last executing test programs: 6.766660289s ago: executing program 1 (id=865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f00000034c0)={{0x1, 0x0, 0x80, {0x2, 0x2, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.919308771s ago: executing program 3 (id=876): ioperm(0x9, 0x9, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.633357162s ago: executing program 1 (id=879): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4f4, &(0x7f0000000280)={0x0, 0x0, 0x400, 0x1, 0x153}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 4.920965865s ago: executing program 3 (id=891): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) 4.58713767s ago: executing program 3 (id=894): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x80000001, 0x0, &(0x7f0000000080)=0x5f) 4.460083805s ago: executing program 3 (id=896): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}], 0x1, 0x0, 0x0, 0x8050}, 0x20040051) 4.399248899s ago: executing program 1 (id=897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0xfffffffd) futex(&(0x7f000000cffc)=0x3, 0x5, 0xf2, 0x0, &(0x7f0000000000), 0x5000000) 4.291739616s ago: executing program 3 (id=898): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="0ddac400000000000000bfb48c676fab22e2d076fb296526ae98655ee4c429d1f245f7b1cfa5447a76830be1d0cfd34ed8af4ddbcc0b787eb0619e69f27ab98c3754b47c0b61fc44", 0x48}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3e}], 0x30, 0x88010}], 0x1, 0x20000010) recvmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) 4.271124477s ago: executing program 1 (id=899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x106, 0x40, 0x40, 0x41}, 0x50) 4.045524368s ago: executing program 3 (id=900): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000280)="96b616d750a855b7432bf00f2d", 0xd}], 0x1) 3.908345439s ago: executing program 0 (id=902): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x40800000000000, 0x3a, 'btrfs\x00', 0x3a, 'quota', 0x3a, './file1'}, 0x32) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}]) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) 3.841754943s ago: executing program 1 (id=903): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x80800}) listen(r0, 0x5) io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 3.630977345s ago: executing program 1 (id=905): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(0xffffffffffffffff, 0x0, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) 3.347306876s ago: executing program 2 (id=907): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r1, r1, 0x0, 0x40008) 3.110395506s ago: executing program 0 (id=908): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000013c0)=[{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c40)="335f9418e96bdabc29828f886e7caf4f09d063701cf76a5187e659e1b7b4cc6cd210b4a280afcc51c4478c2adae9b75e", 0x30}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x20000090) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000bc0)=""/118, 0x76}], 0x1}, 0x0) 3.000209986s ago: executing program 0 (id=910): mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) chroot(&(0x7f0000000780)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000900)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) 2.73068497s ago: executing program 0 (id=912): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 2.374831413s ago: executing program 0 (id=914): r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfeffffff, r0, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 2.02944639s ago: executing program 0 (id=916): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008094}, 0x8840) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000090abd5e200000b4699986a758455"], 0x0}, 0x0) 1.51988321s ago: executing program 2 (id=920): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 1.255494425s ago: executing program 2 (id=922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 1.087232826s ago: executing program 2 (id=924): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x3d, &(0x7f00000005c0)="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", 0x0, 0x3, 0x0, 0x0, 0xfe25, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x2b) 1.086789248s ago: executing program 4 (id=925): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r0 = syz_io_uring_setup(0x386, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa0}}) io_uring_enter(r0, 0x2def, 0xb80c, 0x4e, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 980.318906ms ago: executing program 4 (id=926): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r0, &(0x7f00000002c0)="12043600d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 871.473384ms ago: executing program 2 (id=927): mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x17) 847.220782ms ago: executing program 4 (id=928): socket$nl_audit(0x10, 0x3, 0x9) socket(0x1e, 0x1, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x0, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 736.167589ms ago: executing program 2 (id=929): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 471.319738ms ago: executing program 4 (id=930): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) setsockopt$llc_int(r0, 0x6a, 0x5, 0x0, 0x0) 275.484997ms ago: executing program 4 (id=931): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) getdents64(r0, &(0x7f0000001f80)=""/4098, 0x1002) 0s ago: executing program 4 (id=932): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. [ 71.080748][ T5789] cgroup: Unknown subsys name 'net' [ 71.310586][ T5789] cgroup: Unknown subsys name 'cpuset' [ 71.366478][ T5789] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.972489][ T5789] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.533910][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.544302][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.548830][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.549541][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.550668][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.551399][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.582078][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.582998][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.584674][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.585388][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.786493][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.803471][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.804801][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.807348][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.810023][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.881833][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.883431][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.884129][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.885235][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.886639][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.951860][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.953171][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.954070][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.955508][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.958492][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.443118][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 76.480571][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 76.770221][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 77.077998][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.079043][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.079635][ T5806] bridge_slave_0: entered allmulticast mode [ 77.081211][ T5806] bridge_slave_0: entered promiscuous mode [ 77.288532][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.288632][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.288752][ T5806] bridge_slave_1: entered allmulticast mode [ 77.290276][ T5806] bridge_slave_1: entered promiscuous mode [ 77.292084][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.292188][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.292301][ T5801] bridge_slave_0: entered allmulticast mode [ 77.293751][ T5801] bridge_slave_0: entered promiscuous mode [ 77.446750][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.446825][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.446930][ T5801] bridge_slave_1: entered allmulticast mode [ 77.448449][ T5801] bridge_slave_1: entered promiscuous mode [ 77.587374][ T61] Bluetooth: hci0: command tx timeout [ 77.647095][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 77.666418][ T61] Bluetooth: hci1: command tx timeout [ 77.669421][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.807001][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 77.813726][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.834704][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.907065][ T61] Bluetooth: hci2: command tx timeout [ 77.985936][ T61] Bluetooth: hci4: command tx timeout [ 77.985945][ T5805] Bluetooth: hci3: command tx timeout [ 78.048622][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.106806][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.106922][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.107031][ T5811] bridge_slave_0: entered allmulticast mode [ 78.108536][ T5811] bridge_slave_0: entered promiscuous mode [ 78.262859][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.262980][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.263092][ T5811] bridge_slave_1: entered allmulticast mode [ 78.264554][ T5811] bridge_slave_1: entered promiscuous mode [ 78.338048][ T5806] team0: Port device team_slave_0 added [ 78.503929][ T5806] team0: Port device team_slave_1 added [ 78.505616][ T5801] team0: Port device team_slave_0 added [ 78.647895][ T5801] team0: Port device team_slave_1 added [ 78.939496][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.178903][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.237904][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.237914][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.237927][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.316753][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.316940][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.317111][ T5813] bridge_slave_0: entered allmulticast mode [ 79.318784][ T5813] bridge_slave_0: entered promiscuous mode [ 79.467408][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.467424][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.467446][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.468546][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.468555][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.468567][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.469091][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.469232][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.469403][ T5813] bridge_slave_1: entered allmulticast mode [ 79.471090][ T5813] bridge_slave_1: entered promiscuous mode [ 79.555327][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.555455][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.555638][ T5815] bridge_slave_0: entered allmulticast mode [ 79.558452][ T5815] bridge_slave_0: entered promiscuous mode [ 79.623738][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.623752][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.623766][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.676075][ T61] Bluetooth: hci0: command tx timeout [ 79.698033][ T5811] team0: Port device team_slave_0 added [ 79.699546][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.699729][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.699854][ T5815] bridge_slave_1: entered allmulticast mode [ 79.701335][ T5815] bridge_slave_1: entered promiscuous mode [ 79.745938][ T61] Bluetooth: hci1: command tx timeout [ 79.798347][ T5811] team0: Port device team_slave_1 added [ 79.920322][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.986079][ T61] Bluetooth: hci2: command tx timeout [ 80.066072][ T5805] Bluetooth: hci3: command tx timeout [ 80.066161][ T61] Bluetooth: hci4: command tx timeout [ 80.139361][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.199548][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.437471][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.437482][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.437495][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.440343][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.445699][ T5806] hsr_slave_0: entered promiscuous mode [ 80.448534][ T5806] hsr_slave_1: entered promiscuous mode [ 80.597509][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.597523][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.597546][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.662572][ T5801] hsr_slave_0: entered promiscuous mode [ 80.663515][ T5801] hsr_slave_1: entered promiscuous mode [ 80.664198][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 80.664282][ T5801] Cannot create hsr debugfs directory [ 80.667277][ T5813] team0: Port device team_slave_0 added [ 80.780426][ T5813] team0: Port device team_slave_1 added [ 80.783301][ T5815] team0: Port device team_slave_0 added [ 80.908788][ T5815] team0: Port device team_slave_1 added [ 81.591680][ T1237] cfg80211: failed to load regulatory.db [ 81.624373][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.624388][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.624410][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.745953][ T61] Bluetooth: hci0: command tx timeout [ 81.835873][ T61] Bluetooth: hci1: command tx timeout [ 81.897396][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.897410][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.897433][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.902961][ T5811] hsr_slave_0: entered promiscuous mode [ 81.903720][ T5811] hsr_slave_1: entered promiscuous mode [ 81.904260][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 81.904289][ T5811] Cannot create hsr debugfs directory [ 81.905179][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.905189][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.905202][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.953838][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.953853][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.953883][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.066106][ T61] Bluetooth: hci2: command tx timeout [ 82.146280][ T61] Bluetooth: hci4: command tx timeout [ 82.146289][ T5805] Bluetooth: hci3: command tx timeout [ 82.461540][ T5813] hsr_slave_0: entered promiscuous mode [ 82.462319][ T5813] hsr_slave_1: entered promiscuous mode [ 82.463064][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 82.463078][ T5813] Cannot create hsr debugfs directory [ 82.737543][ T5815] hsr_slave_0: entered promiscuous mode [ 82.738299][ T5815] hsr_slave_1: entered promiscuous mode [ 82.738829][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 82.738846][ T5815] Cannot create hsr debugfs directory [ 83.602389][ T5806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.660123][ T5806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.698551][ T5806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.747438][ T5806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.836585][ T61] Bluetooth: hci0: command tx timeout [ 83.851101][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.891769][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.906198][ T61] Bluetooth: hci1: command tx timeout [ 83.930410][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.998425][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.108005][ T5811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.144064][ T5811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.146615][ T61] Bluetooth: hci2: command tx timeout [ 84.169489][ T5811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.214273][ T5811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.226285][ T5805] Bluetooth: hci4: command tx timeout [ 84.226327][ T61] Bluetooth: hci3: command tx timeout [ 84.334718][ T5813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.379904][ T5813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.412903][ T5813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.462240][ T5813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.571964][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.620250][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.654318][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.692463][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.699287][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.792107][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.809924][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.834530][ T1567] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.835331][ T1567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.874718][ T1567] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.875005][ T1567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.914192][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.941569][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.945531][ T1498] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.945672][ T1498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.982882][ T1498] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.983004][ T1498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.045553][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.083370][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.095175][ T1498] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.095296][ T1498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.139701][ T1498] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.139811][ T1498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.210121][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.269551][ T1498] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.269979][ T1498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.282459][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.309200][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.310794][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.392155][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.464764][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.466955][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.502639][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.502789][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.694604][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.820859][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.959989][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.962250][ T5806] veth0_vlan: entered promiscuous mode [ 86.019003][ T5806] veth1_vlan: entered promiscuous mode [ 86.064444][ T5801] veth0_vlan: entered promiscuous mode [ 86.096588][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.162373][ T5801] veth1_vlan: entered promiscuous mode [ 86.222264][ T5806] veth0_macvtap: entered promiscuous mode [ 86.254925][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.255219][ T5811] veth0_vlan: entered promiscuous mode [ 86.258949][ T5806] veth1_macvtap: entered promiscuous mode [ 86.309168][ T5811] veth1_vlan: entered promiscuous mode [ 86.369160][ T5801] veth0_macvtap: entered promiscuous mode [ 86.375551][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.420789][ T5801] veth1_macvtap: entered promiscuous mode [ 86.425148][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.471503][ T1178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.479630][ T1178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.494303][ T1178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.509542][ T1178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.529178][ T5815] veth0_vlan: entered promiscuous mode [ 86.532520][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.591933][ T5811] veth0_macvtap: entered promiscuous mode [ 86.599789][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.654568][ T5811] veth1_macvtap: entered promiscuous mode [ 86.670433][ T5815] veth1_vlan: entered promiscuous mode [ 86.734785][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.751831][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.763921][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.791320][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.811748][ T5813] veth0_vlan: entered promiscuous mode [ 86.865431][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.877211][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.877231][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.956472][ T5813] veth1_vlan: entered promiscuous mode [ 86.968715][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.065739][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.071566][ T1498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.071582][ T1498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.085301][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.097980][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.115299][ T5815] veth0_macvtap: entered promiscuous mode [ 87.126584][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.205519][ T1567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.205537][ T1567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.214497][ T5815] veth1_macvtap: entered promiscuous mode [ 87.406395][ T1498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.406412][ T1498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.472041][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.477437][ T5813] veth0_macvtap: entered promiscuous mode [ 87.525359][ T5914] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.545135][ T5813] veth1_macvtap: entered promiscuous mode [ 87.564252][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.592950][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.592967][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.615540][ T1178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.619534][ T1178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.635421][ T1178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.662414][ T1178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.697284][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.709761][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.709780][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.782936][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.852625][ T1567] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.853365][ T1567] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.853404][ T1567] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.853437][ T1567] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.251316][ T1567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.251334][ T1567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.573041][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.573059][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.693552][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.693569][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.726153][ T1883] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.844604][ T1567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.844623][ T1567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.928986][ T1883] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.929011][ T1883] usb 3-1: config 0 has no interface number 0 [ 88.929073][ T1883] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.929095][ T1883] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.929141][ T1883] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 88.929160][ T1883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.029797][ T1883] usb 3-1: config 0 descriptor?? [ 89.252781][ T5943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 89.547197][ T1883] prodikeys 0003:041E:2801.0001: item fetching failed at offset 5/7 [ 89.548134][ T1883] prodikeys 0003:041E:2801.0001: hid parse failed [ 89.548233][ T1883] prodikeys 0003:041E:2801.0001: probe with driver prodikeys failed with error -22 [ 89.762277][ T5953] usb 3-1: USB disconnect, device number 2 [ 89.822944][ T37] audit: type=1326 audit(1761364197.373:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5949 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3f3aefc9 code=0x7fc00000 [ 90.271007][ T37] audit: type=1326 audit(1761364197.813:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5949 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3f3aefc9 code=0x7fc00000 [ 90.617535][ T5962] warning: `syz.2.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.375286][ T6005] netlink: 'syz.0.33': attribute type 5 has an invalid length. [ 92.471272][ T6005] batman_adv: batadv0: Adding interface: vxlan0 [ 92.471288][ T6005] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.471418][ T6005] batman_adv: batadv0: Interface activated: vxlan0 [ 92.480266][ T6005] Zero length message leads to an empty skb [ 92.480380][ T1498] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.549932][ T1498] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.638050][ T1498] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.747112][ T1498] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.471727][ T6034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 98.059663][ T6121] Bluetooth: MGMT ver 1.23 [ 98.059703][ T6121] Bluetooth: hci0: invalid length 0, exp 2 for type 1 [ 98.343409][ T6126] syz.4.80 uses obsolete (PF_INET,SOCK_PACKET) [ 99.116708][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 99.412350][ T6138] netlink: 20 bytes leftover after parsing attributes in process `syz.3.84'. [ 100.448158][ T6134] hsr_slave_1 (unregistering): left promiscuous mode [ 100.755274][ T6144] netlink: 'syz.2.87': attribute type 2 has an invalid length. [ 100.755293][ T6144] netlink: 48 bytes leftover after parsing attributes in process `syz.2.87'. [ 102.998035][ T6192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.062681][ T37] audit: type=1800 audit(1761364210.573:4): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.105" name="memory.events" dev="tmpfs" ino=190 res=0 errno=0 [ 103.892819][ T6213] netlink: 'syz.3.115': attribute type 15 has an invalid length. [ 103.892839][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.115'. [ 103.947915][ T6213] netlink: 'syz.3.115': attribute type 15 has an invalid length. [ 103.947928][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.115'. [ 103.948074][ T1394] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 103.948293][ T1394] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 103.959821][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 103.959910][ T1394] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 105.107571][ T6228] overlayfs: failed lookup in lower (newroot/39, name='file1', err=-40): overlapping layers [ 105.205335][ T6225] syz.0.120 (6225) used greatest stack depth: 15448 bytes left [ 105.457299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.088180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.565261][ T6264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.714220][ T6295] netlink: 'syz.0.146': attribute type 1 has an invalid length. [ 107.714239][ T6295] netlink: 56 bytes leftover after parsing attributes in process `syz.0.146'. [ 107.715972][ T994] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.882342][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.882372][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.882391][ T994] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.882429][ T994] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.882449][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.884917][ T6297] netlink: 76 bytes leftover after parsing attributes in process `syz.1.147'. [ 107.895488][ T994] usb 5-1: config 0 descriptor?? [ 108.362134][ T994] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 108.362172][ T994] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 108.362195][ T994] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 108.362219][ T994] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 108.362242][ T994] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 108.362265][ T994] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 108.362288][ T994] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 108.362310][ T994] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 108.362332][ T994] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 108.362355][ T994] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 108.627330][ T994] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 108.744372][ T994] usb 5-1: USB disconnect, device number 2 [ 108.754222][ T6321] ======================================================= [ 108.754222][ T6321] WARNING: The mand mount option has been deprecated and [ 108.754222][ T6321] and is ignored by this kernel. Remove the mand [ 108.754222][ T6321] option from the mount to silence this warning. [ 108.754222][ T6321] ======================================================= [ 109.943980][ T6357] netlink: 36 bytes leftover after parsing attributes in process `syz.2.171'. [ 110.691562][ T6365] syzkaller1: entered promiscuous mode [ 110.691586][ T6365] syzkaller1: entered allmulticast mode [ 111.004612][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 111.005306][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 111.037843][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 111.038042][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 111.145772][ T5883] libceph: connect (1)[b::]:6789 error -101 [ 111.151559][ T5883] libceph: mon0 (1)[b::]:6789 connect error [ 111.172512][ T5883] libceph: connect (1)[b::]:6789 error -101 [ 111.172709][ T5883] libceph: mon0 (1)[b::]:6789 connect error [ 111.312965][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 111.313184][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 111.427203][ T994] libceph: connect (1)[b::]:6789 error -101 [ 111.427382][ T994] libceph: mon0 (1)[b::]:6789 connect error [ 111.449358][ T6382] option changes via remount are deprecated (pid=6381 comm=syz.0.182) [ 111.735885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.742985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.744020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.745189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.745902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.776091][ T6375] ceph: No mds server is up or the cluster is laggy [ 111.778637][ T6370] ceph: No mds server is up or the cluster is laggy [ 111.817081][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 111.817282][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 111.979079][ T5883] libceph: connect (1)[b::]:6789 error -101 [ 111.979347][ T5883] libceph: mon0 (1)[b::]:6789 connect error [ 112.119076][ T6400] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 112.686177][ T6410] mmap: syz.4.191 (6410) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.283209][ T6422] kvm: apic: phys broadcast and lowest prio [ 113.949511][ T5803] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.110876][ T5803] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.110908][ T5803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.110931][ T5803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 114.110950][ T5803] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.110988][ T5803] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.111007][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.142409][ T5953] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.200567][ T5803] usb 1-1: config 0 descriptor?? [ 114.335982][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 114.343001][ T5953] usb 2-1: config 0 has no interfaces? [ 114.362597][ T5953] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 114.362686][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.362704][ T5953] usb 2-1: Product: syz [ 114.362716][ T5953] usb 2-1: Manufacturer: syz [ 114.362728][ T5953] usb 2-1: SerialNumber: syz [ 114.438128][ T5953] usb 2-1: config 0 descriptor?? [ 114.507355][ T6449] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 114.549265][ T6449] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 114.678735][ T5953] usb 2-1: USB disconnect, device number 2 [ 114.733574][ T5803] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 115.076016][ T5953] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 115.165211][ T6464] netlink: 'syz.2.214': attribute type 1 has an invalid length. [ 115.241101][ T5953] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.241125][ T5953] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.245684][ T5953] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.245710][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.245727][ T5953] usb 2-1: Product: syz [ 115.245739][ T5953] usb 2-1: Manufacturer: syz [ 115.245751][ T5953] usb 2-1: SerialNumber: syz [ 115.330017][ T6464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.429014][ T6467] bond1: (slave geneve2): making interface the new active one [ 115.455522][ T6467] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 115.542949][ T5953] usb 2-1: 0:2 : does not exist [ 115.559282][ T5953] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 115.589988][ T994] usb 1-1: USB disconnect, device number 2 [ 115.802310][ T5953] usb 2-1: USB disconnect, device number 3 [ 115.959885][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.292059][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.222'. [ 116.611415][ T5883] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.765985][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 116.771360][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.771377][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.771387][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.771409][ T5883] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 116.771420][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.784768][ T5883] usb 2-1: config 0 descriptor?? [ 117.317569][ T5883] HID 045e:07da: Invalid code 65791 type 1 [ 117.328957][ T5883] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0004/input/input6 [ 117.447451][ T5883] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 117.563573][ T5803] usb 2-1: USB disconnect, device number 4 [ 117.819588][ T6519] fido_id[6519]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 118.515946][ T994] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 118.676645][ T994] usb 5-1: config 1 has an invalid descriptor of length 160, skipping remainder of the config [ 118.676669][ T994] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.687751][ T994] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.687850][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.687868][ T994] usb 5-1: Product: syz [ 118.687880][ T994] usb 5-1: Manufacturer: syz [ 118.687892][ T994] usb 5-1: SerialNumber: syz [ 118.973141][ T994] usb 5-1: 0:2 : does not exist [ 118.982073][ T994] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 119.212723][ T994] usb 5-1: USB disconnect, device number 3 [ 119.468660][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.901195][ T6568] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.075118][ T6571] syz_tun: entered allmulticast mode [ 120.092804][ T6570] syz_tun: left allmulticast mode [ 120.121016][ T6575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 120.174033][ T6574] serio: Serial port ttyS3 [ 122.290779][ T6628] process 'syz.0.276' launched '/dev/fd/4' with NULL argv: empty string added [ 123.302845][ T6652] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 124.736391][ T6681] loop2: detected capacity change from 0 to 7 [ 124.771662][ T5933] Dev loop2: unable to read RDB block 7 [ 124.771703][ T5933] loop2: AHDI p2 p3 [ 124.771736][ T5933] loop2: partition table partially beyond EOD, truncated [ 124.809961][ T5933] loop2: p3 start 335544320 is beyond EOD, truncated [ 124.834348][ T6681] Dev loop2: unable to read RDB block 7 [ 124.834377][ T6681] loop2: AHDI p2 p3 [ 124.834403][ T6681] loop2: partition table partially beyond EOD, truncated [ 124.834684][ T6681] loop2: p3 start 335544320 is beyond EOD, truncated [ 125.067096][ T6685] Illegal XDP return value 4294967294 on prog (id 37) dev N/A, expect packet loss! [ 125.405950][ T5883] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 125.407296][ T6700] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.432747][ T6696] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.588046][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.588092][ T5883] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.588112][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.602633][ T5883] usb 3-1: config 0 descriptor?? [ 125.869806][ T5883] usbhid 3-1:0.0: can't add hid device: -71 [ 125.869924][ T5883] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 125.896334][ T5883] usb 3-1: USB disconnect, device number 3 [ 126.370533][ T31] kernel write not supported for file [eventfd] (pid: 31 comm: kworker/1:0) [ 126.376025][ T5883] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.528079][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 126.531142][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.531186][ T5883] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 126.531206][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.541142][ T5883] usb 3-1: config 0 descriptor?? [ 126.554874][ T5883] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 126.570369][ T5883] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 126.906147][ T31] libceph: connect (1)[c::]:6789 error -101 [ 126.906339][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 126.913133][ T31] libceph: connect (1)[c::]:6789 error -101 [ 126.913340][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 127.017994][ T5953] usb 3-1: USB disconnect, device number 4 [ 127.028084][ T5953] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 127.039884][ T1230] libceph: connect (1)[b::]:6789 error -101 [ 127.040066][ T1230] libceph: mon0 (1)[b::]:6789 connect error [ 127.051117][ T1230] libceph: connect (1)[b::]:6789 error -101 [ 127.051315][ T1230] libceph: mon0 (1)[b::]:6789 connect error [ 127.166324][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 127.167333][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 127.306377][ T5953] libceph: connect (1)[b::]:6789 error -101 [ 127.306588][ T5953] libceph: mon0 (1)[b::]:6789 connect error [ 127.688249][ T31] libceph: connect (1)[c::]:6789 error -101 [ 127.688448][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 127.721526][ T6733] ceph: No mds server is up or the cluster is laggy [ 127.732975][ T6738] ceph: No mds server is up or the cluster is laggy [ 127.816445][ T5953] libceph: connect (1)[b::]:6789 error -101 [ 127.816646][ T5953] libceph: mon0 (1)[b::]:6789 connect error [ 128.659456][ T31] kernel read not supported for file /vcs (pid: 31 comm: kworker/1:0) [ 129.425882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.285871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.286076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.070121][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 132.132119][ T5803] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 132.285938][ T5803] usb 4-1: Using ep0 maxpacket: 32 [ 132.288683][ T5803] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 132.288705][ T5803] usb 4-1: config 0 has no interface number 0 [ 132.288750][ T5803] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 132.291676][ T5803] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 132.291698][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.291715][ T5803] usb 4-1: Product: syz [ 132.291727][ T5803] usb 4-1: Manufacturer: syz [ 132.291739][ T5803] usb 4-1: SerialNumber: syz [ 132.310138][ T5803] usb 4-1: config 0 descriptor?? [ 132.375780][ T5803] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 132.376089][ T5803] em28xx 4-1:0.132: Video interface 132 found: [ 132.774247][ T5803] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 132.793989][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.794079][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.863383][ T6870] overlayfs: failed to set uuid (70/file0, err=-1); falling back to uuid=null. [ 132.863570][ T6870] overlayfs: failed to verify upper root origin [ 133.386069][ T5803] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 133.386152][ T5803] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 133.386194][ T5803] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 133.449910][ T5803] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 133.449935][ T5803] em28xx 4-1:0.132: analog set to bulk mode. [ 133.450753][ T1230] em28xx 4-1:0.132: Registering V4L2 extension [ 133.572137][ T5803] usb 4-1: USB disconnect, device number 2 [ 133.581053][ T5803] em28xx 4-1:0.132: Disconnecting em28xx [ 134.237768][ T1230] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 134.237790][ T1230] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 134.237805][ T1230] em28xx 4-1:0.132: No AC97 audio processor [ 134.363993][ T1230] usb 4-1: Decoder not found [ 134.364011][ T1230] em28xx 4-1:0.132: failed to create media graph [ 134.364066][ T1230] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 134.404215][ T1230] em28xx 4-1:0.132: Remote control support is not available for this card. [ 134.410533][ T5803] em28xx 4-1:0.132: Closing input extension [ 134.543902][ T5803] em28xx 4-1:0.132: Freeing device [ 135.317944][ T6933] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 135.646746][ T6933] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.664592][ T6946] Bluetooth: hci0: invalid length 4, exp 2 for type 6 [ 135.682566][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 135.844628][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 135.857859][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 135.857884][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.857901][ T9] usb 4-1: Product: syz [ 135.857913][ T9] usb 4-1: Manufacturer: syz [ 135.857925][ T9] usb 4-1: SerialNumber: syz [ 136.133048][ T6952] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 136.161020][ T6939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.164023][ T6939] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 136.172371][ T6939] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 136.237648][ T6954] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 136.536309][ T1883] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.688395][ T1883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.688425][ T1883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.688444][ T1883] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.688483][ T1883] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.688512][ T1883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.760315][ T1883] usb 5-1: config 0 descriptor?? [ 137.004952][ T6968] 9p: Unknown uid 00000000004294967295 [ 137.226652][ T1883] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 137.454245][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 137.454284][ T6974] bond0: Unable to set down delay as MII monitoring is disabled [ 137.853745][ C0] plantronics 0003:047F:FFFF.0005: hid_field_extract() called with n (132) > 32! (ktimers/0) [ 138.068630][ T1883] usb 5-1: USB disconnect, device number 4 [ 138.421026][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 4 proto 1 vid 0x0525 pid 0xA4A8 [ 138.451317][ T9] usb 4-1: USB disconnect, device number 3 [ 138.490481][ T9] usblp0: removed [ 138.993491][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 139.136183][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 139.139567][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 139.139589][ T9] usb 4-1: config 1 has no interface number 1 [ 139.139636][ T9] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 139.139655][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 139.139692][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.144852][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.144877][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.144896][ T9] usb 4-1: Product: syz [ 139.144908][ T9] usb 4-1: Manufacturer: syz [ 139.144919][ T9] usb 4-1: SerialNumber: syz [ 139.556058][ T1230] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 139.601823][ T9] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 139.788014][ T1230] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 139.788075][ T1230] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.788621][ T1230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 139.788646][ T1230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 139.788671][ T1230] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.788711][ T1230] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.788939][ T1230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.836921][ T1230] usb 3-1: config 0 descriptor?? [ 139.839950][ T7028] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 140.288514][ T1230] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 140.357004][ T1230] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 140.426870][ T9] usb 4-1: 2:1: cannot get freq at ep 0x82 [ 140.627268][ T5953] usb 3-1: USB disconnect, device number 5 [ 140.645512][ T9] usb 4-1: USB disconnect, device number 4 [ 140.923435][ T6704] udevd[6704]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.308814][ T5883] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 141.459254][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 141.464832][ T5883] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 141.464857][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.464874][ T5883] usb 5-1: Product: syz [ 141.464886][ T5883] usb 5-1: Manufacturer: syz [ 141.464899][ T5883] usb 5-1: SerialNumber: syz [ 141.520907][ T5883] usb 5-1: config 0 descriptor?? [ 141.794580][ T5883] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 142.275087][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 142.275476][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.455'. [ 142.362052][ T1178] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.362477][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 142.362493][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.455'. [ 142.362546][ T1178] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.363445][ T1178] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.363482][ T1178] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.662144][ T5883] gspca_sunplus: reg_w_riv err -71 [ 142.662250][ T5883] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 142.694050][ T5883] usb 5-1: USB disconnect, device number 5 [ 143.437335][ T7120] netlink: 'syz.4.467': attribute type 11 has an invalid length. [ 146.526068][ T7183] netlink: 96 bytes leftover after parsing attributes in process `syz.3.493'. [ 147.234862][ T7198] netlink: 'syz.2.501': attribute type 11 has an invalid length. [ 147.466975][ T37] audit: type=1326 audit(1761364254.993:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.2.503" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f746017efc9 code=0x0 [ 148.973734][ T7244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.235243][ T7250] netlink: 88 bytes leftover after parsing attributes in process `syz.3.524'. [ 149.235393][ T7250] netlink: 48 bytes leftover after parsing attributes in process `syz.3.524'. [ 149.261058][ T7250] netlink: 88 bytes leftover after parsing attributes in process `syz.3.524'. [ 149.261094][ T7250] netlink: 48 bytes leftover after parsing attributes in process `syz.3.524'. [ 149.341868][ T7254] loop2: detected capacity change from 0 to 7 [ 149.363137][ T7254] Dev loop2: unable to read RDB block 7 [ 149.363180][ T7254] loop2: unable to read partition table [ 149.363452][ T7254] loop2: partition table beyond EOD, truncated [ 149.363468][ T7254] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 149.706221][ T7258] evm: overlay not supported [ 151.867354][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 151.975360][ T7321] loop6: detected capacity change from 0 to 7 [ 152.006818][ T7321] Dev loop6: unable to read RDB block 7 [ 152.006846][ T7321] loop6: AHDI p3 p4 [ 152.006873][ T7321] loop6: partition table partially beyond EOD, truncated [ 152.007109][ T7321] loop6: p3 start 1886353253 is beyond EOD, truncated [ 153.486028][ T1883] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 153.658530][ T1883] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.658554][ T1883] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.661002][ T1883] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 153.661025][ T1883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 153.661041][ T1883] usb 4-1: SerialNumber: syz [ 153.946288][ T1883] usb 4-1: 0:2 : does not exist [ 153.959180][ T1883] usb 4-1: 5:0: cannot get min/max values for control 7 (id 5) [ 153.970054][ T1883] usb 4-1: 5:0: cannot get min/max values for control 9 (id 5) [ 154.091980][ T1883] usb 4-1: USB disconnect, device number 5 [ 154.339614][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.824150][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 155.860169][ T7402] netlink: 'syz.1.584': attribute type 12 has an invalid length. [ 155.860188][ T7402] netlink: 'syz.1.584': attribute type 29 has an invalid length. [ 155.860199][ T7402] netlink: 148 bytes leftover after parsing attributes in process `syz.1.584'. [ 155.860227][ T7402] netlink: 43 bytes leftover after parsing attributes in process `syz.1.584'. [ 155.935945][ T1230] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 156.094123][ T1230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.094153][ T1230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.094173][ T1230] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.094211][ T1230] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.094231][ T1230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.152584][ T1230] usb 3-1: config 0 descriptor?? [ 156.624689][ T1230] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 156.696946][ T7426] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.776446][ T5803] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 156.891254][ T5953] usb 3-1: USB disconnect, device number 6 [ 156.927544][ T5803] usb 2-1: Using ep0 maxpacket: 8 [ 156.931230][ T5803] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 156.931254][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.942746][ T7429] fido_id[7429]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 157.035567][ T5803] usb 2-1: config 0 descriptor?? [ 157.085655][ T5883] hid_parser_main: 5 callbacks suppressed [ 157.085675][ T5883] hid-generic 0000:0000:0000.0008: unknown main item tag 0x1 [ 157.085704][ T5883] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.085728][ T5883] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.085752][ T5883] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.085775][ T5883] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.095154][ T5883] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.095184][ T5883] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.095209][ T5883] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.095232][ T5883] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.095255][ T5883] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 157.199483][ T5883] hid-generic 0000:0000:0000.0008: hidraw0: HID v8.00 Device [syz0] on syz0 [ 157.260856][ T5803] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 157.399235][ T7435] fido_id[7435]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 157.955952][ T1883] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 158.120230][ T1883] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.120252][ T1883] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.121561][ T1883] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 158.121584][ T1883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 158.121601][ T1883] usb 3-1: SerialNumber: syz [ 158.264955][ T5803] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 158.264981][ T5803] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 158.265715][ T5803] asix 2-1:0.0: probe with driver asix failed with error -71 [ 158.303340][ T5803] usb 2-1: USB disconnect, device number 5 [ 158.371536][ T1883] usb 3-1: 0:2 : does not exist [ 158.458267][ T1883] usb 3-1: USB disconnect, device number 7 [ 158.607208][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.076003][ T7466] nbd: nbd1 already in use [ 159.642827][ T7471] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.642860][ T7471] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.119313][ T7471] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.119347][ T7471] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.505226][ T7471] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.505260][ T7471] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.808180][ T7471] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.808213][ T7471] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.331569][ T142] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.331600][ T142] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.366729][ T1178] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.366758][ T1178] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.393374][ T1178] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.393410][ T1178] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.447788][ T1178] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.447816][ T1178] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.617999][ T5883] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 162.879427][ T7561] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 163.705929][ T5953] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 163.956267][ T5953] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 163.956295][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.956312][ T5953] usb 4-1: Product: syz [ 163.956324][ T5953] usb 4-1: Manufacturer: syz [ 163.956337][ T5953] usb 4-1: SerialNumber: syz [ 163.961623][ T5953] usb 4-1: config 0 descriptor?? [ 164.275237][ T994] usb 4-1: USB disconnect, device number 6 [ 165.398416][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 166.005979][ T1883] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 166.162488][ T1883] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 166.162512][ T1883] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 166.162527][ T1883] usb 3-1: config 220 has an invalid descriptor of length 78, skipping remainder of the config [ 166.162543][ T1883] usb 3-1: config 220 has no interface number 2 [ 166.162610][ T1883] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 166.162633][ T1883] usb 3-1: config 220 interface 0 has no altsetting 0 [ 166.162648][ T1883] usb 3-1: config 220 interface 76 has no altsetting 0 [ 166.162663][ T1883] usb 3-1: config 220 interface 1 has no altsetting 0 [ 166.167909][ T1883] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 166.167932][ T1883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.167950][ T1883] usb 3-1: Product: syz [ 166.167962][ T1883] usb 3-1: Manufacturer: syz [ 166.167974][ T1883] usb 3-1: SerialNumber: syz [ 166.384598][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036229800: rx timeout, send abort [ 166.443149][ T1883] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 166.443188][ T1883] uvcvideo 3-1:220.0: No valid video chain found. [ 166.443327][ T1883] usb 3-1: selecting invalid altsetting 0 [ 166.534678][ T1883] usb 3-1: selecting invalid altsetting 0 [ 166.534715][ T1883] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 166.596150][ T1883] usb 3-1: USB disconnect, device number 8 [ 166.885424][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036229800: abort rx timeout. Force session deactivation [ 167.086556][ T7644] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 167.415992][ T5953] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 167.575989][ T5953] usb 4-1: Using ep0 maxpacket: 8 [ 167.581530][ T5953] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 167.581556][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.581573][ T5953] usb 4-1: Product: syz [ 167.581586][ T5953] usb 4-1: Manufacturer: syz [ 167.581598][ T5953] usb 4-1: SerialNumber: syz [ 167.625355][ T5953] usb 4-1: config 0 descriptor?? [ 167.659291][ T7659] loop9: detected capacity change from 0 to 7 [ 167.673936][ T7659] Dev loop9: unable to read RDB block 7 [ 167.673987][ T7659] loop9: unable to read partition table [ 167.674203][ T7659] loop9: partition table beyond EOD, truncated [ 167.674220][ T7659] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 167.851350][ T5953] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 168.597850][ T7686] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.814994][ T7693] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 168.818878][ T7693] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 168.860761][ T5953] gspca_sunplus: reg_w_riv err -71 [ 168.860852][ T5953] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 168.865189][ T5953] usb 4-1: USB disconnect, device number 7 [ 169.975757][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.727'. [ 170.098206][ T7730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.126664][ T7735] netlink: 76 bytes leftover after parsing attributes in process `syz.3.727'. [ 170.371191][ T1883] IPVS: starting estimator thread 0... [ 170.466370][ T7746] IPVS: using max 9 ests per chain, 21600 per kthread [ 170.475958][ T1230] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 170.625996][ T1230] usb 5-1: Using ep0 maxpacket: 16 [ 170.628306][ T1230] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 170.628326][ T1230] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.628343][ T1230] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.631503][ T1230] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.631525][ T1230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.631541][ T1230] usb 5-1: Product: syz [ 170.631553][ T1230] usb 5-1: Manufacturer: syz [ 170.631565][ T1230] usb 5-1: SerialNumber: syz [ 171.016006][ T5953] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 171.128167][ T1230] usb 5-1: 0:2 : does not exist [ 171.166015][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 171.171881][ T5953] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 171.171906][ T5953] usb 3-1: config 0 has no interface number 0 [ 171.172006][ T5953] usb 3-1: config 0 interface 184 has no altsetting 0 [ 171.174764][ T5953] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 171.174787][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.174856][ T5953] usb 3-1: Product: syz [ 171.174868][ T5953] usb 3-1: Manufacturer: syz [ 171.174879][ T5953] usb 3-1: SerialNumber: syz [ 171.253265][ T5953] usb 3-1: config 0 descriptor?? [ 171.268184][ T5953] smsc75xx v1.0.0 [ 171.608864][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'. [ 171.871953][ T5953] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 171.871981][ T5953] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 171.958365][ T994] usb 5-1: USB disconnect, device number 6 [ 172.118292][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 172.278247][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 172.279089][ T5953] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 172.279124][ T5953] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 172.279140][ T5953] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 172.279431][ T5953] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 172.333903][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.348847][ T5953] usb 3-1: USB disconnect, device number 9 [ 172.363148][ T9] usb 4-1: config 0 descriptor?? [ 172.375422][ T9] cp210x 4-1:0.0: cp210x converter detected [ 172.803237][ T9] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 172.833633][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 173.040158][ T5883] usb 4-1: USB disconnect, device number 8 [ 173.068310][ T5883] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 173.198684][ T5883] cp210x 4-1:0.0: device disconnected [ 173.656071][ T5953] hid_parser_main: 25 callbacks suppressed [ 173.656091][ T5953] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 173.680697][ T5953] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 173.729248][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 173.790227][ T994] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 173.947469][ T994] usb 5-1: Using ep0 maxpacket: 32 [ 173.951683][ T994] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 173.951706][ T994] usb 5-1: config 0 has no interface number 0 [ 173.958552][ T994] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 173.958578][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.958595][ T994] usb 5-1: Product: syz [ 173.958606][ T994] usb 5-1: Manufacturer: syz [ 173.958618][ T994] usb 5-1: SerialNumber: syz [ 173.969808][ T994] usb 5-1: config 0 descriptor?? [ 173.991524][ T994] smsc95xx v2.0.0 [ 174.646077][ T1883] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 174.800064][ T1883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.800126][ T1883] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 174.800199][ T1883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.818147][ T1883] usb 4-1: config 0 descriptor?? [ 174.862384][ T1883] pwc: Askey VC010 type 2 USB webcam detected. [ 174.966219][ T5883] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 175.205480][ T994] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 175.205507][ T994] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 175.208651][ T994] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 175.212796][ T994] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 175.216941][ T5883] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.216961][ T5883] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.226301][ T5883] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.226325][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.228124][ T5883] usb 3-1: Product: syz [ 175.228140][ T5883] usb 3-1: Manufacturer: syz [ 175.228152][ T5883] usb 3-1: SerialNumber: syz [ 175.260604][ T994] usb 5-1: USB disconnect, device number 7 [ 175.293847][ T1883] pwc: recv_control_msg error -32 req 02 val 2b00 [ 175.297915][ T1883] pwc: recv_control_msg error -32 req 02 val 2700 [ 175.298574][ T1883] pwc: recv_control_msg error -32 req 02 val 2c00 [ 175.503918][ T1883] pwc: recv_control_msg error -71 req 04 val 1300 [ 175.505501][ T1883] pwc: recv_control_msg error -71 req 04 val 1400 [ 175.509327][ T1883] pwc: recv_control_msg error -71 req 02 val 2000 [ 175.510739][ T1883] pwc: recv_control_msg error -71 req 02 val 2100 [ 175.517830][ T1883] pwc: recv_control_msg error -71 req 04 val 1500 [ 175.523160][ T1883] pwc: recv_control_msg error -71 req 02 val 2500 [ 175.528106][ T1883] pwc: recv_control_msg error -71 req 02 val 2400 [ 175.531497][ T1883] pwc: recv_control_msg error -71 req 02 val 2600 [ 175.533721][ T1883] pwc: recv_control_msg error -71 req 02 val 2900 [ 175.538628][ T1883] pwc: recv_control_msg error -71 req 02 val 2800 [ 175.543345][ T1883] pwc: recv_control_msg error -71 req 04 val 1100 [ 175.546452][ T1883] pwc: recv_control_msg error -71 req 04 val 1200 [ 175.608816][ T5883] usb 3-1: 0:2 : does not exist [ 175.620895][ T5883] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 175.670172][ T1883] pwc: Registered as video103. [ 175.681000][ T1883] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 175.693469][ T5883] usb 3-1: USB disconnect, device number 10 [ 175.724123][ T1883] usb 4-1: USB disconnect, device number 9 [ 177.395925][ T5953] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 177.545933][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 177.566279][ T5953] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 177.568461][ T5953] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.568487][ T5953] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.568508][ T5953] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.568528][ T5953] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.568568][ T5953] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 177.568588][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.882560][ T5953] usb 5-1: usb_control_msg returned -32 [ 177.882608][ T5953] usbtmc 5-1:16.0: can't read capabilities [ 179.321363][ T7952] netlink: 'syz.0.816': attribute type 16 has an invalid length. [ 179.321385][ T7952] netlink: 'syz.0.816': attribute type 21 has an invalid length. [ 179.321397][ T7952] netlink: 'syz.0.816': attribute type 25 has an invalid length. [ 179.321408][ T7952] netlink: 'syz.0.816': attribute type 27 has an invalid length. [ 179.321419][ T7952] netlink: 'syz.0.816': attribute type 28 has an invalid length. [ 179.321429][ T7952] netlink: 'syz.0.816': attribute type 29 has an invalid length. [ 179.321439][ T7952] netlink: 'syz.0.816': attribute type 30 has an invalid length. [ 180.191420][ T5953] usb 5-1: USB disconnect, device number 8 [ 181.527876][ T37] audit: type=1326 audit(1761364289.093:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8004 comm="syz.3.837" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcad79defc9 code=0x0 [ 181.548416][ T5953] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 181.721427][ T5953] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 181.721453][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.734346][ T5953] usb 5-1: config 0 descriptor?? [ 181.967927][ T5953] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 182.070408][ T5805] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 182.079339][ T5805] Bluetooth: hci4: Injecting HCI hardware error event [ 182.084190][ T5123] Bluetooth: hci4: hardware error 0x00 [ 182.191326][ T5953] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 182.191348][ T5953] [drm] Initialized udl on minor 2 [ 182.330132][ T8022] trusted_key: syz.1.843 sent an empty control message without MSG_MORE. [ 182.367276][ T5953] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 182.373467][ T5953] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 182.588807][ T5953] usb 5-1: USB disconnect, device number 9 [ 182.592670][ T1230] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 182.594954][ T1230] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 183.586060][ T61] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 184.040223][ T8059] input: syz1 as /devices/virtual/input/input9 [ 184.305951][ T5123] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 184.377278][ T8071] netlink: 96 bytes leftover after parsing attributes in process `syz.4.866'. [ 185.770914][ T8113] Bluetooth: hci0: service_discovery: too big uuid_count value 4465 [ 188.212031][ T8164] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.212054][ T8164] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 188.418462][ T8164] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.418483][ T8164] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 188.441276][ T8195] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.697967][ T8164] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.697987][ T8164] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 188.954212][ T8164] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.954234][ T8164] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 189.551785][ T8224] input: syz0 as /devices/virtual/input/input10 [ 191.246638][ T8277] iommufd_mock iommufd_mock0: Adding to iom[ 191.246638][ T8277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.257679][ T8164] ------------[ cut here ]------------ [ 191.257692][ T8164] rtmutex deadlock detected [ 191.257795][ T8164] WARNING: CPU: 0 PID: 8164 at kernel/locking/rtmutex.c:1674 rt_mutex_handle_deadlock+0x28/0xb0 [ 191.257826][ T8164] Modules linked in: [ 191.257855][ T8164] CPU: 0 UID: 0 PID: 8164 Comm: syz.1.905 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 191.257875][ T8164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 191.257888][ T8164] RIP: 0010:rt_mutex_handle_deadlock+0x28/0xb0 [ 191.257907][ T8164] Code: 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 8c 00 00 00 48 89 f7 e8 a6 3c 01 00 90 48 c7 c7 e0 18 eb 8a e8 39 8f c0 f6 90 <0f> 0b 90 90 4c 8d 3d 00 00 00 00 65 48 8b 1c 25 08 40 a2 91 4c 8d [ 191.257921][ T8164] RSP: 0018:ffffc9001ced7950 EFLAGS: 00010246 [ 191.257936][ T8164] RAX: 63eb098a9927e700 RBX: ffffc9001ced79e0 RCX: 0000000000080000 [ 191.257949][ T8164] RDX: ffffc9000dd73000 RSI: 000000000007ffff RDI: 0000000000080000 [ 191.257961][ T8164] RBP: ffffc9001ced7b00 R08: 0000000000000000 R09: 0000000000000000 [ 191.257972][ T8164] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff920039daf38 [ 191.257985][ T8164] R13: ffffffff8ac270a9 R14: ffff8880216c6098 R15: dffffc0000000000 [ 191.257998][ T8164] FS: 00007f60daade6c0(0000) GS:ffff888126dfc000(0000) knlGS:0000000000000000 [ 191.258013][ T8164] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.258025][ T8164] CR2: 00007fdfd5d21a10 CR3: 00000000345ac000 CR4: 00000000003526f0 [ 191.258041][ T8164] Call Trace: [ 191.258052][ T8164] [ 191.258061][ T8164] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 191.258079][ T8164] rt_mutex_slowlock+0x692/0x6e0 [ 191.258099][ T8164] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 191.258117][ T8164] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 191.258133][ T8164] ? __lock_acquire+0xab9/0xd20 [ 191.258167][ T8164] ? nfc_rfkill_set_block+0x50/0x2e0 [ 191.258194][ T8164] ? rt_mutex_slowunlock+0x493/0x8a0 [ 191.258227][ T8164] ? nfc_rfkill_set_block+0x50/0x2e0 [ 191.258250][ T8164] mutex_lock_nested+0x16a/0x1d0 [ 191.258269][ T8164] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 191.258295][ T8164] nfc_rfkill_set_block+0x50/0x2e0 [ 191.258318][ T8164] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 191.258343][ T8164] rfkill_set_block+0x1e5/0x450 [ 191.258369][ T8164] rfkill_fop_write+0x44e/0x580 [ 191.258396][ T8164] ? __pfx_rfkill_fop_write+0x10/0x10 [ 191.258423][ T8164] ? rw_verify_area+0x25b/0x4e0 [ 191.258442][ T8164] ? __lock_acquire+0xab9/0xd20 [ 191.258461][ T8164] ? __pfx_rfkill_fop_write+0x10/0x10 [ 191.258486][ T8164] vfs_write+0x287/0xb40 [ 191.258516][ T8164] ? __pfx_vfs_write+0x10/0x10 [ 191.258538][ T8164] ? __fget_files+0x2a/0x420 [ 191.258563][ T8164] ? __fget_files+0x2a/0x420 [ 191.258584][ T8164] ? __fget_files+0x3a6/0x420 [ 191.258603][ T8164] ? __fget_files+0x2a/0x420 [ 191.258635][ T8164] ksys_write+0x14b/0x260 [ 191.258657][ T8164] ? __pfx_ksys_write+0x10/0x10 [ 191.258682][ T8164] ? do_syscall_64+0xbe/0xfa0 [ 191.258707][ T8164] do_syscall_64+0xfa/0xfa0 [ 191.258727][ T8164] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.258747][ T8164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.258765][ T8164] ? clear_bhb_loop+0x60/0xb0 [ 191.258786][ T8164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.258802][ T8164] RIP: 0033:0x7f60dc87efc9 [ 191.258822][ T8164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.258836][ T8164] RSP: 002b:00007f60daade038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.258853][ T8164] RAX: ffffffffffffffda RBX: 00007f60dcad5fa0 RCX: 00007f60dc87efc9 [ 191.258866][ T8164] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 191.258877][ T8164] RBP: 00007f60dc901f91 R08: 0000000000000000 R09: 0000000000000000 [ 191.258887][ T8164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.258898][ T8164] R13: 00007f60dcad6038 R14: 00007f60dcad5fa0 R15: 00007fff1c4eac38 [ 191.258929][ T8164] [ 191.258942][ T8164] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 191.258953][ T8164] CPU: 0 UID: 0 PID: 8164 Comm: syz.1.905 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 191.258972][ T8164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 191.258981][ T8164] Call Trace: [ 191.258988][ T8164] [ 191.258995][ T8164] dump_stack_lvl+0x99/0x250 [ 191.259021][ T8164] ? __asan_memcpy+0x40/0x70 [ 191.259041][ T8164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.259064][ T8164] ? __pfx__printk+0x10/0x10 [ 191.259098][ T8164] vpanic+0x237/0x6d0 [ 191.259115][ T8164] ? __pfx_vpanic+0x10/0x10 [ 191.259142][ T8164] panic+0xb9/0xc0 [ 191.259158][ T8164] ? __pfx_panic+0x10/0x10 [ 191.259190][ T8164] __warn+0x31b/0x4b0 [ 191.259210][ T8164] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 191.259231][ T8164] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 191.259248][ T8164] report_bug+0x2be/0x4f0 [ 191.259267][ T8164] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 191.259285][ T8164] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 191.259303][ T8164] ? rt_mutex_handle_deadlock+0x2a/0xb0 [ 191.259320][ T8164] handle_bug+0x84/0x160 [ 191.259344][ T8164] exc_invalid_op+0x1a/0x50 [ 191.259367][ T8164] asm_exc_invalid_op+0x1a/0x20 [ 191.259383][ T8164] RIP: 0010:rt_mutex_handle_deadlock+0x28/0xb0 [ 191.259400][ T8164] Code: 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 8c 00 00 00 48 89 f7 e8 a6 3c 01 00 90 48 c7 c7 e0 18 eb 8a e8 39 8f c0 f6 90 <0f> 0b 90 90 4c 8d 3d 00 00 00 00 65 48 8b 1c 25 08 40 a2 91 4c 8d [ 191.259413][ T8164] RSP: 0018:ffffc9001ced7950 EFLAGS: 00010246 [ 191.259428][ T8164] RAX: 63eb098a9927e700 RBX: ffffc9001ced79e0 RCX: 0000000000080000 [ 191.259440][ T8164] RDX: ffffc9000dd73000 RSI: 000000000007ffff RDI: 0000000000080000 [ 191.259452][ T8164] RBP: ffffc9001ced7b00 R08: 0000000000000000 R09: 0000000000000000 [ 191.259463][ T8164] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff920039daf38 [ 191.259475][ T8164] R13: ffffffff8ac270a9 R14: ffff8880216c6098 R15: dffffc0000000000 [ 191.259490][ T8164] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 191.259522][ T8164] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 191.259539][ T8164] rt_mutex_slowlock+0x692/0x6e0 [ 191.259559][ T8164] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 191.259577][ T8164] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 191.259593][ T8164] ? __lock_acquire+0xab9/0xd20 [ 191.259625][ T8164] ? nfc_rfkill_set_block+0x50/0x2e0 [ 191.259651][ T8164] ? rt_mutex_slowunlock+0x493/0x8a0 [ 191.259677][ T8164] ? nfc_rfkill_set_block+0x50/0x2e0 [ 191.259698][ T8164] mutex_lock_nested+0x16a/0x1d0 [ 191.259717][ T8164] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 191.259741][ T8164] nfc_rfkill_set_block+0x50/0x2e0 [ 191.259764][ T8164] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 191.259789][ T8164] rfkill_set_block+0x1e5/0x450 [ 191.259814][ T8164] rfkill_fop_write+0x44e/0x580 [ 191.259841][ T8164] ? __pfx_rfkill_fop_write+0x10/0x10 [ 191.259868][ T8164] ? rw_verify_area+0x25b/0x4e0 [ 191.259886][ T8164] ? __lock_acquire+0xab9/0xd20 [ 191.259905][ T8164] ? __pfx_rfkill_fop_write+0x10/0x10 [ 191.259930][ T8164] vfs_write+0x287/0xb40 [ 191.259959][ T8164] ? __pfx_vfs_write+0x10/0x10 [ 191.259981][ T8164] ? __fget_files+0x2a/0x420 [ 191.260006][ T8164] ? __fget_files+0x2a/0x420 [ 191.260027][ T8164] ? __fget_files+0x3a6/0x420 [ 191.260047][ T8164] ? __fget_files+0x2a/0x420 [ 191.260078][ T8164] ksys_write+0x14b/0x260 [ 191.260101][ T8164] ? __pfx_ksys_write+0x10/0x10 [ 191.260126][ T8164] ? do_syscall_64+0xbe/0xfa0 [ 191.260151][ T8164] do_syscall_64+0xfa/0xfa0 [ 191.260170][ T8164] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.260190][ T8164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.260213][ T8164] ? clear_bhb_loop+0x60/0xb0 [ 191.260234][ T8164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.260250][ T8164] RIP: 0033:0x7f60dc87efc9 [ 191.260264][ T8164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.260277][ T8164] RSP: 002b:00007f60daade038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.260294][ T8164] RAX: ffffffffffffffda RBX: 00007f60dcad5fa0 RCX: 00007f60dc87efc9 [ 191.260307][ T8164] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 191.260318][ T8164] RBP: 00007f60dc901f91 R08: 0000000000000000 R09: 0000000000000000 [ 191.260329][ T8164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.260339][ T8164] R13: 00007f60dcad6038 R14: 00007f60dcad5fa0 R15: 00007fff1c4eac38 [ 191.260369][ T8164] [ 191.260650][ T8164] Kernel Offset: disabled