit(1764147573.052:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.1.275" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f37598 code=0x7ffc0000 [ 89.828829][ T840] usb 8-1: USB disconnect, device number 8 [ 89.865666][ T6105] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 90.017380][ T6105] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 90.020659][ T6105] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 90.024492][ T6105] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 90.027975][ T6105] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 90.031538][ T6105] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 90.036410][ T6105] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.039230][ T6105] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.041728][ T6105] usb 7-1: Product: syz [ 90.043051][ T6105] usb 7-1: Manufacturer: syz [ 90.048396][ T6105] cdc_wdm 7-1:1.0: skipping garbage [ 90.050094][ T6105] cdc_wdm 7-1:1.0: skipping garbage [ 90.052900][ T6105] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 90.054784][ T6105] cdc_wdm 7-1:1.0: Unknown control protocol [ 90.659190][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 6 bytes [ 91.063510][ T6826] input: syz1 as /devices/virtual/input/input15 [ 91.267050][ T6832] netlink: 36 bytes leftover after parsing attributes in process `syz.1.304'. [ 91.358392][ T6836] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.685598][ T1345] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 91.848865][ T1345] usb 5-1: config index 0 descriptor too short (expected 65323, got 119) [ 91.857939][ T1345] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.865322][ T1345] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.875594][ T1345] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.885641][ T1345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.889206][ T1345] usb 5-1: Product: syz [ 91.915591][ T1345] usb 5-1: Manufacturer: syz [ 91.925682][ T1345] usb 5-1: SerialNumber: syz [ 92.642477][ T60] usb 7-1: USB disconnect, device number 5 [ 92.781680][ T6857] netlink: 36 bytes leftover after parsing attributes in process `syz.3.313'. [ 92.792270][ T6010] usb 5-1: USB disconnect, device number 13 [ 92.842266][ T6862] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.848951][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.852515][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.858782][ T6862] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 93.365589][ T6010] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 93.536354][ T6010] usb 8-1: Using ep0 maxpacket: 32 [ 93.541053][ T6010] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.545677][ T6010] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.549952][ T6010] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 93.553245][ T6010] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.557711][ T6010] usb 8-1: config 0 descriptor?? [ 93.745201][ T6884] netlink: 36 bytes leftover after parsing attributes in process `syz.0.323'. [ 93.984504][ T6010] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 94.239939][ T6010] usb 8-1: USB disconnect, device number 9 [ 94.519336][ T6897] devtmpfs: Cannot disable swap on remount [ 94.916698][ T6919] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.337' sets config #5 [ 95.543188][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 95.586317][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.226347][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 96.386417][ T10] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 96.404672][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 96.407895][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 96.411132][ T10] usb 5-1: Product: syz [ 96.413083][ T10] usb 5-1: Manufacturer: syz [ 96.414699][ T10] usb 5-1: SerialNumber: syz [ 96.418475][ T10] usb 5-1: config 0 descriptor?? [ 96.628892][ T10] usb 5-1: USB disconnect, device number 14 [ 97.437092][ T7016] netlink: 'syz.1.376': attribute type 4 has an invalid length. [ 97.515575][ T1345] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 97.675685][ T1345] usb 8-1: Using ep0 maxpacket: 16 [ 97.686763][ T1345] usb 8-1: config 0 has no interfaces? [ 97.689836][ T1345] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.692647][ T1345] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 97.705520][ T1345] usb 8-1: SerialNumber: syz [ 97.708398][ T1345] usb 8-1: config 0 descriptor?? [ 97.868606][ T7024] netlink: 'syz.2.379': attribute type 1 has an invalid length. [ 97.883825][ T7024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.898022][ T7024] bond1: (slave ip6gretap1): making interface the new active one [ 97.901304][ T7024] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 97.920597][ T1345] usb 8-1: USB disconnect, device number 10 [ 97.938954][ T7024] veth3: entered promiscuous mode [ 97.942476][ T7024] bond1: (slave veth3): Enslaving as an active interface with a down link [ 99.176176][ T7069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'. [ 99.197275][ T7069] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.617384][ T7105] input: syz1 as /devices/virtual/input/input16 [ 99.651448][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 99.651464][ T40] audit: type=1326 audit(1764147583.802:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.1.418" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 99.678484][ T40] audit: type=1326 audit(1764147583.802:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.1.418" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 99.687261][ T40] audit: type=1326 audit(1764147583.802:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.1.418" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 99.696249][ T40] audit: type=1326 audit(1764147583.802:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.1.418" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 99.704693][ T40] audit: type=1326 audit(1764147583.802:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.1.418" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 99.712137][ T40] audit: type=1326 audit(1764147583.802:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.1.418" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 99.712447][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.420'. [ 99.719119][ T40] audit: type=1326 audit(1764147583.802:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.1.418" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 99.730341][ T40] audit: type=1326 audit(1764147583.802:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.1.418" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 99.732004][ T7111] vlan2: entered promiscuous mode [ 99.738202][ T40] audit: type=1326 audit(1764147583.802:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.1.418" exe="/syz-executor" sig=0 arch=40000003 syscall=330 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 99.740434][ T7111] macvtap0: entered promiscuous mode [ 99.747320][ T40] audit: type=1326 audit(1764147583.802:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.1.418" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 100.315672][ T5313] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 100.496371][ T5313] usb 5-1: config index 0 descriptor too short (expected 65323, got 119) [ 100.499268][ T5313] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.502468][ T5313] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.537873][ T5313] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.541633][ T5313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.544923][ T5313] usb 5-1: Product: syz [ 100.566044][ T5313] usb 5-1: Manufacturer: syz [ 100.575728][ T5313] usb 5-1: SerialNumber: syz [ 100.811682][ T7154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.215693][ T1345] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 101.385616][ T1345] usb 8-1: Using ep0 maxpacket: 16 [ 101.403347][ T1345] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.406957][ T1345] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 101.427453][ T1345] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.430363][ T1345] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.433117][ T1345] usb 8-1: Product: syz [ 101.434576][ T1345] usb 8-1: Manufacturer: syz [ 101.437025][ T1345] usb 8-1: SerialNumber: syz [ 101.666683][ T1345] cdc_ncm 8-1:1.0: bind() failure [ 101.678397][ T1345] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 101.680883][ T1345] cdc_ncm 8-1:1.1: bind() failure [ 101.693300][ T1345] usb 8-1: USB disconnect, device number 11 [ 102.032520][ T840] usb 5-1: USB disconnect, device number 15 [ 103.036440][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 103.039377][ T7200] bridge_slave_1: left allmulticast mode [ 103.041217][ T7200] bridge_slave_1: left promiscuous mode [ 103.042988][ T7200] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.049674][ T7200] bridge_slave_0: left allmulticast mode [ 103.051564][ T7200] bridge_slave_0: left promiscuous mode [ 103.053600][ T7200] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.516507][ T7238] tc_dump_action: action bad kind [ 104.016298][ T7272] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 [ 104.591347][ T7328] netlink: 'syz.1.516': attribute type 5 has an invalid length. [ 104.594449][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 104.796454][ T7343] netlink: 'syz.0.521': attribute type 3 has an invalid length. [ 104.800999][ T7343] netlink: 'syz.0.521': attribute type 3 has an invalid length. [ 105.006762][ T7357] netlink: 'syz.2.529': attribute type 3 has an invalid length. [ 105.010004][ T7357] netlink: 'syz.2.529': attribute type 3 has an invalid length. [ 105.847243][ T7411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.854324][ T7411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.243602][ T7436] netlink: 'syz.3.564': attribute type 3 has an invalid length. [ 106.248451][ T7436] netlink: 'syz.3.564': attribute type 3 has an invalid length. [ 106.291780][ T7439] tmpfs: Bad value for 'mpol' [ 107.194700][ T7481] Illegal XDP return value 4294967274 on prog (id 77) dev syz_tun, expect packet loss! [ 107.273492][ T7488] input: syz1 as /devices/virtual/input/input17 [ 107.432451][ T7502] netlink: 36 bytes leftover after parsing attributes in process `syz.3.590'. [ 107.538729][ T7508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.602712][ T7514] process 'syz.3.595' launched './file2' with NULL argv: empty string added [ 107.734084][ T7523] netlink: 36 bytes leftover after parsing attributes in process `syz.3.599'. [ 107.771089][ T7525] loop7: detected capacity change from 0 to 7 [ 107.776878][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.780408][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 107.784489][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.788263][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 107.791243][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.795794][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 107.799762][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.803158][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 107.806538][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.809759][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 107.813598][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.817048][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 107.819972][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.823322][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 107.827388][ T7525] ldm_validate_partition_table(): Disk read failed. [ 107.876256][ T7528] [ 107.877397][ T7528] ====================================================== [ 107.880339][ T7528] WARNING: possible circular locking dependency detected [ 107.883308][ T7528] syzkaller #0 Not tainted [ 107.885329][ T7528] ------------------------------------------------------ [ 107.888182][ T7528] syz.3.600/7528 is trying to acquire lock: [ 107.890657][ T7528] ffff88801cad1a20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 107.894850][ T7528] [ 107.894850][ T7528] but task is already holding lock: [ 107.897807][ T7528] ffff8880207cf668 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 107.902429][ T7528] [ 107.902429][ T7528] which lock already depends on the new lock. [ 107.902429][ T7528] [ 107.906618][ T7528] [ 107.906618][ T7528] the existing dependency chain (in reverse order) is: [ 107.910255][ T7528] [ 107.910255][ T7528] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 107.913744][ T7528] blk_alloc_queue+0x619/0x760 [ 107.915942][ T7528] blk_mq_alloc_queue+0x172/0x280 [ 107.918225][ T7528] __blk_mq_alloc_disk+0x29/0x120 [ 107.920460][ T7528] loop_add+0x490/0xb70 [ 107.922405][ T7528] loop_init+0x164/0x270 [ 107.924401][ T7528] do_one_initcall+0x123/0x6e0 [ 107.926601][ T7528] kernel_init_freeable+0x5c8/0x920 [ 107.928929][ T7528] kernel_init+0x1c/0x2b0 [ 107.930927][ T7528] ret_from_fork+0x675/0x7d0 [ 107.933069][ T7528] ret_from_fork_asm+0x1a/0x30 [ 107.935247][ T7528] [ 107.935247][ T7528] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 107.935762][ T840] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 107.938213][ T7528] fs_reclaim_acquire+0x102/0x150 [ 107.943143][ T7528] kmem_cache_alloc_noprof+0x5b/0x6e0 [ 107.945574][ T7528] __kernfs_iattrs+0x124/0x3e0 [ 107.947777][ T7528] __kernfs_setattr+0x4d/0x3c0 [ 107.949955][ T7528] kernfs_iop_setattr+0xda/0x120 [ 107.952174][ T7528] notify_change+0x6d2/0x12a0 [ 107.954359][ T7528] do_truncate+0x1d7/0x230 [ 107.956463][ T7528] path_openat+0x2678/0x2cb0 [ 107.958637][ T7528] do_filp_open+0x20b/0x470 [ 107.960416][ T7528] do_sys_openat2+0x11b/0x1d0 [ 107.962099][ T7528] __x64_sys_openat+0x174/0x210 [ 107.964108][ T7528] do_syscall_64+0xcd/0xfa0 [ 107.966280][ T7528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.968869][ T7528] [ 107.968869][ T7528] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 107.972650][ T7528] __lock_acquire+0x126f/0x1c90 [ 107.974933][ T7528] lock_acquire+0x179/0x350 [ 107.976940][ T7528] down_read+0x9b/0x480 [ 107.978892][ T7528] kernfs_iop_getattr+0x9c/0xf0 [ 107.981158][ T7528] vfs_getattr_nosec+0x2ac/0x430 [ 107.983425][ T7528] vfs_getattr+0x4a/0x60 [ 107.985438][ T7528] loop_query_min_dio_size.isra.0+0x117/0x250 [ 107.988183][ T7528] lo_ioctl+0x1430/0x1cb0 [ 107.990252][ T7528] lo_compat_ioctl+0xb9/0x170 [ 107.992272][ T7528] compat_blkdev_ioctl+0x2ee/0x7a0 [ 107.994539][ T7528] __ia32_compat_sys_ioctl+0x242/0x370 [ 107.997102][ T7528] __do_fast_syscall_32+0x7c/0x300 [ 107.999462][ T7528] do_fast_syscall_32+0x32/0x80 [ 108.001710][ T7528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.004550][ T7528] [ 108.004550][ T7528] other info that might help us debug this: [ 108.004550][ T7528] [ 108.008789][ T7528] Chain exists of: [ 108.008789][ T7528] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 108.008789][ T7528] [ 108.014824][ T7528] Possible unsafe locking scenario: [ 108.014824][ T7528] [ 108.017950][ T7528] CPU0 CPU1 [ 108.020193][ T7528] ---- ---- [ 108.022449][ T7528] lock(&q->q_usage_counter(io)#24); [ 108.024718][ T7528] lock(fs_reclaim); [ 108.027451][ T7528] lock(&q->q_usage_counter(io)#24); [ 108.030677][ T7528] rlock(&root->kernfs_iattr_rwsem); [ 108.032900][ T7528] [ 108.032900][ T7528] *** DEADLOCK *** [ 108.032900][ T7528] [ 108.036204][ T7528] 3 locks held by syz.3.600/7528: [ 108.038502][ T7528] #0: ffff888020030440 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 108.042796][ T7528] #1: ffff8880207cf668 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 108.047537][ T7528] #2: ffff8880207cf6a0 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 108.052458][ T7528] [ 108.052458][ T7528] stack backtrace: [ 108.054868][ T7528] CPU: 2 UID: 0 PID: 7528 Comm: syz.3.600 Not tainted syzkaller #0 PREEMPT(full) [ 108.054894][ T7528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.054906][ T7528] Call Trace: [ 108.054913][ T7528] [ 108.054922][ T7528] dump_stack_lvl+0x116/0x1f0 [ 108.054949][ T7528] print_circular_bug+0x275/0x350 [ 108.054981][ T7528] check_noncircular+0x14c/0x170 [ 108.055008][ T7528] __lock_acquire+0x126f/0x1c90 [ 108.055038][ T7528] lock_acquire+0x179/0x350 [ 108.055061][ T7528] ? kernfs_iop_getattr+0x9c/0xf0 [ 108.055083][ T7528] ? __pfx___might_resched+0x10/0x10 [ 108.055101][ T7528] down_read+0x9b/0x480 [ 108.055124][ T7528] ? kernfs_iop_getattr+0x9c/0xf0 [ 108.055143][ T7528] ? find_held_lock+0x2b/0x80 [ 108.055160][ T7528] ? __pfx_down_read+0x10/0x10 [ 108.055183][ T7528] ? kernfs_root+0xee/0x2a0 [ 108.055205][ T7528] kernfs_iop_getattr+0x9c/0xf0 [ 108.055227][ T7528] vfs_getattr_nosec+0x2ac/0x430 [ 108.055250][ T7528] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 108.055273][ T7528] vfs_getattr+0x4a/0x60 [ 108.055296][ T7528] loop_query_min_dio_size.isra.0+0x117/0x250 [ 108.055317][ T7528] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 108.055333][ T7528] ? mark_held_locks+0x49/0x80 [ 108.055360][ T7528] ? blk_freeze_queue_start+0xec/0x140 [ 108.055377][ T7528] lo_ioctl+0x1430/0x1cb0 [ 108.055394][ T7528] ? __pfx_lo_ioctl+0x10/0x10 [ 108.055414][ T7528] ? kasan_quarantine_put+0x10a/0x240 [ 108.055432][ T7528] ? lockdep_hardirqs_on+0x7c/0x110 [ 108.055451][ T7528] ? blk_get_meta_cap+0xbc/0x700 [ 108.055468][ T7528] ? find_held_lock+0x2b/0x80 [ 108.055485][ T7528] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 108.055506][ T7528] ? blkdev_common_ioctl+0x1d6/0x2470 [ 108.055523][ T7528] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 108.055542][ T7528] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 108.055564][ T7528] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.055592][ T7528] ? do_vfs_ioctl+0x128/0x14f0 [ 108.055614][ T7528] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 108.055637][ T7528] lo_compat_ioctl+0xb9/0x170 [ 108.055654][ T7528] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 108.055671][ T7528] compat_blkdev_ioctl+0x2ee/0x7a0 [ 108.055689][ T7528] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 108.055709][ T7528] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 108.055727][ T7528] __ia32_compat_sys_ioctl+0x242/0x370 [ 108.055754][ T7528] __do_fast_syscall_32+0x7c/0x300 [ 108.055775][ T7528] do_fast_syscall_32+0x32/0x80 [ 108.055797][ T7528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.055819][ T7528] RIP: 0023:0xf70ad579 [ 108.055834][ T7528] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 108.055850][ T7528] RSP: 002b:00000000f547c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 108.055867][ T7528] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000004c06 [ 108.055879][ T7528] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.055889][ T7528] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.055899][ T7528] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 108.055908][ T7528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.055924][ T7528] [ 108.186337][ C2] hpet_rtc_timer_reinit: 48 callbacks suppressed [ 108.186354][ C2] hpet: Lost 19 RTC interrupts [ 108.193608][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.196533][ T840] usb 6-1: config index 0 descriptor too short (expected 65323, got 119) [ 108.196842][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 108.199505][ T840] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.205215][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.208155][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 108.215869][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.219751][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 108.223994][ T840] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.224198][ T7525] Dev loop7: unable to read RDB block 0 [ 108.229682][ T840] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.230796][ T7525] loop7: unable to read partition table [ 108.233005][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.235079][ T7525] loop7: partition table beyond EOD, [ 108.237780][ T840] usb 6-1: Product: syz [ 108.237790][ T840] usb 6-1: Manufacturer: syz [ 108.237797][ T840] usb 6-1: SerialNumber: syz [ 108.246772][ T7525] truncated [ 108.248019][ T7525] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 108.261276][ T5956] ldm_validate_partition_table(): Disk read failed. [ 108.264557][ T5956] Dev loop7: unable to read RDB block 0 [ 108.268888][ T5956] loop7: unable to read partition table [ 108.270929][ T5956] loop7: partition table beyond EOD, truncated [ 108.274670][ T7528] ldm_validate_partition_table(): Disk read failed. [ 108.278653][ T7528] Dev loop7: unable to read RDB block 0 [ 108.281511][ T7528] loop7: unable to read partition table [ 108.283962][ T7528] loop7: partition table beyond EOD, truncated [ 108.286387][ T7528] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 108.907937][ T59] usb 6-1: USB disconnect, device number 7