last executing test programs: 7m37.925034999s ago: executing program 1 (id=130): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000009c0000009c00000003000000000000000700000d000000000d000000000000000d0000000200000002000000040000000d00005583e93136ecfe0f00040000000e00000005000000060000000300000f0500000000000009040000000e"], 0x0, 0xb7, 0x0, 0x1, 0x9}, 0x28) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa23ffffffffffff0806000108000604"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 7m37.740159875s ago: executing program 1 (id=132): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) truncate(&(0x7f0000000100)='./cgroup\x00', 0x1000) 7m37.487161189s ago: executing program 1 (id=134): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0049364, &(0x7f00000001c0)) 7m37.235517637s ago: executing program 1 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 7m37.002372963s ago: executing program 1 (id=140): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = getpid() syz_open_procfs(r0, &(0x7f0000000080)='net/ip_tables_names\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') 7m36.615578511s ago: executing program 1 (id=145): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x2f126000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) cachestat(r1, &(0x7f0000000180)={0xff}, &(0x7f0000002280), 0x0) 7m36.082795836s ago: executing program 32 (id=145): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x2f126000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) cachestat(r1, &(0x7f0000000180)={0xff}, &(0x7f0000002280), 0x0) 7m8.722356692s ago: executing program 2 (id=396): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r1, 0x3516, 0x67f, 0x64, 0x0, 0x0) 7m8.119478935s ago: executing program 2 (id=404): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 7m7.528211246s ago: executing program 2 (id=408): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x12, r0, 0x0) unshare(0x22020400) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f0000000340)='N', 0x1}], 0x1, 0x0) 7m7.325024357s ago: executing program 2 (id=412): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 7m7.066563457s ago: executing program 2 (id=417): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 7m6.270176418s ago: executing program 2 (id=426): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000080)) 7m5.643593994s ago: executing program 33 (id=426): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000080)) 1m28.485338824s ago: executing program 5 (id=4654): close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0xfffffffe}) setpriority(0x1, 0x0, 0x3) 1m27.660656135s ago: executing program 5 (id=4665): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xc}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/19, 0x13}}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1m27.443284962s ago: executing program 5 (id=4670): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$igmp6(0xa, 0x3, 0x2) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) creat(&(0x7f0000000000)='./file0\x00', 0x30) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000980)) 1m26.444937918s ago: executing program 5 (id=4682): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m26.330736266s ago: executing program 5 (id=4684): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x80002018}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x20002008}) 1m25.964514756s ago: executing program 5 (id=4686): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x8004) io_uring_enter(0xffffffffffffffff, 0x221f, 0x0, 0x23, 0x0, 0x0) 1m25.690089967s ago: executing program 34 (id=4686): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x8004) io_uring_enter(0xffffffffffffffff, 0x221f, 0x0, 0x23, 0x0, 0x0) 54.573018319s ago: executing program 4 (id=5076): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001780)={0x0, 0x9005}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 54.050241369s ago: executing program 4 (id=5081): syz_emit_ethernet(0x1d5, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed04", 0x19f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "0000050000000000260004"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9"}, {0x0, 0xd, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba"}]}}}}}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 53.688007281s ago: executing program 4 (id=5085): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000340), &(0x7f00000000c0)=""/109}, 0x20) 53.387918825s ago: executing program 4 (id=5086): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) syz_clone(0x180, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0049364, &(0x7f00000001c0)) 52.869962094s ago: executing program 4 (id=5094): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) 52.178176967s ago: executing program 4 (id=5097): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x3, r1, r1, 0x5, 0x3719, 0x8}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000000140)="11cd", 0x2, 0x7fff800000000002}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000380)={0x28, 0x2, r1, r1, 0x1000, 0x5, 0x9}) 51.707430458s ago: executing program 35 (id=5097): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x3, r1, r1, 0x5, 0x3719, 0x8}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000000140)="11cd", 0x2, 0x7fff800000000002}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000380)={0x28, 0x2, r1, r1, 0x1000, 0x5, 0x9}) 31.784802279s ago: executing program 8 (id=5286): sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 31.653443299s ago: executing program 8 (id=5289): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x100007c8) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 31.504704846s ago: executing program 8 (id=5292): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) io_uring_setup(0x5237, &(0x7f00000002c0)) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000100)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 30.51725821s ago: executing program 8 (id=5306): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x141) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x0) 30.352971132s ago: executing program 8 (id=5309): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x4, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) readv(r0, &(0x7f0000001540)=[{&(0x7f0000004580)=""/4107, 0x100b}], 0x17f) 30.06985252s ago: executing program 8 (id=5315): sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x200400d0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000040)) 29.699678937s ago: executing program 36 (id=5315): sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x200400d0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000040)) 5.087499377s ago: executing program 7 (id=5565): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r0) symlink(0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) 4.654519545s ago: executing program 7 (id=5572): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 4.444546959s ago: executing program 7 (id=5576): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xbb5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x14, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.011931s ago: executing program 7 (id=5597): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x1, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r2, 0x5}) 1.832145815s ago: executing program 7 (id=5601): r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x9471) lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[@ANYBLOB="0415"], 0x2, 0x1) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x2) 1.684221924s ago: executing program 7 (id=5604): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, &(0x7f00000004c0)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.295269394s ago: executing program 9 (id=5612): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x2, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1) 1.176092498s ago: executing program 9 (id=5613): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r0, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000840)=[0x0], 0x1, 0x0, &(0x7f0000000980), &(0x7f0000000880), 0x0}, 0x40) 1.175737674s ago: executing program 6 (id=5614): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000003fc0)=@gcm_256={{0x304}, "9d356ba6ef1186e5", "ac68142b4600c9915760c19d79e92d4b59c3f4f028e005ab96f910fbc598ee8f", "dd271d0d"}, 0x38) 1.158509224s ago: executing program 3 (id=5616): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x10001, 0x0, 0x0, 0x4, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000001f00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 968.065705ms ago: executing program 6 (id=5617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x1008c69) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x100000, 0x8, r2, 0x8}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0xfffffffffffffffc, 0x0, 0x1, r2, 0x8}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffff001, 0x0, 0x1, r2, 0xc}) 901.87457ms ago: executing program 9 (id=5618): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a1"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 901.553779ms ago: executing program 3 (id=5619): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) connect$tipc(r1, &(0x7f0000000140)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x4}}, 0x10) 878.273678ms ago: executing program 0 (id=5620): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) r2 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 747.40893ms ago: executing program 0 (id=5621): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @link_local, 'gre0\x00'}}, 0x1e) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 735.882023ms ago: executing program 3 (id=5622): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000008000]}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "280901dce108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x5cd) 681.865432ms ago: executing program 6 (id=5623): timer_create(0x8, 0x0, &(0x7f00009b1ffc)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r1}, 0x18) timer_delete(0x0) 553.727066ms ago: executing program 3 (id=5624): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000007a40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}], 0x1, 0x4004041) recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000a40)=""/190, 0xbe}], 0x1}, 0xffffff0a}], 0x1, 0x160, 0x0) 527.892532ms ago: executing program 6 (id=5625): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 482.225119ms ago: executing program 9 (id=5626): syz_io_uring_setup(0x5be6, &(0x7f0000000280)={0x0, 0xac3a, 0x13589}, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x21002, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r0, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000540)='syzkaller\x00', 0x5, 0xdb, &(0x7f0000003e40)=""/219, 0x41000, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 481.442632ms ago: executing program 0 (id=5627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) close_range(r0, r1, 0x0) 377.498782ms ago: executing program 3 (id=5628): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global']) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 314.242921ms ago: executing program 9 (id=5629): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 313.454885ms ago: executing program 0 (id=5630): mknodat$null(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8, 0x103) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x9, 0x3833, 0x80, 0x5, 0x7, "69df790646a0e7c6c95842451a7a5805dcc6a08af55043573ae151d5b24b6fe29bd66e6fad171180ed198b44826f997434afe4d883b554816b9c0073fdb48c9046a60b473086c788cd8e29e80bfc85b886e451753fd39a91d838897c79b8c7974a3d5524d6a411f7af44474f8fa3f4a08701abfaf74ec30411194d0011c1e3da"}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 229.878493ms ago: executing program 6 (id=5631): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 185.96244ms ago: executing program 3 (id=5632): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xce9c, 0x8, 0x3, 0x40004330}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x1, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x5}, 0x94) 162.555186ms ago: executing program 0 (id=5633): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000006d40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}], 0x1, 0xc14af5437638e3ce) ppoll(&(0x7f0000007340)=[{r1, 0xf701}], 0x1, 0x0, 0x0, 0x0) 93.210924ms ago: executing program 6 (id=5634): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 41.934621ms ago: executing program 9 (id=5635): read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x408880, 0x40) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mount(0x0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x10, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) 0s ago: executing program 0 (id=5636): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000080)={0x0, 0x10, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000740)=""/377, 0x179) kernel console output (not intermixed with test programs): d USB device number 38 using dummy_hcd [ 427.586377][T15638] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3977'. [ 427.679927][ T1211] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 427.691244][ T1211] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 427.702172][ T1211] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 427.712038][ T1211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.731879][T15625] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 427.800132][ T1211] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 428.008756][ T1211] usb 7-1: USB disconnect, device number 38 [ 428.024284][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 428.309491][T15660] syzkaller0: entered allmulticast mode [ 428.331219][T15660] syzkaller0 (unregistering): left allmulticast mode [ 428.461817][T15664] input: syz0 as /devices/virtual/input/input62 [ 429.054325][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 429.624842][T15695] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 429.866598][T15701] geneve2: entered promiscuous mode [ 429.895583][T15701] geneve2: entered allmulticast mode [ 430.094468][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 431.134502][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 431.264667][ T1211] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 431.461228][ T1211] usb 5-1: Using ep0 maxpacket: 32 [ 431.486802][ T1211] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 431.504319][ T1211] usb 5-1: config 0 has no interface number 0 [ 431.524235][ T1211] usb 5-1: config 0 interface 184 has no altsetting 0 [ 431.546807][ T1211] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 431.574349][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.592663][ T1211] usb 5-1: Product: syz [ 431.634180][ T1211] usb 5-1: Manufacturer: syz [ 431.644218][ T1211] usb 5-1: SerialNumber: syz [ 431.668956][ T1211] usb 5-1: config 0 descriptor?? [ 431.710924][ T1211] smsc75xx v1.0.0 [ 432.174445][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 432.949883][ T1211] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 432.977040][ T1211] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 433.005160][ T1211] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 433.026440][ T1211] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 433.040840][ T1211] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 433.077620][ T1211] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 433.103148][ T1211] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 433.143031][ T1211] usb 5-1: USB disconnect, device number 45 [ 433.224195][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 433.404654][ T1836] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 433.564267][ T1836] usb 4-1: Using ep0 maxpacket: 16 [ 433.603089][ T1836] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.638866][ T1836] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 433.664638][ T1836] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 433.679640][ T1836] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 433.695520][ T1836] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.705174][ T1836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 433.727514][ T1836] usb 4-1: SerialNumber: syz [ 433.740808][T15781] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 433.748951][T15781] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 433.756565][ T5909] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 433.776500][ T1836] hub 4-1:1.0: bad descriptor, ignoring hub [ 433.782501][ T1836] hub 4-1:1.0: probe with driver hub failed with error -5 [ 433.840498][T15800] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4043'. [ 433.920066][ T5909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.944480][ T5909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.963628][ T5909] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 433.986393][ T5909] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 434.009364][T15781] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 434.017325][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.027539][T15781] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 434.042613][ T5909] usb 7-1: config 0 descriptor?? [ 434.264205][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 434.495769][ T5909] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 434.532856][ T1836] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 434.717235][T15828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4054'. [ 434.781861][T15830] loop2: detected capacity change from 0 to 7 [ 434.789873][T15830] loop2: [POWERTEC] p1 p2 p3 [ 434.795169][T15830] loop2: p1 start 1768123251 is beyond EOD, truncated [ 434.802508][T15830] loop2: p2 start 1700867426 is beyond EOD, truncated [ 434.809480][T15830] loop2: p3 start 2735865856 is beyond EOD, truncated [ 434.816771][ T5852] usb 4-1: USB disconnect, device number 40 [ 434.825144][ T5852] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 435.018885][T15837] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 435.100792][ C1] plantronics 0003:047F:FFFF.0037: hid_field_extract() called with n (132) > 32! (swapper/1) [ 435.294472][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.323793][ T5963] usb 7-1: USB disconnect, device number 39 [ 435.445972][T15855] loop9: detected capacity change from 0 to 7 [ 435.453021][T15855] buffer_io_error: 311 callbacks suppressed [ 435.453041][T15855] Buffer I/O error on dev loop9, logical block 0, async page read [ 435.477323][T15855] Buffer I/O error on dev loop9, logical block 0, async page read [ 435.487834][T15855] Buffer I/O error on dev loop9, logical block 0, async page read [ 435.498516][T15855] Buffer I/O error on dev loop9, logical block 0, async page read [ 435.513020][T15855] Buffer I/O error on dev loop9, logical block 0, async page read [ 435.522915][T15855] Buffer I/O error on dev loop9, logical block 0, async page read [ 435.533296][T15855] Buffer I/O error on dev loop9, logical block 0, async page read [ 435.542748][T15855] ldm_validate_partition_table(): Disk read failed. [ 435.558354][T15855] Buffer I/O error on dev loop9, logical block 0, async page read [ 435.567966][T15855] Buffer I/O error on dev loop9, logical block 0, async page read [ 435.580687][T15855] Buffer I/O error on dev loop9, logical block 0, async page read [ 435.589165][T15855] Dev loop9: unable to read RDB block 0 [ 435.596160][T15855] loop9: unable to read partition table [ 435.602493][T15855] loop9: partition table beyond EOD, truncated [ 435.611157][T15855] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 435.611157][T15855] ) failed (rc=-5) [ 435.894883][T15867] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 436.042608][T15874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4071'. [ 436.095985][T15874] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.105337][T15874] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.114171][T15874] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.122931][T15874] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.153579][T15874] vxlan0: entered promiscuous mode [ 436.235355][ T5852] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 436.334223][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 436.414342][ T5852] usb 4-1: Using ep0 maxpacket: 16 [ 436.426368][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.451558][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.494499][ T5852] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 436.517659][ T5852] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 436.554565][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.577009][ T5852] usb 4-1: config 0 descriptor?? [ 436.997093][T15896] netlink: 'syz.5.4083': attribute type 10 has an invalid length. [ 437.026675][ T5852] HID 045e:07da: Invalid code 65791 type 1 [ 437.059512][ T5852] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0038/input/input63 [ 437.102790][ T5852] microsoft 0003:045E:07DA.0038: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 437.265985][ T5909] usb 4-1: USB disconnect, device number 41 [ 437.374218][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 437.524410][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4086'. [ 437.604659][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4086'. [ 438.391649][T15927] input: syz1 as /devices/virtual/input/input64 [ 438.414633][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 438.533078][ T5909] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 438.589202][ T5909] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 439.454244][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 439.478530][ T1017] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 440.494422][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 440.757572][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 440.757592][ T30] audit: type=1326 audit(1753974571.633:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15978 comm="syz.6.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0954d8eb69 code=0x7fc00000 [ 441.384425][ T5852] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 441.534356][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 441.565239][ T5852] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 441.586585][ T5852] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.606968][ T5852] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.631661][ T5852] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 441.657561][ T5852] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 441.667823][ T5852] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 441.676067][ T5852] usb 7-1: Manufacturer: syz [ 441.683879][ T5852] usb 7-1: config 0 descriptor?? [ 441.834416][ T978] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 442.006136][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 442.025826][ T978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.040297][ T978] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 442.067044][ T978] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 442.084215][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.104372][ T978] usb 4-1: Product: syz [ 442.114533][ T978] usb 4-1: Manufacturer: syz [ 442.119248][ T978] usb 4-1: SerialNumber: syz [ 442.122007][ T5852] appleir 0003:05AC:8243.003A: unknown main item tag 0x0 [ 442.147767][ T978] usb 4-1: config 0 descriptor?? [ 442.153501][ T5852] appleir 0003:05AC:8243.003A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 442.396808][ T43] usb 7-1: USB disconnect, device number 40 [ 442.505247][ T5852] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 442.572695][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 442.580273][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 442.584325][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 442.597731][ T978] usb 4-1: USB disconnect, device number 42 [ 442.688250][ T5852] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.700057][ T5852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 442.711244][ T5852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 442.722078][ T5852] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 442.735942][ T5852] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 442.746121][ T5852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.756889][ T5852] usb 6-1: config 0 descriptor?? [ 442.804319][ T5963] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 442.883559][T16054] evm: overlay not supported [ 442.987531][ T5963] usb 5-1: Using ep0 maxpacket: 16 [ 442.998916][ T5963] usb 5-1: config 0 has no interfaces? [ 443.007355][ T5963] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 443.020512][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.052405][ T5963] usb 5-1: config 0 descriptor?? [ 443.208002][ T5852] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 443.277034][ T5852] usb 5-1: USB disconnect, device number 46 [ 443.447832][ T5909] usb 6-1: USB disconnect, device number 39 [ 443.614196][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 443.956068][T16084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4157'. [ 444.239876][T16090] netlink: 'syz.5.4158': attribute type 4 has an invalid length. [ 444.250760][T16084] hsr_slave_0 (unregistering): left promiscuous mode [ 444.654307][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 444.734296][ T5909] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 444.966310][ T5909] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 444.975769][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.022936][ T5909] usb 5-1: config 0 descriptor?? [ 445.285390][ T5909] kaweth 5-1:0.0: Firmware present in device. [ 445.450507][ T5909] kaweth 5-1:0.0: Statistics collection: 0 [ 445.465439][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.505099][ T5909] kaweth 5-1:0.0: Multicast filter limit: 0 [ 445.521844][ T5909] kaweth 5-1:0.0: MTU: 0 [ 445.534458][ T5909] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 445.694259][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 446.063937][ T5909] kaweth 5-1:0.0: kaweth interface created at eth9 [ 446.265829][T16138] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.276160][ T5909] usb 5-1: USB disconnect, device number 47 [ 446.618560][T16152] loop2: detected capacity change from 0 to 7 [ 446.665434][T16152] Dev loop2: unable to read RDB block 7 [ 446.671089][T16152] loop2: AHDI p1 p2 p3 [ 446.724214][T16152] loop2: partition table partially beyond EOD, truncated [ 446.731489][T16152] loop2: p1 start 1634624559 is beyond EOD, truncated [ 446.744446][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 446.754222][T16152] loop2: p2 start 1702059890 is beyond EOD, truncated [ 447.184246][ T5963] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 447.204222][ T5909] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 447.354230][ T5909] usb 1-1: Using ep0 maxpacket: 8 [ 447.354652][ T5963] usb 5-1: Using ep0 maxpacket: 32 [ 447.366497][ T5909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.379704][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.384785][ T5909] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 447.401008][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.413663][ T5963] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 447.423505][ T5909] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 447.426063][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.433084][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.452706][ T5909] usb 1-1: Product: syz [ 447.455411][ T5963] usb 5-1: config 0 descriptor?? [ 447.462214][ T5909] usb 1-1: Manufacturer: syz [ 447.472407][ T5909] usb 1-1: SerialNumber: syz [ 447.474564][ T5963] hub 5-1:0.0: USB hub found [ 447.487729][ T5909] usb 1-1: config 0 descriptor?? [ 447.685300][ T5963] hub 5-1:0.0: 1 port detected [ 447.774435][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 447.942101][T16178] IPv6: NLM_F_REPLACE set, but no existing node found! [ 448.053036][T16182] netlink: 'syz.3.4198': attribute type 1 has an invalid length. [ 448.113270][T16182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 448.152992][ T5909] usb 1-1: USB disconnect, device number 41 [ 448.157373][T16188] bond1: (slave ip6gretap1): making interface the new active one [ 448.199400][T16188] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 448.315672][ T925] hub 5-1:0.0: activate --> -90 [ 448.723318][ T5963] usb 5-1: USB disconnect, device number 48 [ 448.814411][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 448.944408][ T925] usb 5-1-port1: config error [ 449.357244][T16210] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 449.771319][ T1017] Bluetooth: hci5: Frame reassembly failed (-84) [ 449.854215][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 450.364794][ T925] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 450.441336][T16235] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4217'. [ 450.455887][T16235] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4217'. [ 450.468098][T16235] netlink: 'syz.0.4217': attribute type 6 has an invalid length. [ 450.476517][T16235] netlink: 'syz.0.4217': attribute type 5 has an invalid length. [ 450.504248][T16235] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4217'. [ 450.535946][ T925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.568097][ T925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.604254][ T925] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 450.654303][ T925] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 450.676354][ T925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.691126][ T925] usb 6-1: config 0 descriptor?? [ 450.894219][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 451.126385][ T925] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 451.775514][ T5857] Bluetooth: hci5: command 0x1003 tx timeout [ 451.784544][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 451.934187][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 451.950099][ T925] usb 6-1: USB disconnect, device number 40 [ 452.051762][T16274] netlink: 'syz.0.4235': attribute type 12 has an invalid length. [ 452.633793][T16290] 9pnet: p9_errstr2errno: server reported unknown error l [ 452.984213][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 453.017275][ T30] audit: type=1326 audit(1753974583.883:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16299 comm="syz.4.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88378eb69 code=0x7ffc0000 [ 453.063484][ T30] audit: type=1326 audit(1753974583.883:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16299 comm="syz.4.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88378eb69 code=0x7ffc0000 [ 453.119178][ T30] audit: type=1326 audit(1753974583.893:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16299 comm="syz.4.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88378eb69 code=0x7ffc0000 [ 453.158354][ T30] audit: type=1326 audit(1753974583.893:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16299 comm="syz.4.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88378eb69 code=0x7ffc0000 [ 453.244906][ T30] audit: type=1326 audit(1753974583.893:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16299 comm="syz.4.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb88372ad69 code=0x7ffc0000 [ 453.311620][ T30] audit: type=1326 audit(1753974583.893:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16299 comm="syz.4.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb88372ad69 code=0x7ffc0000 [ 453.376543][ T30] audit: type=1326 audit(1753974583.893:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16299 comm="syz.4.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb88372ad69 code=0x7ffc0000 [ 453.447252][ T30] audit: type=1326 audit(1753974583.893:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16299 comm="syz.4.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb88372ad69 code=0x7ffc0000 [ 453.491212][ T30] audit: type=1326 audit(1753974583.893:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16299 comm="syz.4.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb88372ad69 code=0x7ffc0000 [ 453.541425][ T30] audit: type=1326 audit(1753974583.893:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16299 comm="syz.4.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb88378eb69 code=0x7ffc0000 [ 454.014204][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 455.044334][ T5852] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 455.054272][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 455.214710][ T5852] usb 6-1: Using ep0 maxpacket: 8 [ 455.220787][ T5852] usb 6-1: too many configurations: 120, using maximum allowed: 8 [ 455.256227][ T5852] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 455.276848][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 455.294170][ T5852] usb 6-1: Product: syz [ 455.298419][ T5852] usb 6-1: Manufacturer: syz [ 455.303059][ T5852] usb 6-1: SerialNumber: syz [ 455.318667][ T5852] usb 6-1: config 0 descriptor?? [ 455.336925][ T5852] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 455.345356][ T5852] usb 6-1: setting power ON [ 455.350383][ T5852] dvb-usb: bulk message failed: -22 (2/0) [ 455.375006][ T5852] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 455.386721][ T5852] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 455.404199][ T5852] usb 6-1: media controller created [ 455.449265][ T5852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 455.476896][ T5909] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 455.500174][ T5852] usb 6-1: selecting invalid altsetting 6 [ 455.512179][ T5852] usb 6-1: digital interface selection failed (-22) [ 455.522316][ T5852] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 455.530948][ T925] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 455.536934][T16357] dvb-usb: bulk message failed: -22 (3/0) [ 455.550939][T16357] dvb-usb: bulk message failed: -22 (4/0) [ 455.551922][ T5852] usb 6-1: setting power OFF [ 455.571116][T16357] cxusb: i2c read failed [ 455.575636][ T5852] dvb-usb: bulk message failed: -22 (2/0) [ 455.581814][ T5852] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 455.596014][ T5852] (NULL device *): no alternate interface [ 455.650392][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 455.653847][ T5852] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 455.664518][ T5909] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 455.688777][ T5909] usb 5-1: config 0 has no interface number 0 [ 455.710108][ T925] usb 7-1: Using ep0 maxpacket: 16 [ 455.721871][ T5852] usb 6-1: USB disconnect, device number 41 [ 455.724486][ T5909] usb 5-1: config 0 interface 184 has no altsetting 0 [ 455.728655][ T925] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.762941][ T925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 455.763360][ T5909] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 455.789372][ T925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 455.803888][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.814510][ T925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 455.834322][ T5909] usb 5-1: Product: syz [ 455.841200][ T925] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.860047][ T5909] usb 5-1: Manufacturer: syz [ 455.876051][ T925] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 455.879003][ T5909] usb 5-1: SerialNumber: syz [ 455.885761][ T925] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 455.905189][ T5909] usb 5-1: config 0 descriptor?? [ 455.910348][ T925] usb 7-1: Manufacturer: syz [ 455.925635][ T925] usb 7-1: config 0 descriptor?? [ 455.945758][ T5909] smsc75xx v1.0.0 [ 456.094278][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 456.316446][ T925] rc_core: IR keymap rc-hauppauge not found [ 456.337576][ T925] Registered IR keymap rc-empty [ 456.363536][ T925] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 456.395448][ T925] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 456.445190][ T925] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 456.473582][ T925] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input67 [ 456.514786][ T925] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 456.545242][ T5909] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 456.577206][ T925] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 456.584430][ T5909] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 456.614307][ T925] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 456.648374][ T925] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 456.684386][ T925] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 456.719934][ T925] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 456.744934][ T925] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 456.786267][ T5909] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 456.806658][ T5909] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 456.819498][ T925] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 456.821834][ T5909] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 456.841046][ T5909] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 456.853496][ T5909] usb 5-1: USB disconnect, device number 49 [ 456.880811][ T925] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 456.904426][ T925] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 456.953885][ T925] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 456.992070][ T925] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 457.022745][ T925] usb 7-1: USB disconnect, device number 41 [ 457.134294][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 457.213918][T16403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4280'. [ 457.823916][T16430] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4292'. [ 457.931308][T16433] loop2: detected capacity change from 0 to 7 [ 457.941109][T16433] Dev loop2: unable to read RDB block 7 [ 457.953765][T16433] loop2: AHDI p3 p4 [ 457.957984][T16433] loop2: partition table partially beyond EOD, truncated [ 457.967147][T16433] loop2: p3 start 1869967406 is beyond EOD, truncated [ 458.174187][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 459.214324][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 459.471881][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4325'. [ 459.489114][T16498] veth1_macvtap: left promiscuous mode [ 460.255486][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 460.758271][T16537] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 461.294320][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 461.350968][ T5909] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 461.836996][T16578] xt_hashlimit: max too large, truncated to 1048576 [ 462.094581][ T1836] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 462.265630][ T1836] usb 5-1: Using ep0 maxpacket: 32 [ 462.279367][ T1836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 462.302892][ T1836] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 462.334190][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 462.351500][ T1836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.379012][ T1836] usb 5-1: config 0 descriptor?? [ 462.743319][T16600] vlan2: entered allmulticast mode [ 462.769325][T16600] dummy0: entered allmulticast mode [ 462.819468][ T1836] corsair-cpro 0003:1B1C:0C10.003D: unknown main item tag 0x0 [ 462.853901][ T1836] corsair-cpro 0003:1B1C:0C10.003D: unknown main item tag 0x0 [ 462.878973][ T1836] corsair-cpro 0003:1B1C:0C10.003D: unknown main item tag 0x0 [ 462.890070][ T1836] corsair-cpro 0003:1B1C:0C10.003D: unknown main item tag 0x0 [ 462.919892][ T1836] corsair-cpro 0003:1B1C:0C10.003D: unknown main item tag 0x0 [ 462.927933][T16606] team0: entered promiscuous mode [ 462.937501][T16606] team_slave_0: entered promiscuous mode [ 462.944948][ T1836] corsair-cpro 0003:1B1C:0C10.003D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 462.961990][T16606] team_slave_1: entered promiscuous mode [ 463.021013][T16607] vlan0: left allmulticast mode [ 463.038276][ T1836] corsair-cpro 0003:1B1C:0C10.003D: probe with driver corsair-cpro failed with error -71 [ 463.048835][T16607] bridge0: port 3(vlan0) entered disabled state [ 463.093326][ T1836] usb 5-1: USB disconnect, device number 50 [ 463.113394][T16607] team0: Port device vlan0 added [ 463.167962][T16605] team0: left promiscuous mode [ 463.173435][T16605] team_slave_0: left promiscuous mode [ 463.186993][T16605] team_slave_1: left promiscuous mode [ 463.374290][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 464.078598][T16649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4389'. [ 464.184271][ T1836] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 464.344242][ T1836] usb 6-1: Using ep0 maxpacket: 32 [ 464.362329][ T1836] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 464.386066][ T1836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.410243][ T1836] usb 6-1: config 0 descriptor?? [ 464.424203][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 464.437396][ T1836] gspca_main: sunplus-2.14.0 probing 041e:400b [ 464.468820][T16661] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4393'. [ 464.952573][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4404'. [ 465.314296][ T5963] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 465.452137][ T1836] gspca_sunplus: reg_w_riv err -71 [ 465.464184][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 465.465345][ T1836] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 465.472049][ T5963] usb 4-1: Using ep0 maxpacket: 32 [ 465.509348][ T5963] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 465.517915][ T5963] usb 4-1: config 0 has no interface number 0 [ 465.526998][ T1836] usb 6-1: USB disconnect, device number 42 [ 465.538637][ T5963] usb 4-1: config 0 interface 184 has no altsetting 0 [ 465.562937][ T5963] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 465.578801][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.594187][ T5963] usb 4-1: Product: syz [ 465.613791][ T5963] usb 4-1: Manufacturer: syz [ 465.632167][ T5963] usb 4-1: SerialNumber: syz [ 465.646937][ T5963] usb 4-1: config 0 descriptor?? [ 465.681909][ T5963] smsc75xx v1.0.0 [ 466.178390][T16716] netlink: 'syz.6.4418': attribute type 21 has an invalid length. [ 466.214490][T16716] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4418'. [ 466.313438][ T5963] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 466.345776][ T5963] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 466.376852][T16722] xt_hashlimit: size too large, truncated to 1048576 [ 466.494278][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 466.791439][ T5963] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 466.837518][ T5963] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 466.874517][ T5963] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 466.899194][ T5963] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 466.954674][ T5963] usb 4-1: USB disconnect, device number 43 [ 467.073929][T16736] netlink: 'syz.6.4426': attribute type 1 has an invalid length. [ 467.104335][T16736] netlink: 'syz.6.4426': attribute type 4 has an invalid length. [ 467.125468][T16736] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.4426'. [ 467.323622][T16746] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4428'. [ 467.534185][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 467.670073][T16757] Invalid ELF header magic: != ELF [ 468.233627][T16780] fuse: Bad value for 'fd' [ 468.329513][T16786] Invalid ELF header magic: != ELF [ 468.337139][T16786] Invalid ELF header magic: != ELF [ 468.458405][T16792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4448'. [ 468.574287][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 468.777512][ T5963] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 468.934455][ T5963] usb 5-1: Using ep0 maxpacket: 32 [ 468.959478][ T5963] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 468.990832][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.005408][ T5963] usb 5-1: Product: syz [ 469.009914][ T5963] usb 5-1: Manufacturer: syz [ 469.016096][ T5963] usb 5-1: SerialNumber: syz [ 469.027014][ T5963] usb 5-1: config 0 descriptor?? [ 469.043504][ T5963] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 469.614194][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 470.090867][T16847] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4473'. [ 470.269043][ T5963] gspca_ov534_9: reg_w failed -71 [ 470.472709][T16867] fuse: Bad value for 'fd' [ 470.614750][ T5963] gspca_ov534_9: Unknown sensor 0000 [ 470.614852][ T5963] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 470.652077][ T5963] usb 5-1: USB disconnect, device number 51 [ 470.658261][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 470.780341][T16877] syzkaller1: entered promiscuous mode [ 470.796165][T16877] syzkaller1: entered allmulticast mode [ 470.871440][T16881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4489'. [ 471.394219][T16591] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 471.564333][T16591] usb 7-1: Using ep0 maxpacket: 16 [ 471.575551][T16591] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 471.589297][T16591] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 471.602266][T16591] usb 7-1: Product: syz [ 471.609917][T16591] usb 7-1: Manufacturer: syz [ 471.617062][T16591] usb 7-1: SerialNumber: syz [ 471.633200][T16591] usb 7-1: config 0 descriptor?? [ 471.694416][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 471.893505][ T1836] usb 7-1: USB disconnect, device number 42 [ 472.198257][T16919] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4507'. [ 472.355696][T16919] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4507'. [ 472.397217][T16919] 0{X: renamed from gretap0 [ 472.409382][T16919] 0{X: entered allmulticast mode [ 472.430875][T16919] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 472.744274][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 472.813968][T16943] overlayfs: upper fs does not support file handles, falling back to index=off. [ 472.924408][T16591] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 473.087373][T16591] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 473.107493][T16591] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.136766][T16591] usb 6-1: config 0 descriptor?? [ 473.315567][ T5963] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 473.481239][ T5963] usb 1-1: Using ep0 maxpacket: 8 [ 473.501653][ T5963] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 473.541390][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.563727][ T5963] usb 1-1: Product: syz [ 473.587326][ T5963] usb 1-1: Manufacturer: syz [ 473.604719][ T5963] usb 1-1: SerialNumber: syz [ 473.625358][ T5963] usb 1-1: config 0 descriptor?? [ 473.774250][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 473.845139][ T5963] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 474.377641][T16591] usb 6-1: Cannot set autoneg [ 474.382684][T16591] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 474.432843][T16591] usb 6-1: USB disconnect, device number 43 [ 474.486897][ T5963] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 474.524623][ T5963] usb 1-1: USB disconnect, device number 43 [ 474.754299][ T5852] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 474.814271][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 474.920174][ T5852] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 474.942950][ T5852] usb 5-1: config 160 has no interface number 0 [ 474.964254][ T5852] usb 5-1: config 160 interface 200 has no altsetting 0 [ 475.012194][ T5852] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 475.034304][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.043042][ T5852] usb 5-1: Product: syz [ 475.057623][ T5852] usb 5-1: Manufacturer: syz [ 475.062302][ T5852] usb 5-1: SerialNumber: syz [ 475.316075][ T5852] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 475.333533][ T5852] usb 5-1: MIDIStreaming interface descriptor not found [ 475.414581][ T5852] usb 5-1: USB disconnect, device number 52 [ 475.854251][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 475.994522][T16591] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 476.036390][T17018] Invalid ELF header magic: != ELF [ 476.156059][T16591] usb 7-1: Using ep0 maxpacket: 16 [ 476.168081][T16591] usb 7-1: config 5 has an invalid interface number: 168 but max is 0 [ 476.193509][T16591] usb 7-1: config 5 has no interface number 0 [ 476.211033][T16591] usb 7-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 476.233780][T16591] usb 7-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 476.260141][T16591] usb 7-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 476.282046][T16591] usb 7-1: config 5 interface 168 has no altsetting 0 [ 476.298418][T16591] usb 7-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 476.318253][T16591] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.350042][T16591] usb 7-1: Product: syz [ 476.362647][T17024] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 476.367839][T16591] usb 7-1: Manufacturer: syz [ 476.382549][T16591] usb 7-1: SerialNumber: syz [ 476.402197][T17012] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 476.421719][T17012] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 476.688391][ C0] usb 7-1: NFC: Urb failure (status -71) [ 476.702762][ C0] usb 7-1: NFC: Urb failure (status -71) [ 476.711226][T16591] usb 7-1: NFC: Unable to get FW version [ 476.742427][T16591] pn533_usb 7-1:5.168: probe with driver pn533_usb failed with error -71 [ 476.777047][T16591] usb 7-1: USB disconnect, device number 43 [ 476.829179][T17042] loop6: detected capacity change from 0 to 7 [ 476.840765][T17042] Dev loop6: unable to read RDB block 7 [ 476.874293][T17042] loop6: unable to read partition table [ 476.880256][T17042] loop6: partition table beyond EOD, truncated [ 476.894225][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 476.937673][T17042] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 477.226018][T17055] netlink: 'syz.3.4566': attribute type 1 has an invalid length. [ 477.293869][T17058] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4568'. [ 477.934199][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 478.974185][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 480.000950][ T5963] kernel write not supported for file bpf-prog (pid: 5963 comm: kworker/1:6) [ 480.014194][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 480.279698][T17159] overlayfs: failed to verify upper (916/file1, ino=4733, err=-116) [ 480.302002][T17159] overlayfs: failed to verify index dir 'upper' xattr [ 480.309881][T17159] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 480.424253][ T5963] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 480.579021][ T5963] usb 7-1: config 0 has no interfaces? [ 480.589849][ T5963] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 480.599233][ T5963] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.616587][ T5963] usb 7-1: Product: syz [ 480.620940][ T5963] usb 7-1: Manufacturer: syz [ 480.631290][ T5963] usb 7-1: SerialNumber: syz [ 480.642399][ T5963] usb 7-1: config 0 descriptor?? [ 480.891327][T17181] syz_tun: entered allmulticast mode [ 480.922832][T17181] bond0: (slave syz_tun): Releasing backup interface [ 480.952837][T17155] veth1_macvtap: left promiscuous mode [ 481.054183][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 481.082637][T17155] veth1_macvtap: entered promiscuous mode [ 481.115355][T16591] usb 7-1: USB disconnect, device number 44 [ 482.094228][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 482.280662][T10976] veth1_macvtap: left promiscuous mode [ 482.455568][T17230] loop2: detected capacity change from 0 to 7 [ 482.605148][T17230] Dev loop2: unable to read RDB block 7 [ 482.610844][T17230] loop2: unable to read partition table [ 482.674574][T17230] loop2: partition table beyond EOD, truncated [ 482.705971][T17230] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 483.134221][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 484.011324][T17275] futex_wake_op: syz.0.4658 tries to shift op by -1; fix this program [ 484.174182][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 484.754449][ T5909] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 484.924972][ T5909] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 484.945816][ T5909] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 484.960367][ T5909] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 484.994239][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 485.002806][ T5909] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 485.023340][ T5909] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 485.034730][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 485.042614][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 485.042633][ T30] audit: type=1326 audit(1753974871.911:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17319 comm="syz.4.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88378eb69 code=0x7ffc0000 [ 485.044026][ T5909] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 485.063646][ T30] audit: type=1326 audit(1753974871.911:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17319 comm="syz.4.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88378eb69 code=0x7ffc0000 [ 485.109381][ T5909] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 485.134406][T16591] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 485.141585][ T30] audit: type=1326 audit(1753974871.951:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17319 comm="syz.4.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb88378eb69 code=0x7ffc0000 [ 485.144700][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 485.163722][ C1] vkms_vblank_simulate: vblank timer overrun [ 485.166409][ T30] audit: type=1326 audit(1753974871.951:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17319 comm="syz.4.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88378eb69 code=0x7ffc0000 [ 485.198124][ C1] vkms_vblank_simulate: vblank timer overrun [ 485.211096][ T30] audit: type=1326 audit(1753974871.951:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17319 comm="syz.4.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb88378eb69 code=0x7ffc0000 [ 485.232964][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 485.240799][ T30] audit: type=1326 audit(1753974871.951:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17319 comm="syz.4.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88378eb69 code=0x7ffc0000 [ 485.262425][ C1] vkms_vblank_simulate: vblank timer overrun [ 485.269100][ T30] audit: type=1326 audit(1753974871.951:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17319 comm="syz.4.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88378eb69 code=0x7ffc0000 [ 485.321117][ T5909] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 485.338964][ T5909] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 485.356509][ T30] audit: type=1326 audit(1753974871.951:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17319 comm="syz.4.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fb88378eb69 code=0x7ffc0000 [ 485.389158][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 485.396881][T16591] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.411391][T16591] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.423587][ T5909] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 485.432896][ T30] audit: type=1326 audit(1753974871.951:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17319 comm="syz.4.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88378eb69 code=0x7ffc0000 [ 485.459203][ T5909] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 485.470400][T16591] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 485.479807][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 485.486603][T16591] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.495283][ T30] audit: type=1326 audit(1753974871.951:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17319 comm="syz.4.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88378eb69 code=0x7ffc0000 [ 485.520276][T16591] usb 7-1: config 0 descriptor?? [ 485.525593][ T5909] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 485.534976][ T5909] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 485.546029][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 485.567863][ T5909] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 485.583403][ T5909] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 485.595024][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 485.605763][ T5909] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 485.619808][ T5909] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 485.632758][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 485.643422][ T5909] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 485.673220][ T5909] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 485.682049][ T5909] usb 1-1: Product: syz [ 485.686412][ T5909] usb 1-1: Manufacturer: syz [ 485.691124][ T5909] usb 1-1: SerialNumber: syz [ 485.718990][ T5909] usb 1-1: config 0 descriptor?? [ 485.743741][ T5909] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 485.951886][T11059] bond0: (slave syz_tun): Releasing backup interface [ 485.972758][T16591] cm6533_jd 0003:0D8C:0022.003E: unknown main item tag 0x0 [ 485.981151][T11059] syz_tun (unregistering): left promiscuous mode [ 486.003279][T16591] cm6533_jd 0003:0D8C:0022.003E: unknown main item tag 0x0 [ 486.006730][ T5852] usb 1-1: USB disconnect, device number 44 [ 486.014294][T11059] syz_tun (unregistering): left allmulticast mode [ 486.021919][ T5852] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 486.040299][T16591] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.003E/input/input68 [ 486.061150][T16591] cm6533_jd 0003:0D8C:0022.003E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 486.213178][T10975] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.254194][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 486.262351][T16591] usb 7-1: USB disconnect, device number 45 [ 486.361083][T10975] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.550428][T10975] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.627534][T10975] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 486.638647][T10975] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.657022][T17348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4691'. [ 486.670264][T17348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4691'. [ 486.683339][T17349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4691'. [ 486.701836][T17349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4691'. [ 486.947186][T10975] bridge_slave_1: left allmulticast mode [ 486.967724][T10975] bridge_slave_1: left promiscuous mode [ 486.985616][T10975] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.037055][T10975] bridge_slave_0: left allmulticast mode [ 487.069539][T10975] bridge_slave_0: left promiscuous mode [ 487.094448][T10975] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.100878][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 487.118876][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 487.133858][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 487.151729][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 487.162158][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 487.301809][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 487.873313][T10975] bridge0 (unregistering): left promiscuous mode [ 488.036896][T10975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.064901][T10975] bond_slave_0: left promiscuous mode [ 488.070512][T10975] bond_slave_0: left allmulticast mode [ 488.086408][T10975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.104604][T10975] bond_slave_1: left promiscuous mode [ 488.110202][T10975] bond_slave_1: left allmulticast mode [ 488.128780][T10975] bond0 (unregistering): (slave team0): Releasing backup interface [ 488.141162][T10975] team0: left promiscuous mode [ 488.146857][T10975] team_slave_1: left promiscuous mode [ 488.154345][T10975] team0: left allmulticast mode [ 488.159351][T10975] team_slave_1: left allmulticast mode [ 488.167928][T10975] bond0 (unregistering): Released all slaves [ 488.193966][T17377] tipc: Enabled bearer , priority 10 [ 488.335826][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 488.337936][T10975] tipc: Disabling bearer [ 488.394960][T10975] tipc: Left network mode [ 488.453890][T17390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4706'. [ 488.488508][T17390] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 488.508201][T17390] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 489.036374][T10975] hsr_slave_0: left promiscuous mode [ 489.063224][T10975] hsr_slave_1: left promiscuous mode [ 489.087378][T10975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.118431][T10975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.211057][T10975] veth1_macvtap: left promiscuous mode [ 489.218029][ T5857] Bluetooth: hci0: command tx timeout [ 489.231311][T10975] veth0_macvtap: left promiscuous mode [ 489.237212][T10975] veth1_vlan: left promiscuous mode [ 489.242716][T10975] veth0_vlan: left promiscuous mode [ 489.373221][T17433] atomic_op ffff888024772198 conn xmit_atomic 0000000000000000 [ 489.381000][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 490.388239][T10975] team0 (unregistering): Port device team_slave_1 removed [ 490.417674][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 491.294308][ T5857] Bluetooth: hci0: command tx timeout [ 491.454176][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 491.581683][T17357] chnl_net:caif_netlink_parms(): no params data found [ 491.633435][T17478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4727'. [ 491.863604][T17488] overlayfs: failed to clone lowerpath [ 492.039911][T17357] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.059040][T17357] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.084926][T17357] bridge_slave_0: entered allmulticast mode [ 492.093016][T17357] bridge_slave_0: entered promiscuous mode [ 492.133685][T10975] IPVS: stop unused estimator thread 0... [ 492.141375][T17357] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.158040][T17357] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.173021][T17357] bridge_slave_1: entered allmulticast mode [ 492.191007][T17357] bridge_slave_1: entered promiscuous mode [ 492.265996][T17503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 492.275077][T17498] kvm: apic: phys broadcast and lowest prio [ 492.282957][T17504] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 492.308325][T17357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.428158][T17357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.504667][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 492.572016][T17357] team0: Port device team_slave_0 added [ 492.590469][T17357] team0: Port device team_slave_1 added [ 492.752879][T17357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.775088][T17357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.809324][T17357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.837362][T17357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.848982][T17357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.877189][T17357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.007224][T17357] hsr_slave_0: entered promiscuous mode [ 493.024658][T17357] hsr_slave_1: entered promiscuous mode [ 493.031167][T17357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.059304][T17357] Cannot create hsr debugfs directory [ 493.374392][ T5857] Bluetooth: hci0: command tx timeout [ 493.413178][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 493.413196][ T30] audit: type=1326 audit(1753974880.281:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17531 comm="syz.3.4749" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbedeb8eb69 code=0x0 [ 493.496139][T17357] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 493.511810][T17357] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 493.523935][T17357] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 493.534168][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 493.542926][T17357] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 493.737779][T17357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.768905][T17357] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.799862][T10977] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.807232][T10977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.827440][T10977] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.834781][T10977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.964450][T17357] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 493.984506][ T5963] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 494.053265][T17550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.144623][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 494.200699][ T5963] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.235232][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 494.264144][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 494.273910][ T5963] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 494.317705][T17555] syzkaller1: entered promiscuous mode [ 494.331561][T17555] syzkaller1: entered allmulticast mode [ 494.350210][ T5963] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.385729][ T5963] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 494.401378][ T5963] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 494.433194][ T5963] usb 1-1: Manufacturer: syz [ 494.446272][ T5963] usb 1-1: config 0 descriptor?? [ 494.574224][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 494.670752][T17357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.838149][ T5963] rc_core: IR keymap rc-hauppauge not found [ 494.858764][ T5963] Registered IR keymap rc-empty [ 494.863875][ T5963] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 494.931460][ T5963] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 495.007492][ T5963] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 495.023759][ T5963] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input69 [ 495.055113][ T5963] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 495.084504][ T5963] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 495.114543][ T5963] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 495.144232][ T5963] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 495.179341][ T5963] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 495.222729][ T5963] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 495.264941][ T5963] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 495.295061][ T5963] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 495.308461][T17583] IPVS: Scheduler module ip_vs_ not found [ 495.327312][ T5963] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 495.357167][ T5963] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 495.400655][ T5963] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 495.424356][ T5963] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 495.448667][ T5963] usb 1-1: USB disconnect, device number 45 [ 495.454589][ T5857] Bluetooth: hci0: command tx timeout [ 495.493500][T17357] veth0_vlan: entered promiscuous mode [ 495.590883][T17357] veth1_vlan: entered promiscuous mode [ 495.614236][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 495.687421][T17357] veth0_macvtap: entered promiscuous mode [ 495.714726][T17357] veth1_macvtap: entered promiscuous mode [ 495.748954][T17357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.764016][T17357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.777439][T17357] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.787335][T17357] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.798015][T17357] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.807352][T17357] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.986654][T10977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.014005][T10977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.052926][T10975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.072975][T10975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.654224][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 497.694170][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 498.515092][T17671] Bluetooth: MGMT ver 1.23 [ 498.524478][T17671] Bluetooth: hci0: invalid len left 7, exp >= 255 [ 498.734227][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 499.133871][T17690] pimreg: entered allmulticast mode [ 499.502492][T10943] nci: nci_ntf_packet: unknown ntf opcode 0x101 [ 499.614815][ T5963] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 499.774277][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 499.786887][ T5963] usb 5-1: Using ep0 maxpacket: 32 [ 499.815233][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.838663][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.853413][ T5963] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 499.885590][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.910203][ T5963] usb 5-1: config 0 descriptor?? [ 499.922767][ T5963] hub 5-1:0.0: USB hub found [ 500.142198][ T5963] hub 5-1:0.0: 2 ports detected [ 500.672619][ T5963] usb 5-1: USB disconnect, device number 53 [ 500.814177][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 500.843142][T17754] sit0: entered promiscuous mode [ 500.863077][T17754] netlink: 'syz.0.4828': attribute type 1 has an invalid length. [ 500.904238][T17754] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4828'. [ 501.198732][T17770] Invalid ELF header magic: != ELF [ 501.854174][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 502.654657][T16591] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 502.853679][T16591] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 502.874185][T16591] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.894294][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 502.902099][T16591] usb 7-1: config 0 descriptor?? [ 503.675887][T17863] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4876'. [ 503.934174][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 504.028651][T17869] netlink: 51 bytes leftover after parsing attributes in process `syz.7.4879'. [ 504.150505][T16591] pegasus 7-1:0.0: can't reset MAC [ 504.156779][T16591] pegasus 7-1:0.0: probe with driver pegasus failed with error -5 [ 504.178066][T16591] usb 7-1: USB disconnect, device number 46 [ 504.974495][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 505.184733][ T30] audit: type=1400 audit(1753974892.051:937): lsm=SMACK fn=smack_file_receive action=denied subject="y" object="_" requested=w pid=17912 comm="syz.7.4898" path="pipe:[65976]" dev="pipefs" ino=65976 [ 505.303318][T17920] syzkaller1: entered promiscuous mode [ 505.308971][T17920] syzkaller1: entered allmulticast mode [ 506.005512][ T30] audit: type=1326 audit(1753974892.881:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17911 comm="syz.4.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88378eb69 code=0x7fc00000 [ 506.027272][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 506.040784][ T30] audit: type=1326 audit(1753974892.881:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17911 comm="syz.4.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb88378eb69 code=0x7fc00000 [ 506.083641][ T30] audit: type=1326 audit(1753974892.881:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17911 comm="syz.4.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88378eb69 code=0x7fc00000 [ 506.151953][ T30] audit: type=1326 audit(1753974892.881:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17911 comm="syz.4.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88378eb69 code=0x7fc00000 [ 506.194849][T16591] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 506.204392][ T30] audit: type=1326 audit(1753974892.881:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17911 comm="syz.4.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88378eb69 code=0x7fc00000 [ 506.252667][ T30] audit: type=1326 audit(1753974892.881:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17911 comm="syz.4.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88378eb69 code=0x7fc00000 [ 506.276929][ T30] audit: type=1326 audit(1753974892.881:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17911 comm="syz.4.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88378eb69 code=0x7fc00000 [ 506.324242][ T30] audit: type=1326 audit(1753974892.881:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17911 comm="syz.4.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88378eb69 code=0x7fc00000 [ 506.328121][T17959] netlink: 'syz.4.4920': attribute type 1 has an invalid length. [ 506.375020][T16591] usb 7-1: Using ep0 maxpacket: 32 [ 506.383041][T16591] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.391684][ T30] audit: type=1326 audit(1753974892.881:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17911 comm="syz.4.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88378eb69 code=0x7fc00000 [ 506.393770][T16591] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 506.432929][T16591] usb 7-1: New USB device found, idVendor=0733, idProduct=0402, bcdDevice=ef.67 [ 506.442619][ T1836] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 506.450952][T16591] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.464459][T16591] usb 7-1: Product: syz [ 506.468925][T16591] usb 7-1: Manufacturer: syz [ 506.473704][T16591] usb 7-1: SerialNumber: syz [ 506.483309][T16591] usb 7-1: config 0 descriptor?? [ 506.493056][T16591] gspca_main: spca501-2.14.0 probing 0733:0402 [ 506.625027][ T1836] usb 8-1: Using ep0 maxpacket: 8 [ 506.636875][ T1836] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.651555][ T1836] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 506.652536][T17968] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4924'. [ 506.668961][ T1836] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 506.672704][T17968] netlink: 'syz.4.4924': attribute type 1 has an invalid length. [ 506.687045][ T1836] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.701249][ T1836] usb 8-1: Product: syz [ 506.705601][ T1836] usb 8-1: Manufacturer: syz [ 506.710561][ T1836] usb 8-1: SerialNumber: syz [ 506.714306][T17968] netlink: 'syz.4.4924': attribute type 2 has an invalid length. [ 506.725158][T17968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4924'. [ 506.897986][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.950642][T17954] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 507.054203][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 507.570598][T17954] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 507.720323][T16591] gspca_spca501: reg write: error -71 [ 507.734381][T16591] spca501 7-1:0.0: Reg write failed for 0x00,0x00,0x05 [ 507.742735][T16591] spca501 7-1:0.0: probe with driver spca501 failed with error -22 [ 507.759542][T16591] usb 7-1: USB disconnect, device number 47 [ 507.782813][ T1836] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 507.802331][ T1836] cdc_ncm 8-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 507.825727][ T1836] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 507.984685][ T1836] cdc_ncm 8-1:1.0: setting tx_max = 184 [ 508.011383][ T1836] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 508.094174][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 508.104617][ T1836] usb 8-1: USB disconnect, device number 2 [ 508.112008][ T1836] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP) [ 509.134208][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 510.174178][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 510.354829][ T5963] kernel write not supported for file bpf-prog (pid: 5963 comm: kworker/1:6) [ 510.791456][T18118] hsr0: entered promiscuous mode [ 510.808408][T18118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4984'. [ 510.834856][T18118] hsr_slave_0: left promiscuous mode [ 510.870456][T18118] hsr_slave_1: left promiscuous mode [ 510.950601][T18118] hsr0 (unregistering): left promiscuous mode [ 511.214394][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 511.443156][T18140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4993'. [ 512.099101][T16591] Process accounting resumed [ 512.254194][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 512.534331][ T5963] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 512.706508][ T5963] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 512.741643][ T5963] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 512.781171][ T5963] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 512.800654][ T5963] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.822317][ T5963] usb 8-1: Product: syz [ 512.827041][ T5963] usb 8-1: Manufacturer: syz [ 512.832854][ T5963] usb 8-1: SerialNumber: syz [ 512.884459][ T5963] usb 8-1: config 0 descriptor?? [ 512.891763][T18169] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 512.910912][T18169] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 513.186191][T18169] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 513.219185][T18169] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 513.294301][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 513.334243][T16591] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 513.534180][T16591] usb 1-1: Using ep0 maxpacket: 32 [ 513.553404][T16591] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.608764][T16591] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.649880][T16591] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 513.684168][T16591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.737124][T16591] usb 1-1: config 0 descriptor?? [ 514.214858][T16591] savu 0003:1E7D:2D5A.003F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 514.312703][ T5963] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 514.335562][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 514.424266][ T925] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 514.450042][ T5963] dm9601 8-1:0.0 eth13: register 'dm9601' at usb-dummy_hcd.7-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 514.465060][T16591] usb 1-1: USB disconnect, device number 46 [ 514.475862][ T5963] usb 8-1: USB disconnect, device number 3 [ 514.492365][ T5963] dm9601 8-1:0.0 eth13: unregister 'dm9601' usb-dummy_hcd.7-1, Davicom DM96xx USB 10/100 Ethernet [ 514.594579][ T925] usb 5-1: Using ep0 maxpacket: 16 [ 514.608398][ T925] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.624348][ T925] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 514.647932][ T925] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.673744][ T925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.682404][ T925] usb 5-1: Product: syz [ 514.687329][ T925] usb 5-1: Manufacturer: syz [ 514.692313][ T925] usb 5-1: SerialNumber: syz [ 514.910267][ T925] usb 5-1: 0:2 : does not exist [ 514.931518][ T925] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 514.996033][ T925] usb 5-1: USB disconnect, device number 54 [ 515.022679][T18228] overlayfs: failed to clone upperpath [ 515.251401][T18238] tls_set_device_offload_rx: netdev not found [ 515.374172][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 516.414170][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 517.454179][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 517.542595][T18328] input: syz0 as /devices/virtual/input/input70 [ 518.168883][T18341] netlink: 'syz.4.5081': attribute type 29 has an invalid length. [ 518.209978][T18341] netlink: 'syz.4.5081': attribute type 29 has an invalid length. [ 518.245892][T18341] netlink: 500 bytes leftover after parsing attributes in process `syz.4.5081'. [ 518.374487][T18345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5082'. [ 518.494200][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 519.283526][T18366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5091'. [ 519.534173][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 519.725491][T18366] team0: Port device team_slave_0 removed [ 520.048544][T10975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.076587][T10975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.261170][T10975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.273358][T10975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.436790][T10975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.467280][T10975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.574174][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 520.646114][T10975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.684221][T10975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.987882][T10975] bridge_slave_1: left allmulticast mode [ 521.007891][T10975] bridge_slave_1: left promiscuous mode [ 521.015241][T10975] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.056054][T10975] bridge_slave_0: left allmulticast mode [ 521.062020][T10975] bridge_slave_0: left promiscuous mode [ 521.072353][T10975] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.107299][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 521.120034][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 521.132306][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 521.146764][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 521.162838][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 521.627399][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 521.635680][ T1836] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 521.820077][T10975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.828900][ T1836] usb 1-1: Using ep0 maxpacket: 32 [ 521.831139][ T1836] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 521.844629][ T1836] usb 1-1: config 0 has no interface number 0 [ 521.856263][T10975] bond_slave_0: left promiscuous mode [ 521.867442][T10975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.869324][ T1836] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 521.885826][ T1836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.895412][ T1836] usb 1-1: Product: syz [ 521.899812][ T1836] usb 1-1: Manufacturer: syz [ 521.903469][T10975] bond_slave_1: left promiscuous mode [ 521.904721][ T1836] usb 1-1: SerialNumber: syz [ 521.908140][ T1836] usb 1-1: config 0 descriptor?? [ 521.923192][ T1836] smsc95xx v2.0.0 [ 521.923702][T10975] bond0 (unregistering): Released all slaves [ 522.111463][T10975] tipc: Disabling bearer [ 522.122976][T10975] tipc: Left network mode [ 522.171846][T18425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.651783][T10975] hsr_slave_0: left promiscuous mode [ 522.657286][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 522.714290][T10975] hsr_slave_1: left promiscuous mode [ 522.731162][T10975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.754411][T10975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.776012][T10975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.803583][T10975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.144750][T10975] pimreg (unregistering): left allmulticast mode [ 523.224298][ T5857] Bluetooth: hci2: command tx timeout [ 523.249305][ T1836] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 523.260701][ T1836] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 523.582262][ T1836] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 523.594168][ T1836] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 523.606713][ T1836] usb 1-1: USB disconnect, device number 47 [ 523.694181][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 524.743047][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 525.294467][ T5857] Bluetooth: hci2: command tx timeout [ 525.305950][T18470] netlink: 'syz.3.5133': attribute type 1 has an invalid length. [ 525.774186][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 525.998209][T18410] chnl_net:caif_netlink_parms(): no params data found [ 526.125479][ T5852] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 526.255585][T18486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 526.328767][ T5852] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.354228][ T5852] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.387000][ T5852] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 526.388897][T18410] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.409885][ T5852] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 526.419516][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.432290][T18410] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.440881][ T5852] usb 7-1: config 0 descriptor?? [ 526.451950][T18410] bridge_slave_0: entered allmulticast mode [ 526.460881][T18410] bridge_slave_0: entered promiscuous mode [ 526.471184][T18410] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.489802][T18410] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.504749][T18410] bridge_slave_1: entered allmulticast mode [ 526.516790][T18410] bridge_slave_1: entered promiscuous mode [ 526.711564][T18410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.812480][T10975] IPVS: stop unused estimator thread 0... [ 526.814204][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 526.827032][T18410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.884848][ T5852] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 527.066767][T18410] team0: Port device team_slave_0 added [ 527.090975][T18410] team0: Port device team_slave_1 added [ 527.158099][ T5852] usb 7-1: USB disconnect, device number 48 [ 527.290305][T18410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.310710][T18410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.360393][T18410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.360995][T18514] overlayfs: failed to clone lowerpath [ 527.380135][ T5857] Bluetooth: hci2: command tx timeout [ 527.401196][T18410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.430762][T18410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.480727][T18410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.640998][T18410] hsr_slave_0: entered promiscuous mode [ 527.648121][T18410] hsr_slave_1: entered promiscuous mode [ 527.854537][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 527.998412][ T978] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 528.195906][ T978] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 528.222464][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 528.258267][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 528.294652][ T978] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 528.322382][ T978] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 528.344223][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.367552][ T978] usb 1-1: config 0 descriptor?? [ 528.373471][T18533] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 528.433167][T18410] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 528.447701][T18410] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 528.470602][T18410] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 528.507781][T18410] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 528.733651][T18410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.805964][T18410] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.827557][ T9965] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.828828][ T978] plantronics 0003:047F:FFFF.0041: reserved main item tag 0xd [ 528.834925][ T9965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.894469][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 528.912543][ T9965] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.914676][ T978] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 528.919832][ T9965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.077399][T18574] Bluetooth: hci0: too big key_count value 39401 [ 529.139555][T18533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.164911][T18533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.209293][ T978] usb 1-1: USB disconnect, device number 48 [ 529.457859][ T5844] Bluetooth: hci2: command tx timeout [ 529.564014][T18410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.687850][ T1836] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 529.861560][ T1836] usb 8-1: config 0 has an invalid interface number: 255 but max is 0 [ 529.879946][ T1836] usb 8-1: config 0 has no interface number 0 [ 529.915962][ T1836] usb 8-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 529.934289][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 529.937524][ T1836] usb 8-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 530.004451][ T1836] usb 8-1: config 0 interface 255 has no altsetting 0 [ 530.011344][ T1836] usb 8-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 530.063513][ T1836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.106213][T18600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 530.114265][ T1836] usb 8-1: config 0 descriptor?? [ 530.144307][ T1836] ums-realtek 8-1:0.255: USB Mass Storage device detected [ 530.354057][T18410] veth0_vlan: entered promiscuous mode [ 530.383293][ T1836] usb 8-1: USB disconnect, device number 4 [ 530.391691][T18410] veth1_vlan: entered promiscuous mode [ 530.453546][T18410] veth0_macvtap: entered promiscuous mode [ 530.479426][T18410] veth1_macvtap: entered promiscuous mode [ 530.504639][T18410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.539540][T18410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.597888][T18410] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.625623][T18410] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.646345][T18410] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.665755][T18410] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.900455][T10943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.923477][T10943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.974338][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 531.010700][T10975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.019470][T10975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.705185][ T978] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 531.906566][ T978] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.917735][ T978] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 531.944341][ T978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.014168][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 532.035332][ T978] usb 8-1: config 0 descriptor?? [ 532.057772][ T978] pwc: Askey VC010 type 2 USB webcam detected. [ 532.502984][ T978] pwc: recv_control_msg error -32 req 02 val 2b00 [ 532.513244][ T978] pwc: recv_control_msg error -32 req 02 val 2700 [ 532.535471][ T978] pwc: recv_control_msg error -32 req 02 val 2c00 [ 532.745975][ T978] pwc: recv_control_msg error -71 req 04 val 1300 [ 532.759543][ T978] pwc: recv_control_msg error -71 req 04 val 1400 [ 532.767178][ T978] pwc: recv_control_msg error -71 req 02 val 2000 [ 532.774473][ T978] pwc: recv_control_msg error -71 req 02 val 2100 [ 532.781744][ T978] pwc: recv_control_msg error -71 req 04 val 1500 [ 532.790665][ T978] pwc: recv_control_msg error -71 req 02 val 2500 [ 532.801997][ T978] pwc: recv_control_msg error -71 req 02 val 2400 [ 532.809339][ T978] pwc: recv_control_msg error -71 req 02 val 2600 [ 532.822925][ T978] pwc: recv_control_msg error -71 req 02 val 2900 [ 532.830461][ T978] pwc: recv_control_msg error -71 req 02 val 2800 [ 532.839077][ T978] pwc: recv_control_msg error -71 req 04 val 1100 [ 532.846670][ T978] pwc: recv_control_msg error -71 req 04 val 1200 [ 532.859360][ T978] pwc: Registered as video103. [ 532.868283][ T978] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input72 [ 532.907617][ T978] usb 8-1: USB disconnect, device number 5 [ 532.924351][T18420] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 532.992866][ T43] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 533.074584][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 533.108684][T18420] usb 7-1: Using ep0 maxpacket: 16 [ 533.116995][T18420] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 533.133602][T18420] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 533.149725][T18420] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.158113][T18420] usb 7-1: Product: syz [ 533.162620][T18420] usb 7-1: Manufacturer: syz [ 533.168749][T18420] usb 7-1: SerialNumber: syz [ 533.207202][T18420] usb 7-1: config 0 descriptor?? [ 533.218041][T18420] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 533.231568][T18420] usb 7-1: Detected FT232R [ 533.258990][ T43] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 533.267481][ T43] usb 1-1: config 0 has no interface number 0 [ 533.273619][ T43] usb 1-1: config 0 interface 255 has no altsetting 0 [ 533.282026][ T43] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 533.292065][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.304946][ T43] usb 1-1: config 0 descriptor?? [ 533.313969][ T43] cp210x 1-1:0.255: cp210x converter detected [ 533.451851][T18420] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 533.704607][T18420] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 533.736469][ T43] cp210x 1-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 533.874499][ T5852] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 533.891893][T16591] usb 7-1: USB disconnect, device number 49 [ 533.914447][T16591] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 533.944815][T16591] ftdi_sio 7-1:0.0: device disconnected [ 533.959689][ T43] cp210x 1-1:0.255: GPIO initialisation failed: -19 [ 533.972857][ T43] usb 1-1: cp210x converter now attached to ttyUSB0 [ 534.036968][ T5852] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 534.058638][ T5852] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.073070][ T5852] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.086996][ T5852] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 534.100122][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 534.131263][ T5852] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 534.140753][ T5852] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 534.151188][ T5852] usb 8-1: Manufacturer: syz [ 534.159150][ T5852] usb 8-1: config 0 descriptor?? [ 534.186033][ T43] usb 1-1: USB disconnect, device number 49 [ 534.200519][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 534.204663][T18678] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5213'. [ 534.210956][ T43] cp210x 1-1:0.255: device disconnected [ 534.612691][ T5852] appleir 0003:05AC:8243.0042: unknown main item tag 0x0 [ 534.658472][ T5852] appleir 0003:05AC:8243.0042: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 535.144838][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 535.232481][T18701] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5221'. [ 535.503967][ T5963] usb 8-1: USB disconnect, device number 6 [ 535.540286][T18708] xt_CT: No such helper "pptp" [ 535.940319][T18723] netlink: 'syz.8.5231': attribute type 1 has an invalid length. [ 536.174172][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 536.651044][T18618] Set syz1 is full, maxelem 65536 reached [ 536.803171][T18742] syzkaller1: entered promiscuous mode [ 536.822284][T18742] syzkaller1: entered allmulticast mode [ 537.178498][T18752] kvm: user requested TSC rate below hardware speed [ 537.214168][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 537.484811][T18761] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5247'. [ 537.784933][T18771] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5251'. [ 537.805746][T18770] netlink: 1343 bytes leftover after parsing attributes in process `syz.6.5250'. [ 538.254336][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 538.295976][T18792] ceph: No mds server is up or the cluster is laggy [ 538.324501][T16591] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 538.523677][T16591] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 538.536116][T16591] usb 1-1: config 0 interface 0 has no altsetting 0 [ 538.552633][T16591] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 538.564475][T16591] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 538.573187][T16591] usb 1-1: Product: syz [ 538.583621][T16591] usb 1-1: Manufacturer: syz [ 538.591468][T16591] usb 1-1: SerialNumber: syz [ 538.621348][T16591] usb 1-1: config 0 descriptor?? [ 538.643368][T16591] usb 1-1: selecting invalid altsetting 0 [ 538.685476][ T9965] nci: nci_rsp_packet: unknown rsp opcode 0xe39 [ 538.935583][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5268'. [ 538.952529][ T978] usb 1-1: USB disconnect, device number 50 [ 539.294229][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 539.814990][T18845] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5277'. [ 540.326992][T18866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5285'. [ 540.344156][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 541.056349][T18901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 541.374176][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 542.271169][T10943] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.373024][T10943] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.414240][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 542.461136][T18947] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5319'. [ 542.508252][T10943] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.540956][T18947] netlink: 'syz.7.5319': attribute type 1 has an invalid length. [ 542.564161][T18947] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5319'. [ 542.652131][T10943] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.686677][T16591] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 542.844211][T16591] usb 7-1: Using ep0 maxpacket: 32 [ 542.860097][T16591] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 542.870696][T16591] usb 7-1: config 0 has no interface number 0 [ 542.887233][T16591] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 542.890752][T18954] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 542.900809][T16591] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 542.914848][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 542.915422][T16591] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.930792][T16591] usb 7-1: Product: syz [ 542.936455][T16591] usb 7-1: Manufacturer: syz [ 542.941304][T16591] usb 7-1: SerialNumber: syz [ 542.945043][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 542.965165][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 542.965960][T16591] usb 7-1: config 0 descriptor?? [ 543.005840][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 543.022189][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 543.064334][T16591] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 543.129140][T16591] em28xx 7-1:0.132: Video interface 132 found: [ 543.198528][T10943] bridge_slave_1: left allmulticast mode [ 543.224644][T10943] bridge_slave_1: left promiscuous mode [ 543.230574][T10943] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.280042][T10943] bridge_slave_0: left allmulticast mode [ 543.285894][T10943] bridge_slave_0: left promiscuous mode [ 543.291706][T10943] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.462538][T16591] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 543.464308][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 544.085701][T16591] em28xx 7-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 544.100665][T16591] em28xx 7-1:0.132: failed to read eeprom (err=-5) [ 544.110054][T16591] em28xx 7-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 544.150382][T10943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.180044][T10943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.189147][T16591] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 544.209288][T10943] bond0 (unregistering): Released all slaves [ 544.218250][T16591] em28xx 7-1:0.132: analog set to bulk mode. [ 544.234303][T18420] em28xx 7-1:0.132: Registering V4L2 extension [ 544.266417][T16591] usb 7-1: USB disconnect, device number 50 [ 544.306657][T16591] em28xx 7-1:0.132: Disconnecting em28xx [ 544.494155][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 544.843620][T18420] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 544.887620][T18420] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 544.904218][T18420] em28xx 7-1:0.132: No AC97 audio processor [ 544.952744][T18420] usb 7-1: Decoder not found [ 544.965755][T18420] em28xx 7-1:0.132: failed to create media graph [ 544.972214][T18420] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 545.075060][T18420] em28xx 7-1:0.132: Remote control support is not available for this card. [ 545.083822][T16591] em28xx 7-1:0.132: Closing input extension [ 545.187818][T16591] em28xx 7-1:0.132: Freeing device [ 545.214285][ T5857] Bluetooth: hci2: command tx timeout [ 545.534186][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 545.555232][T10943] hsr_slave_0: left promiscuous mode [ 545.572312][T10943] hsr_slave_1: left promiscuous mode [ 545.592068][T10943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.629112][T10943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.672328][T10943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.700358][T10943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.858436][T10943] veth1_macvtap: left promiscuous mode [ 545.885305][T10943] veth0_macvtap: left promiscuous mode [ 545.891123][T10943] veth1_vlan: left promiscuous mode [ 545.934803][T10943] veth0_vlan: left promiscuous mode [ 546.180541][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 546.180563][ T30] audit: type=1326 audit(1753974933.051:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19024 comm="syz.3.5350" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbedeb8eb69 code=0x0 [ 546.564854][ T5963] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 546.574255][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 546.610622][ T5852] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 546.735129][ T5963] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.762182][ T5963] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 546.771456][ T5963] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 546.780818][ T5963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.803254][ T5852] usb 8-1: Using ep0 maxpacket: 16 [ 546.811737][ T5852] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 546.823837][ T5963] usb 7-1: config 0 descriptor?? [ 546.834601][ T5963] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 546.841452][ T5963] dvb-usb: bulk message failed: -22 (3/0) [ 546.851244][ T5963] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 546.862810][ T5963] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 546.870956][ T5852] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 546.880670][ T5963] usb 7-1: media controller created [ 546.886335][ T5852] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.896721][ T5963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 546.905344][ T5852] usb 8-1: Product: syz [ 546.909563][ T5852] usb 8-1: Manufacturer: syz [ 546.932451][ T5963] dvb-usb: bulk message failed: -22 (6/0) [ 546.939240][ T5852] usb 8-1: SerialNumber: syz [ 546.948184][ T5963] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 546.958478][ T5852] usb 8-1: config 0 descriptor?? [ 546.977994][ T5852] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 546.990261][ T5963] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input73 [ 547.010694][ T5852] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 547.025894][ T5963] dvb-usb: schedule remote query interval to 150 msecs. [ 547.033900][ T5963] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 547.174516][ T5963] dvb-usb: bulk message failed: -22 (1/0) [ 547.187773][ T5963] dvb-usb: error while querying for an remote control event. [ 547.294473][ T5857] Bluetooth: hci2: command tx timeout [ 547.354375][ T5963] dvb-usb: bulk message failed: -22 (1/0) [ 547.360284][ T5963] dvb-usb: error while querying for an remote control event. [ 547.388717][ T5963] usb 7-1: USB disconnect, device number 51 [ 547.418626][ T5963] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 547.487676][T10943] team0 (unregistering): Port device team_slave_1 removed [ 547.571829][T10943] team0 (unregistering): Port device team_slave_0 removed [ 547.599302][ T5852] em28xx 8-1:0.0: chip ID is em2710/2820 [ 547.614532][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 548.240341][ T5852] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 548.260708][ T5852] em28xx 8-1:0.0: board has no eeprom [ 548.335607][ T5852] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 548.343528][ T5852] em28xx 8-1:0.0: dvb set to bulk mode. [ 548.349356][ T5963] em28xx 8-1:0.0: Binding DVB extension [ 548.392376][ T5852] usb 8-1: USB disconnect, device number 7 [ 548.400194][ T5852] em28xx 8-1:0.0: Disconnecting em28xx [ 548.490712][ T5963] em28xx 8-1:0.0: Registering input extension [ 548.497572][ T5852] em28xx 8-1:0.0: Closing input extension [ 548.522822][ T5852] em28xx 8-1:0.0: Freeing device [ 548.654159][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 548.992847][T19057] veth1_to_bond: entered allmulticast mode [ 549.001126][T19057] veth1_to_bond: left allmulticast mode [ 549.023988][T18952] chnl_net:caif_netlink_parms(): no params data found [ 549.294037][T18952] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.301605][T18952] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.309242][T18952] bridge_slave_0: entered allmulticast mode [ 549.319202][T18952] bridge_slave_0: entered promiscuous mode [ 549.328530][T18952] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.336494][T18952] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.343963][T18952] bridge_slave_1: entered allmulticast mode [ 549.352205][T18952] bridge_slave_1: entered promiscuous mode [ 549.374282][ T5857] Bluetooth: hci2: command tx timeout [ 549.423925][T18952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.443737][T18952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.512970][T18952] team0: Port device team_slave_0 added [ 549.531930][T18952] team0: Port device team_slave_1 added [ 549.628503][T18952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.644177][T18952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.690321][T18952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.701034][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 549.761905][T18952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.778032][T18952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.815707][T18952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.963417][T18952] hsr_slave_0: entered promiscuous mode [ 549.998999][T18952] hsr_slave_1: entered promiscuous mode [ 550.734387][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 551.086633][T18952] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 551.101238][T18952] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 551.130098][T18952] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 551.161591][T18952] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 551.342376][T19110] input: syz0 as /devices/virtual/input/input75 [ 551.454221][ T5857] Bluetooth: hci2: command tx timeout [ 551.641583][T18952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.702662][T18952] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.741673][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.748998][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.774191][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 551.788790][T10971] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.796098][T10971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.341565][T19136] netlink: 'syz.3.5388': attribute type 4 has an invalid length. [ 552.372727][T19136] netlink: 'syz.3.5388': attribute type 4 has an invalid length. [ 552.485755][T18952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.814347][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 553.266787][T18952] veth0_vlan: entered promiscuous mode [ 553.308994][T18952] veth1_vlan: entered promiscuous mode [ 553.402914][T18952] veth0_macvtap: entered promiscuous mode [ 553.464525][T18952] veth1_macvtap: entered promiscuous mode [ 553.518806][T18952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.560466][T18952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.603743][T18952] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.655700][T18952] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.669113][T19174] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 553.692174][T18952] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.734000][T18952] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.854182][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 554.024628][T10974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.051034][T10974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.064327][ T978] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 554.163692][T10971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.241622][ T978] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 554.287047][ T978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.300936][T10971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.314307][ T978] usb 7-1: Product: syz [ 554.326629][ T978] usb 7-1: Manufacturer: syz [ 554.332990][ T978] usb 7-1: SerialNumber: syz [ 554.340812][ T978] usb 7-1: config 0 descriptor?? [ 554.784195][ T1836] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 554.894410][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 554.964412][ T1836] usb 1-1: Using ep0 maxpacket: 16 [ 554.974932][ T1836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.003879][ T1836] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 555.069211][ T1836] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 555.103119][ T1836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.153292][ T1836] usb 1-1: config 0 descriptor?? [ 555.364291][ T978] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 555.474232][T16591] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 555.566192][ T1836] usbhid 1-1:0.0: can't add hid device: -71 [ 555.572381][ T1836] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 555.582685][ T978] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 555.617995][ T978] asix 7-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 555.628734][ T1836] usb 1-1: USB disconnect, device number 51 [ 555.654245][T16591] usb 8-1: Using ep0 maxpacket: 16 [ 555.659984][ T978] asix 7-1:0.0: probe with driver asix failed with error -71 [ 555.683893][T16591] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.701611][ T978] usb 7-1: USB disconnect, device number 52 [ 555.709621][T16591] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.740072][T16591] usb 8-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 555.774536][T16591] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.804338][T16591] usb 8-1: config 0 descriptor?? [ 555.934159][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 556.621677][T16591] letsketch 0003:6161:4D15.0043: Device info: ఁ [ 556.822652][T16591] letsketch 0003:6161:4D15.0043: Device info: 擃 [ 556.974192][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 557.058716][T16591] usb 8-1: Max retries (5) exceeded reading string descriptor 202 [ 557.073566][T16591] letsketch 0003:6161:4D15.0043: probe with driver letsketch failed with error -71 [ 557.117907][T16591] usb 8-1: USB disconnect, device number 8 [ 558.014251][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 558.216445][T19272] block device autoloading is deprecated and will be removed. [ 558.495789][T19287] tipc: Resetting bearer [ 558.602876][T19293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.054162][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 559.236628][ T30] audit: type=1326 audit(1753974946.111:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19305 comm="syz.3.5456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedeb8eb69 code=0x7fc00000 [ 559.563407][T19317] netlink: 328 bytes leftover after parsing attributes in process `syz.7.5459'. [ 559.649148][ T30] audit: type=1804 audit(1753974946.511:984): pid=19318 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.5460" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=76936 res=1 errno=0 [ 559.907731][T19324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.924898][ T30] audit: type=1326 audit(1753974946.801:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19305 comm="syz.3.5456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedeb8eb69 code=0x7fc00000 [ 560.084493][ T1836] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 560.094164][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 560.284410][ T1836] usb 1-1: Using ep0 maxpacket: 16 [ 560.300806][ T1836] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 560.327681][ T1836] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 560.347904][ T1836] usb 1-1: Product: syz [ 560.352171][ T1836] usb 1-1: Manufacturer: syz [ 560.367152][ T1836] usb 1-1: SerialNumber: syz [ 560.386850][ T1836] usb 1-1: config 0 descriptor?? [ 560.544368][ T5963] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 560.630879][ T5956] usb 1-1: USB disconnect, device number 52 [ 560.698828][ T5963] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.719269][ T5963] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.742478][ T5963] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 560.761853][ T5963] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 560.771990][ T5963] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.800778][ T5963] usb 8-1: config 0 descriptor?? [ 561.134260][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 561.239428][ T5963] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 561.765542][ T5963] usb 8-1: USB disconnect, device number 9 [ 562.174152][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 562.486741][T19381] binder: 19379:19381 ioctl c0306201 2000000003c0 returned -14 [ 562.534549][T19383] netlink: 'syz.7.5488': attribute type 39 has an invalid length. [ 563.215393][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 563.784492][T19431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5509'. [ 563.832790][ T30] audit: type=1326 audit(1753974950.701:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19436 comm="syz.7.5512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9298eb69 code=0x7ffc0000 [ 563.904405][ T30] audit: type=1326 audit(1753974950.731:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19436 comm="syz.7.5512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fef9298eb69 code=0x7ffc0000 [ 563.969676][ T30] audit: type=1326 audit(1753974950.731:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19436 comm="syz.7.5512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9298eb69 code=0x7ffc0000 [ 564.026264][ T30] audit: type=1326 audit(1753974950.731:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19436 comm="syz.7.5512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9298eb69 code=0x7ffc0000 [ 564.116789][ T30] audit: type=1326 audit(1753974950.731:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19436 comm="syz.7.5512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef9298eb69 code=0x7ffc0000 [ 564.160402][T19434] ./file0: Can't open blockdev [ 564.219396][ T30] audit: type=1326 audit(1753974950.731:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19436 comm="syz.7.5512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9298eb69 code=0x7ffc0000 [ 564.254155][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 564.258237][ T30] audit: type=1326 audit(1753974950.731:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19436 comm="syz.7.5512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9298eb69 code=0x7ffc0000 [ 564.351535][ T30] audit: type=1326 audit(1753974950.731:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19436 comm="syz.7.5512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef9298eb69 code=0x7ffc0000 [ 564.373947][ T30] audit: type=1326 audit(1753974950.741:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19436 comm="syz.7.5512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9298eb69 code=0x7ffc0000 [ 564.429576][T19456] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 564.454639][ T30] audit: type=1326 audit(1753974950.741:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19436 comm="syz.7.5512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fef9298d61f code=0x7ffc0000 [ 564.507359][ T30] audit: type=1326 audit(1753974950.741:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19436 comm="syz.7.5512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9298eb69 code=0x7ffc0000 [ 564.561256][ T30] audit: type=1326 audit(1753974950.741:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19436 comm="syz.7.5512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fef9298d61f code=0x7ffc0000 [ 564.584672][ T30] audit: type=1326 audit(1753974950.741:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19436 comm="syz.7.5512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9298eb69 code=0x7ffc0000 [ 564.606667][ T30] audit: type=1326 audit(1753974951.191:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19444 comm="syz.0.5515" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2efdb8eb69 code=0x0 [ 564.693122][T19462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5522'. [ 565.137802][T10976] nci: nci_rsp_packet: unknown rsp opcode 0xe39 [ 565.294281][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 566.050013][T19516] input: syz1 as /devices/virtual/input/input76 [ 566.334146][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 566.352914][ T30] audit: type=1326 audit(1753974953.221:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19530 comm="syz.9.5548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ff18eb69 code=0x7ffc0000 [ 566.412578][ T30] audit: type=1326 audit(1753974953.221:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19530 comm="syz.9.5548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ff18eb69 code=0x7ffc0000 [ 566.834711][ T5852] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 567.016685][ T5852] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.045072][ T5852] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.082147][ T5852] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 567.101321][ T5852] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 567.113637][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.149614][ T5852] usb 7-1: config 0 descriptor?? [ 567.374152][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 567.590181][ T5852] plantronics 0003:047F:FFFF.0045: reserved main item tag 0xd [ 567.641540][ T5852] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 567.897959][ T5956] usb 7-1: USB disconnect, device number 53 [ 567.956119][ T5852] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 568.128301][ T5852] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.148623][ T5852] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 568.161356][ T5852] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.192120][ T5852] usb 8-1: Product: syz [ 568.213334][ T5852] usb 8-1: Manufacturer: syz [ 568.232055][ T5852] usb 8-1: SerialNumber: syz [ 568.339456][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.424221][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 569.068308][T19619] xt_hashlimit: size too large, truncated to 1048576 [ 569.261772][ T5852] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 569.284274][ T5852] cdc_ncm 8-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 569.291850][ T5852] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 569.454142][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 569.476048][ T5852] cdc_ncm 8-1:1.0: setting tx_max = 88 [ 569.522927][ T5852] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 569.586671][ T5852] usb 8-1: USB disconnect, device number 10 [ 569.606194][ T5852] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP) [ 569.658678][T19626] input: syz0 as /devices/virtual/input/input78 [ 569.925665][T19635] input: syz0 as /devices/virtual/input/input79 [ 570.240568][T19648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 570.289847][T19652] Invalid ELF header magic: != ELF [ 570.494142][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 570.714480][ T5956] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 570.926108][ T5956] usb 8-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 570.950639][ T5956] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.964189][ T5956] usb 8-1: Product: syz [ 570.968451][ T5956] usb 8-1: Manufacturer: syz [ 570.973132][ T5956] usb 8-1: SerialNumber: syz [ 571.015224][ T5956] usb 8-1: config 0 descriptor?? [ 571.033704][ T5956] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 571.534216][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 677.104040][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 677.111081][ C0] rcu: 1-...!: (1 GPs behind) idle=f7e4/1/0x4000000000000000 softirq=117416/117419 fqs=0 [ 677.122552][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19723/1:b..l [ 677.130614][ C0] rcu: (detected by 0, t=10502 jiffies, g=99521, q=230 ncpus=2) [ 677.138382][ C0] Sending NMI from CPU 0 to CPUs 1: [ 677.138423][ C1] NMI backtrace for cpu 1 [ 677.138451][ C1] CPU: 1 UID: 0 PID: 19729 Comm: modprobe Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 677.138473][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 677.138488][ C1] RIP: 0010:kasan_check_range+0x1dd/0x2c0 [ 677.138515][ C1] Code: e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 12 41 80 3b 00 0f 85 b8 00 00 00 49 ff c3 49 ff cc 75 ee 5b 41 5c 41 5d 41 5e 41 5f 5d ce 6c 49 09 cc 45 84 ff 75 63 41 f7 c7 00 ff 00 00 75 5f 41 f7 [ 677.138532][ C1] RSP: 0018:ffffc90000a08b38 EFLAGS: 00000056 [ 677.138548][ C1] RAX: 00000000ffffff01 RBX: ffffffff99d102a8 RCX: ffffffff819edeb2 [ 677.138562][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff99d102a8 [ 677.138575][ C1] RBP: ffffc90000a08bf0 R08: ffffffff99d102ab R09: 1ffffffff33a2055 [ 677.138589][ C1] R10: dffffc0000000000 R11: fffffbfff33a2056 R12: ffffffff99d102b8 [ 677.138603][ C1] R13: ffffffff99d102b0 R14: 1ffffffff33a2057 R15: 1ffffffff33a2056 [ 677.138617][ C1] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 677.138632][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 677.138645][ C1] CR2: 00007fba0005cf98 CR3: 000000005d4aa000 CR4: 00000000003526f0 [ 677.138661][ C1] Call Trace: [ 677.138673][ C1] [ 677.138681][ C1] do_raw_spin_lock+0x112/0x290 [ 677.138714][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 677.138744][ C1] _raw_spin_lock_irqsave+0xb3/0xf0 [ 677.138776][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 677.138812][ C1] debug_object_deactivate+0x9a/0x250 [ 677.138846][ C1] debug_deactivate+0x1d/0x200 [ 677.138868][ C1] __hrtimer_run_queues+0x2b0/0xc60 [ 677.138899][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 677.138918][ C1] ? read_tsc+0x9/0x20 [ 677.138945][ C1] ? rcu_is_watching+0x15/0xb0 [ 677.138968][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 677.139003][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 677.139027][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 677.139045][ C1] [ 677.139051][ C1] [ 677.139058][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 677.139078][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 677.139106][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 ff 1a d7 09 e8 da b7 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 677.139121][ C1] RSP: 0018:ffffc9000beaf078 EFLAGS: 00000286 [ 677.139137][ C1] RAX: 5747a033c67b7d00 RBX: 0000000000000000 RCX: 5747a033c67b7d00 [ 677.139150][ C1] RDX: 0000000000000006 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40 [ 677.139163][ C1] RBP: ffffc9000beaf0d0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 677.139176][ C1] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffff8880309b1e00 [ 677.139190][ C1] R13: dffffc0000000000 R14: ffff8880314c5a00 R15: ffff8880b873a9d8 [ 677.139215][ C1] ? finish_task_switch+0x266/0x950 [ 677.139246][ C1] __schedule+0x16b2/0x4c90 [ 677.139263][ C1] ? __lock_acquire+0xab9/0xd20 [ 677.139288][ C1] ? preempt_schedule_common+0x83/0xd0 [ 677.139309][ C1] ? __pfx___schedule+0x10/0x10 [ 677.139327][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 677.139345][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 677.139370][ C1] ? preempt_schedule+0xae/0xc0 [ 677.139388][ C1] preempt_schedule_common+0x83/0xd0 [ 677.139406][ C1] preempt_schedule+0xae/0xc0 [ 677.139424][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 677.139451][ C1] preempt_schedule_thunk+0x16/0x30 [ 677.139484][ C1] _raw_spin_unlock_irqrestore+0xfd/0x110 [ 677.139513][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 677.139544][ C1] ? alloc_object+0xbf/0x310 [ 677.139575][ C1] debug_object_activate+0x2e2/0x420 [ 677.139607][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 677.139633][ C1] ? vms_complete_munmap_vmas+0x626/0x8a0 [ 677.139658][ C1] call_rcu+0xaa/0x9c0 [ 677.139686][ C1] ? __pfx_call_rcu+0x10/0x10 [ 677.139711][ C1] ? __phys_addr+0xd3/0x180 [ 677.139734][ C1] ? vms_complete_munmap_vmas+0x626/0x8a0 [ 677.139760][ C1] kmem_cache_free+0x309/0x400 [ 677.139781][ C1] vms_complete_munmap_vmas+0x626/0x8a0 [ 677.139816][ C1] mmap_region+0x161d/0x1f30 [ 677.139855][ C1] ? __pfx_mmap_region+0x10/0x10 [ 677.139882][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 677.139905][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 677.139931][ C1] ? rcu_is_watching+0x15/0xb0 [ 677.139950][ C1] ? process_measurement+0x15c3/0x1a40 [ 677.139998][ C1] ? mm_get_unmapped_area_vmflags+0xb3/0xe0 [ 677.140025][ C1] ? bpf_lsm_mmap_addr+0x9/0x20 [ 677.140045][ C1] ? security_mmap_addr+0x71/0x270 [ 677.140066][ C1] ? shmem_mapping+0xd/0x50 [ 677.140089][ C1] ? memfd_check_seals_mmap+0xc5/0x200 [ 677.140116][ C1] do_mmap+0xc45/0x10d0 [ 677.140151][ C1] ? __pfx_do_mmap+0x10/0x10 [ 677.140178][ C1] ? down_write_killable+0x178/0x230 [ 677.140203][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 677.140232][ C1] vm_mmap_pgoff+0x31b/0x4c0 [ 677.140263][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 677.140289][ C1] ? __fget_files+0x2a/0x420 [ 677.140312][ C1] ? __fget_files+0x3a0/0x420 [ 677.140332][ C1] ? __fget_files+0x2a/0x420 [ 677.140354][ C1] ksys_mmap_pgoff+0x51f/0x760 [ 677.140375][ C1] do_syscall_64+0xfa/0x3b0 [ 677.140395][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.140413][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.140431][ C1] ? clear_bhb_loop+0x60/0xb0 [ 677.140458][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.140476][ C1] RIP: 0033:0x7fdcdc21b242 [ 677.140494][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 677.140509][ C1] RSP: 002b:00007ffe81c1b308 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 677.140527][ C1] RAX: ffffffffffffffda RBX: 00007fdcdbee6000 RCX: 00007fdcdc21b242 [ 677.140540][ C1] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 00007fdcdbee6000 [ 677.140552][ C1] RBP: 0000000000000812 R08: 0000000000000000 R09: 000000000005f000 [ 677.140563][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffe81c1b3c8 [ 677.140574][ C1] R13: 00007fdcdbef26b0 R14: 00007ffe81c1b740 R15: 00000fffd0383664 [ 677.140598][ C1] [ 677.141410][ C0] task:syz.3.5632 state:R running task stack:25032 pid:19723 tgid:19722 ppid:5842 task_flags:0x400140 flags:0x00004002 [ 677.767275][ C0] Call Trace: [ 677.770587][ C0] [ 677.773581][ C0] __schedule+0x16aa/0x4c90 [ 677.778125][ C0] ? unwind_get_return_address+0x4d/0x90 [ 677.783805][ C0] ? arch_stack_walk+0xfc/0x150 [ 677.788713][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 677.794038][ C0] ? __pfx___schedule+0x10/0x10 [ 677.798941][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 677.804268][ C0] preempt_schedule_irq+0xb5/0x150 [ 677.809433][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 677.815197][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 677.821043][ C0] irqentry_exit+0x6f/0x90 [ 677.825497][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 677.831519][ C0] RIP: 0010:lock_release+0x2b5/0x3e0 [ 677.836838][ C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 fb 42 fe 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 677.856520][ C0] RSP: 0018:ffffc9000da4f410 EFLAGS: 00000206 [ 677.862631][ C0] RAX: 45d985961c881700 RBX: 0000000000000202 RCX: 45d985961c881700 [ 677.870644][ C0] RDX: 0000000000000001 RSI: ffffffff8db6fcc6 RDI: ffffffff8be1ba40 [ 677.878653][ C0] RBP: ffff88802f5d8b18 R08: ffffc9000da4fa88 R09: 0000000000000000 [ 677.886665][ C0] R10: ffffc9000da4f598 R11: fffff52001b49eb5 R12: 0000000000000001 [ 677.894677][ C0] R13: 0000000000000001 R14: ffffffff8e13f0e0 R15: ffff88802f5d8000 [ 677.902717][ C0] ? unwind_next_frame+0xa5/0x2390 [ 677.907880][ C0] ? unwind_next_frame+0xa5/0x2390 [ 677.913028][ C0] unwind_next_frame+0x19a9/0x2390 [ 677.918186][ C0] ? unwind_next_frame+0xa5/0x2390 [ 677.923336][ C0] ? __io_alloc_req_refill+0x9d/0x280 [ 677.928761][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 677.934965][ C0] arch_stack_walk+0x11c/0x150 [ 677.939777][ C0] ? io_submit_sqes+0xc31/0x1c50 [ 677.944765][ C0] stack_trace_save+0x9c/0xe0 [ 677.949485][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 677.954918][ C0] kasan_save_track+0x3e/0x80 [ 677.959645][ C0] ? kasan_save_track+0x3e/0x80 [ 677.964545][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 677.969599][ C0] ? kmem_cache_alloc_bulk_noprof+0x4e0/0x790 [ 677.975708][ C0] ? __io_alloc_req_refill+0x9d/0x280 [ 677.981178][ C0] __kasan_slab_alloc+0x6c/0x80 [ 677.986070][ C0] kmem_cache_alloc_bulk_noprof+0x4e0/0x790 [ 677.992009][ C0] ? kmem_cache_alloc_bulk_noprof+0xfa/0x790 [ 677.998041][ C0] __io_alloc_req_refill+0x9d/0x280 [ 678.003289][ C0] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 678.009148][ C0] ? __asan_memset+0x22/0x50 [ 678.013789][ C0] io_submit_sqes+0xc31/0x1c50 [ 678.018647][ C0] __se_sys_io_uring_enter+0x2df/0x2b20 [ 678.024236][ C0] ? __pfx_futex_wait+0x10/0x10 [ 678.029145][ C0] ? __mm_populate+0x308/0x380 [ 678.033957][ C0] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 678.039974][ C0] ? do_futex+0x333/0x420 [ 678.044345][ C0] ? up_write+0x1c4/0x420 [ 678.048731][ C0] ? __pfx_do_futex+0x10/0x10 [ 678.053448][ C0] ? vm_mmap_pgoff+0x3f0/0x4c0 [ 678.058269][ C0] ? __se_sys_futex+0x36f/0x400 [ 678.063178][ C0] ? rcu_is_watching+0x15/0xb0 [ 678.067984][ C0] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 678.073570][ C0] do_syscall_64+0xfa/0x3b0 [ 678.078113][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 678.083351][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.089461][ C0] ? clear_bhb_loop+0x60/0xb0 [ 678.094185][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.100118][ C0] RIP: 0033:0x7fbedeb8eb69 [ 678.104564][ C0] RSP: 002b:00007fbedfa36038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 678.113022][ C0] RAX: ffffffffffffffda RBX: 00007fbededb5fa0 RCX: 00007fbedeb8eb69 [ 678.121028][ C0] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000004 [ 678.129029][ C0] RBP: 00007fbedec11df1 R08: 0000000000000000 R09: 0000000000000000 [ 678.137032][ C0] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 678.145039][ C0] R13: 0000000000000000 R14: 00007fbededb5fa0 R15: 00007ffe205a1558 [ 678.153066][ C0] [ 678.156115][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g99521 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 678.167349][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 678.177354][ C0] rcu: RCU grace-period kthread stack dump: [ 678.183271][ C0] task:rcu_preempt state:R running task stack:27320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 678.196831][ C0] Call Trace: [ 678.200144][ C0] [ 678.203111][ C0] __schedule+0x16aa/0x4c90 [ 678.207660][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 678.212910][ C0] ? schedule+0x165/0x360 [ 678.217273][ C0] ? __lock_acquire+0xab9/0xd20 [ 678.222158][ C0] ? __pfx___schedule+0x10/0x10 [ 678.227066][ C0] ? schedule+0x91/0x360 [ 678.231349][ C0] schedule+0x165/0x360 [ 678.235554][ C0] schedule_timeout+0x12b/0x270 [ 678.240454][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 678.245875][ C0] ? __pfx_process_timeout+0x10/0x10 [ 678.251211][ C0] ? prepare_to_swait_event+0x341/0x380 [ 678.256898][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 678.261799][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 678.266771][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 678.272009][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 678.277327][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 678.282571][ C0] ? finish_swait+0xcd/0x1f0 [ 678.287208][ C0] rcu_gp_kthread+0x99/0x390 [ 678.291841][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 678.297080][ C0] ? __kthread_parkme+0x7b/0x200 [ 678.302055][ C0] ? __kthread_parkme+0x1a1/0x200 [ 678.307126][ C0] kthread+0x70e/0x8a0 [ 678.311241][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 678.316474][ C0] ? __pfx_kthread+0x10/0x10 [ 678.321108][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 678.326340][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 678.331579][ C0] ? __pfx_kthread+0x10/0x10 [ 678.336215][ C0] ret_from_fork+0x3fc/0x770 [ 678.340847][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 678.346003][ C0] ? __switch_to_asm+0x39/0x70 [ 678.350807][ C0] ? __switch_to_asm+0x33/0x70 [ 678.355615][ C0] ? __pfx_kthread+0x10/0x10 [ 678.360250][ C0] ret_from_fork_asm+0x1a/0x30 [ 678.365078][ C0] [ 678.368130][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 678.374487][ C0] CPU: 0 UID: 0 PID: 1836 Comm: kworker/0:4 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 678.384504][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 678.394599][ C0] Workqueue: events jump_label_update_timeout [ 678.400723][ C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 678.407435][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 80 6e 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 2b 6a 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 10 6a 0b [ 678.427082][ C0] RSP: 0018:ffffc90004777780 EFLAGS: 00000293 [ 678.433189][ C0] RAX: ffffffff81b4bbb0 RBX: ffff8880b863b040 RCX: ffff888028d68000 [ 678.441192][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 678.449198][ C0] RBP: ffffc900047778e0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 678.457205][ C0] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: 1ffff110170e7f2d [ 678.465227][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b873f968 [ 678.473232][ C0] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 678.482197][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 678.488811][ C0] CR2: 00007f2efe8e56c0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 678.496839][ C0] DR0: 0000000000000000 DR1: 0000000000000004 DR2: 0000000000000000 [ 678.504931][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 678.512933][ C0] Call Trace: [ 678.516246][ C0] [ 678.519225][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 678.525600][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 678.531018][ C0] ? kvm_irq_delivery_to_apic+0x410/0xa20 [ 678.536783][ C0] ? __pfx___text_poke+0x10/0x10 [ 678.541760][ C0] ? rcu_is_watching+0x15/0xb0 [ 678.546585][ C0] ? trace_contention_end+0x39/0x120 [ 678.551920][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 678.556983][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 678.562138][ C0] smp_text_poke_batch_finish+0x5e0/0x1100 [ 678.567996][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 678.573061][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 678.579358][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 678.585650][ C0] ? __jump_label_update+0x37e/0x3a0 [ 678.590992][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 678.597016][ C0] __static_key_slow_dec_cpuslocked+0xbb/0x110 [ 678.603213][ C0] jump_label_update_timeout+0x1e/0x30 [ 678.608721][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 678.614478][ C0] process_scheduled_works+0xade/0x17b0 [ 678.620094][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 678.626132][ C0] worker_thread+0x8a0/0xda0 [ 678.630798][ C0] kthread+0x70e/0x8a0 [ 678.634915][ C0] ? __pfx_worker_thread+0x10/0x10 [ 678.640061][ C0] ? __pfx_kthread+0x10/0x10 [ 678.644701][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 678.649941][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 678.655173][ C0] ? __pfx_kthread+0x10/0x10 [ 678.659806][ C0] ret_from_fork+0x3fc/0x770 [ 678.664435][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 678.669589][ C0] ? __switch_to_asm+0x39/0x70 [ 678.674401][ C0] ? __switch_to_asm+0x33/0x70 [ 678.679202][ C0] ? __pfx_kthread+0x10/0x10 [ 678.683836][ C0] ret_from_fork_asm+0x1a/0x30 [ 678.688659][ C0]