last executing test programs: 5.382626839s ago: executing program 1 (id=1049): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, 0x2}) 4.774159912s ago: executing program 0 (id=1056): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}}}, 0x24}}, 0x0) 4.583989245s ago: executing program 0 (id=1057): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.355339379s ago: executing program 0 (id=1060): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) gettid() epoll_create1(0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_create1(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7fffffff}, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x7, 0x0, 0x0, 0x4}, 0x0, 0x0) getpid() r2 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000193c0)=ANY=[@ANYBLOB="0207000a0200000000000000000000003f030fdbb2e6bbe22ea385c55d97d53805de27570b608b7260dcd135cc105d22d1ef9372d2a682e5b7ba7b7d2526ee662c75d17dffbfeb8097e539bbafea180564d87480d547e51448f0000a1f112199995d6bc409cac186c8172a6877fbd7234ed846e46bda66e171f1fb2f88ae08986b86a22dbae91dc5fa5ce579878e3197eea97de9b56446aa3662f242f2dd"], 0x10}}, 0x0) read$msr(r3, &(0x7f00000003c0)=""/102392, 0x18ff8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0, r2}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) recvfrom$ax25(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 3.085900653s ago: executing program 1 (id=1069): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2b) pipe(&(0x7f0000000480)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) sendto$inet(r0, &(0x7f00000001c0)="fbd5f12f5572b12b42e9678b0030eff9f3ae62755a76395d72430000aebe2b108a87e865501a5f9e0383611afdd3f83ac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a091405f44b8fd9b330babe36307b6041270ae01f1a1f5e3f650fc3b0756d481c364fca000000000000f76d", 0x76, 0x404c884, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040), 0x4) 2.919124943s ago: executing program 4 (id=1071): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 2.72977919s ago: executing program 4 (id=1074): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) write$FUSE_GETXATTR(r0, 0x0, 0x0) 2.606970685s ago: executing program 2 (id=1075): r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008001}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9400000009060108000000000000000002000001800008800c00078005001500000000001c0007801800168014000640fc010000000000000000000000000001180007801400170076657468305f746f5f626f6e6400000018000780140017006d6163766c616e310000000000000000180007801400170076657468305f746f5f7465616d0023fba00f9dcec75284117d859eae41690e52fda0130a3bdfb6195af377427bd43b9d16b4da7039cc8fb0b21b551b9630b0e87c6aa1c492d9b3f3f973819eef4e1856a24d126ef2deccac367cba1899cf7e564a560d6ec55c110ce76c3e0355c630e6cbda2200"/250], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="04005b000680650040000000"], 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r12, @ANYBLOB="2e003300d0000000ffffffffffff080211000000505050505050"], 0x4c}}, 0x0) dup(r5) r13 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r13, 0x0, 0x1) 2.577665249s ago: executing program 4 (id=1076): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_delrule={0x44, 0x1e, 0x1, 0x0, 0x0, {}, [@FRA_DST={0x28, 0x1, @local}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x44}}, 0x0) 2.481960971s ago: executing program 3 (id=1077): r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmmsg$inet6(r0, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getitimer(0x0, 0x0) unshare(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) ptrace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000340)=0x6000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 2.343569117s ago: executing program 0 (id=1078): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a32"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x2, 0xc8, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0xe, [{@private=0xa010101}, {@multicast1}, {@remote, 0x8000}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x9c, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0xf}}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @loopback, @multicast1, @private=0xa010102, @loopback]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.325478845s ago: executing program 4 (id=1079): socket$inet6(0xa, 0x3, 0x2f) r0 = socket$inet6(0xa, 0x3, 0x7) creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50}, 0x50) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "000000009b993e68", "75e29881592b9fd38bcad042e286f2cd", '\x00', "578619a280c847dd"}, 0x28) sendfile(r6, r7, &(0x7f0000000100), 0x10001) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.135737407s ago: executing program 1 (id=1080): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000180)="eabcc61194b6a5e88c2b5fc811832471", 0x10}], 0x1}, 0x0) 1.969923884s ago: executing program 1 (id=1081): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1}, 0x4) openat$vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x181240, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001740)=@generic={&(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x10}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f00000017c0)=@generic={&(0x7f0000001780)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0x0, "dd0300"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f00000000c0)) 1.924972804s ago: executing program 2 (id=1082): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, "ebbf52748b0b2aff330c21367b06624fde30887fda172ee251ca9dea03ca094880225571645cc027cd4c7a81388e08c0a4a8773191410848a89410f319bde2ed", "c11030f6991c26eb667e4d7fbaeb5be6d958df81117f6cfe5e5bf3dc30bbfb716d91ad12a0c2b9cf2e15d161e01f425260d31c04078e907e2474fe96721fd2a6", "0a8c8c37ab0bceeae83d73e25704184a6e89562a717a4af0457d7c0496069c89"}) 1.844266411s ago: executing program 3 (id=1083): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2100, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x20, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_STATE={0x5}, @IFLA_BRPORT_LEARNING={0x5}, @IFLA_BRPORT_FLUSH={0x4}]}}}]}, 0x58}}, 0x0) 1.768696388s ago: executing program 2 (id=1084): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe8, &(0x7f0000000000), &(0x7f0000000080)=0x4) 1.641402668s ago: executing program 3 (id=1085): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/44, 0x2c) syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340), &(0x7f00000005c0)) unshare(0x24020400) 1.639909306s ago: executing program 4 (id=1086): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) chdir(&(0x7f0000004340)='./file0\x00') write$FUSE_INIT(r0, &(0x7f00000066c0)={0x50, 0x0, r1, {0x7, 0x21}}, 0x50) read$FUSE(r0, &(0x7f0000006740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f00000063c0)={0x10, 0x0, r2}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000004380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f0000004200)={0x90, 0x0, r3, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x90) 1.578539337s ago: executing program 2 (id=1087): r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x22, &(0x7f0000000200)={@link_local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast}}}}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x21a402, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) landlock_restrict_self(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0xc4382, 0x0) r8 = dup(r7) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendfile(r10, r8, 0x0, 0x8a000) setreuid(0x0, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000000500940003b2a6d682ad5a1200000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) getpid() 442.024239ms ago: executing program 3 (id=1088): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x0) 441.589353ms ago: executing program 0 (id=1089): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x6d58, &(0x7f0000000380)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) 425.154222ms ago: executing program 1 (id=1090): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="1c00000052000100000000000000000002000000080002"], 0x1c}}, 0x0) 305.014552ms ago: executing program 0 (id=1091): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8, 0x2}}}, 0x7) r2 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "3377f877c734c4f928875ab8db00", "000100", "0200", "be4d22a4", ["c38600008000080000e6fc00", "51f3541a910080ffffcb3a10", "2ce50f8a285d9500c522afe1"]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="14e74c34e636c39bbe5bef93000006000000040000ae560000"], 0x14}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="030000397058abce57033f29eb6dc1f8b128a7537a3409329d374c1000000044665681347bd58ba6cfa5a5495ffc36ac891ea6f898ba2a0784b3781c59e6bd91a231a605e31d1a74579da505f4e8cd85ad28b3c1d52cc5b2f503252e5c0c00b2337e055112f836625a1e2fa4cb8a8bc2ce165bad51dc79deb0ed65473b9e8439149d3a9f0a988cac6cc555986600dd91e301000000000000006eeee5fabe2feb467f403c3d1ec327d19eeb1a3919af03621372af741c5943f955f911f15866dec59c552675fb1c54271aaf8e98"], 0x3d) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='vegas\x00', 0x6) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_conn_req={{0x2, 0x3, 0x4}, {0x8, 0x4}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0xe7a, 0x81}}, @l2cap_cmd_rej_unk={{0x1, 0x47, 0x2}, {0x1}}]}}, 0x1f) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x80000108) inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x16000281) syz_emit_vhci(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x101, 0xc2200) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 226.100785ms ago: executing program 3 (id=1092): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCGKEY(r0, 0x40084503, 0x0) 215.18635ms ago: executing program 2 (id=1093): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @bcast}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bind$netrom(r0, 0x0, 0x0) 164.876974ms ago: executing program 1 (id=1094): r0 = io_uring_setup(0x1d7b, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}, 0x20) 75.624406ms ago: executing program 3 (id=1095): r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/168, 0xa8}], 0x1) timerfd_settime(r0, 0x3, &(0x7f0000003a80)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 33.635756ms ago: executing program 2 (id=1096): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=1097): r0 = epoll_create1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x15) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) socket$rxrpc(0x21, 0x2, 0xa) pselect6(0x40, &(0x7f00000007c0), &(0x7f0000000800)={0x7f}, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): put6 [ 106.949068][ T5537] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.163068][ T5139] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 107.303085][ T5834] syz.0.200 uses obsolete (PF_INET,SOCK_PACKET) [ 107.352193][ T5270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.359411][ T5835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.400102][ T5270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.476726][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.520670][ T5838] syz.1.199: attempt to access beyond end of device [ 107.520670][ T5838] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 107.545411][ T5838] SQUASHFS error: Failed to read block 0x0: -5 [ 107.553371][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.563041][ T5838] unable to read squashfs_super_block [ 107.658018][ T5196] usb 3-1: USB disconnect, device number 3 [ 108.013274][ T5836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.022687][ T5836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.166676][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 108.215365][ T5836] usbtmc 4-1:16.0: Unable to send data, error -71 [ 109.555804][ T930] usb 4-1: USB disconnect, device number 7 [ 110.636800][ T5196] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.847090][ T5196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.902536][ T5196] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 110.977893][ T5196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.175539][ T5196] usb 2-1: config 0 descriptor?? [ 111.901785][ T5196] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 111.937885][ T5196] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0005/input/input7 [ 112.043004][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.225'. [ 112.199946][ T5196] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 112.215044][ T29] audit: type=1326 audit(1721539621.291:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5906 comm="syz.3.225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd848975b59 code=0x0 [ 112.280468][ T5140] IPVS: starting estimator thread 0... [ 112.333486][ T5196] usb 2-1: USB disconnect, device number 2 [ 112.382769][ T5919] IPVS: using max 34 ests per chain, 81600 per kthread [ 112.639933][ T5911] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.694288][ T5923] syz.2.224: attempt to access beyond end of device [ 112.694288][ T5923] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 112.766166][ T5923] SQUASHFS error: Failed to read block 0x0: -5 [ 112.797135][ T5923] unable to read squashfs_super_block [ 113.019228][ T5930] dccp_v6_rcv: dropped packet with invalid checksum [ 113.817455][ T5951] syz.3.236 uses old SIOCAX25GETINFO [ 114.099314][ T5948] kvm: emulating exchange as write [ 114.707455][ T5958] program syz.1.241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.313808][ T29] audit: type=1326 audit(1721539624.381:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5964 comm="syz.1.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7fb75b59 code=0x7fc00000 [ 115.335022][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.381048][ T29] audit: type=1326 audit(1721539624.421:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5964 comm="syz.1.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcd7fb75b59 code=0x7fc00000 [ 115.402287][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.112503][ T29] audit: type=1326 audit(1721539625.171:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5964 comm="syz.1.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7fb75b59 code=0x7fc00000 [ 116.133700][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.172363][ T29] audit: type=1326 audit(1721539625.171:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5964 comm="syz.1.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd7fb75b59 code=0x7fc00000 [ 116.989811][ T29] audit: type=1326 audit(1721539625.181:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5964 comm="syz.1.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7fb75b59 code=0x7fc00000 [ 117.011984][ T29] audit: type=1326 audit(1721539625.181:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5964 comm="syz.1.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7fb75b59 code=0x7fc00000 [ 118.710686][ T5091] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.755690][ T6013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.260'. [ 119.131653][ T5091] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.519995][ T5091] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.546706][ T5091] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 119.559193][ T5091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.571446][ T5091] usb 3-1: config 0 descriptor?? [ 119.943128][ T5140] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.131738][ T930] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.170144][ T5091] apple 0003:05AC:0262.0006: unbalanced delimiter at end of report description [ 120.214274][ T5091] apple 0003:05AC:0262.0006: parse failed [ 120.236571][ T5091] apple 0003:05AC:0262.0006: probe with driver apple failed with error -22 [ 120.477119][ T930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 120.543859][ T930] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 120.652498][ T930] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 120.716018][ T930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.766205][ T930] usb 1-1: config 0 descriptor?? [ 120.818225][ T930] gspca_main: spca561-2.14.0 probing abcd:cdee [ 121.013716][ T5091] usb 3-1: USB disconnect, device number 4 [ 121.104314][ T5140] usb 2-1: Using ep0 maxpacket: 8 [ 121.133884][ T5140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 121.156990][ T5140] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 121.197472][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.259674][ T5140] usb 2-1: config 0 descriptor?? [ 121.311667][ T5140] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 121.377560][ T930] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 121.390308][ T930] usb 1-1: MIDIStreaming interface descriptor not found [ 121.456405][ T5140] usb 2-1: Detected SIO [ 121.461166][ T5140] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 122.165750][ T5139] usb 1-1: USB disconnect, device number 6 [ 122.277238][ T5140] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 122.817715][ T930] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 123.063635][ T6051] udevd[6051]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.114522][ T930] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 123.141567][ T930] usb 3-1: config 0 has no interface number 0 [ 123.149143][ T930] usb 3-1: New USB device found, idVendor=0b3c, idProduct=c002, bcdDevice=21.34 [ 123.180249][ T930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.221914][ T930] usb 3-1: config 0 descriptor?? [ 123.485210][ T2535] usb 3-1: USB disconnect, device number 5 [ 124.115593][ T2535] usb 2-1: USB disconnect, device number 3 [ 124.188431][ T2535] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 124.253965][ T2535] ftdi_sio 2-1:0.0: device disconnected [ 124.731705][ T6081] loop0: detected capacity change from 0 to 7 [ 124.748265][ T6081] Dev loop0: unable to read RDB block 7 [ 124.791400][ T6081] loop0: unable to read partition table [ 124.827612][ T6081] loop0: partition table beyond EOD, truncated [ 124.857533][ T6081] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 124.857533][ T6081] ) failed (rc=-5) [ 124.892694][ T2535] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 124.974149][ T4489] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.006012][ T4489] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.014482][ T4489] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.032631][ T4489] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.052507][ T4489] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 125.068151][ T4489] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.124362][ T2535] usb 1-1: config 0 has an invalid interface number: 14 but max is 0 [ 125.146312][ T2535] usb 1-1: config 0 has no interface number 0 [ 125.165806][ T2535] usb 1-1: New USB device found, idVendor=2040, idProduct=5520, bcdDevice=1f.34 [ 125.196744][ T2535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.283637][ T2535] usb 1-1: config 0 descriptor?? [ 125.333732][ T2535] smsusb:smsusb_probe: board id=8, interface number 14 [ 125.334716][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.434802][ T6090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.280'. [ 125.585477][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.651823][ T2535] usb 1-1: USB disconnect, device number 7 [ 125.699392][ T6084] vcan0 speed is unknown, defaulting to 1000 [ 125.816067][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.959988][ T5138] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.066668][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.193928][ T5138] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 126.239203][ T5138] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 126.293286][ T5138] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 126.332350][ T5138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.373453][ T5138] usb 2-1: config 0 descriptor?? [ 126.424076][ T5138] gspca_main: spca561-2.14.0 probing abcd:cdee [ 126.969582][ T5138] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 126.997986][ T11] bridge_slave_1: left allmulticast mode [ 127.001223][ T5138] usb 2-1: MIDIStreaming interface descriptor not found [ 127.018616][ T11] bridge_slave_1: left promiscuous mode [ 127.049729][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.149358][ T11] bridge_slave_0: left allmulticast mode [ 127.155387][ T5102] Bluetooth: hci3: command tx timeout [ 127.162794][ T2535] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 127.183135][ T11] bridge_slave_0: left promiscuous mode [ 127.188981][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.621431][ T6121] tmpfs: Bad value for 'huge' [ 128.233008][ T2535] usb 4-1: Using ep0 maxpacket: 8 [ 128.311084][ T2535] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 128.342717][ T2535] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.402371][ T2535] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.442552][ T2535] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.467511][ T5140] usb 2-1: USB disconnect, device number 4 [ 128.492551][ T2535] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.542500][ T2535] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.582350][ T2535] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.834485][ T2535] usb 4-1: usb_control_msg returned -32 [ 128.857907][ T2535] usbtmc 4-1:16.0: can't read capabilities [ 129.269245][ T5102] Bluetooth: hci3: command tx timeout [ 129.593986][ T6142] usbtmc 4-1:16.0: usb_clear_halt returned -32 [ 129.866381][ T5091] usb 4-1: USB disconnect, device number 8 [ 130.123302][ T2535] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.413757][ T2535] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 130.432364][ T2535] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.467019][ T2535] usb 2-1: config 0 descriptor?? [ 130.631347][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.660759][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.683089][ T11] bond0 (unregistering): Released all slaves [ 130.718443][ T6084] chnl_net:caif_netlink_parms(): no params data found [ 130.912692][ T2535] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 131.053444][ T6149] syzkaller0: entered allmulticast mode [ 131.112957][ T2535] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 131.138993][ T2535] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 131.312444][ T5102] Bluetooth: hci3: command tx timeout [ 132.244523][ T6173] capability: warning: `syz.0.296' uses deprecated v2 capabilities in a way that may be insecure [ 133.234498][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.241733][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.402766][ T5102] Bluetooth: hci3: command tx timeout [ 133.977738][ T5196] usb 2-1: USB disconnect, device number 5 [ 134.085175][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.122520][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.154349][ T6084] bridge_slave_0: entered allmulticast mode [ 134.164287][ T6084] bridge_slave_0: entered promiscuous mode [ 134.212553][ T5091] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 134.403034][ T6084] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.410700][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.571585][ T6084] bridge_slave_1: entered allmulticast mode [ 134.781127][ T6084] bridge_slave_1: entered promiscuous mode [ 135.172363][ T5091] usb 4-1: Using ep0 maxpacket: 8 [ 135.190084][ T5091] usb 4-1: New USB device found, idVendor=0930, idProduct=87e6, bcdDevice=a7.d2 [ 135.205088][ T5091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.223986][ T5091] usb 4-1: config 0 descriptor?? [ 136.295177][ T5139] usb 4-1: USB disconnect, device number 9 [ 136.457666][ T6084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.523329][ T6084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.554517][ T5141] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 136.637663][ T11] hsr_slave_0: left promiscuous mode [ 136.700759][ T11] hsr_slave_1: left promiscuous mode [ 136.744588][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.756248][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.762479][ T5141] usb 1-1: Using ep0 maxpacket: 32 [ 136.786443][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.786508][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.800056][ T5141] usb 1-1: New USB device found, idVendor=0856, idProduct=bc01, bcdDevice=e5.a5 [ 136.800090][ T5141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.800111][ T5141] usb 1-1: Product: syz [ 136.800127][ T5141] usb 1-1: Manufacturer: syz [ 136.800143][ T5141] usb 1-1: SerialNumber: syz [ 136.803568][ T5141] usb 1-1: config 0 descriptor?? [ 136.881329][ T11] veth1_macvtap: left promiscuous mode [ 136.881600][ T11] veth0_macvtap: left promiscuous mode [ 136.881777][ T11] veth1_vlan: left promiscuous mode [ 136.883049][ T11] veth0_vlan: left promiscuous mode [ 137.028440][ T5141] mos7840 1-1:0.0: required endpoints missing [ 137.057799][ T5141] usb 1-1: USB disconnect, device number 8 [ 137.065600][ T5105] udevd[5105]: setting mode of /dev/bus/usb/001/008 to 020664 failed: No such file or directory [ 137.065744][ T5105] udevd[5105]: setting owner of /dev/bus/usb/001/008 to uid=0, gid=0 failed: No such file or directory [ 137.747202][ T11] team0 (unregistering): Port device team_slave_1 removed [ 137.840207][ T11] team0 (unregistering): Port device team_slave_0 removed [ 138.701527][ T6084] team0: Port device team_slave_0 added [ 138.715541][ T6224] vcan0 speed is unknown, defaulting to 1000 [ 138.760017][ T6084] team0: Port device team_slave_1 added [ 138.977398][ T6084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.032393][ T6084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.132385][ T6084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.304315][ T6084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.304364][ T6084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.304388][ T6084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.312704][ T6262] program syz.1.319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.626748][ T6084] hsr_slave_0: entered promiscuous mode [ 142.780217][ T6084] hsr_slave_1: entered promiscuous mode [ 142.802929][ T6084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.825126][ T6084] Cannot create hsr debugfs directory [ 142.972429][ T5138] IPVS: starting estimator thread 0... [ 143.083041][ T6285] IPVS: using max 20 ests per chain, 48000 per kthread [ 143.141805][ T5102] Bluetooth: hci5: unknown advertising packet type: 0x07 [ 143.147281][ T6287] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.315805][ T5142] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.822382][ T5142] usb 2-1: Using ep0 maxpacket: 16 [ 144.838224][ T5142] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.868124][ T5142] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 144.899784][ T5142] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 144.944787][ T5142] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 144.980924][ T5142] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.011543][ T5142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 145.048206][ T5142] usb 2-1: SerialNumber: syz [ 145.088879][ T6274] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 145.980750][ T930] usb 2-1: USB disconnect, device number 6 [ 146.118130][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 146.317948][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 147.137774][ T6084] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 147.235281][ T6084] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 147.286488][ T6084] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 147.351690][ T6084] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 147.508412][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 147.665490][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 147.749681][ T6368] input: syz1 as /devices/virtual/input/input8 [ 147.848422][ T4489] Bluetooth: hci6: sending frame failed (-49) [ 147.857407][ T5102] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 147.939467][ T6084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.091002][ T6084] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.164772][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.171945][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.224779][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.231945][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.415945][ T6084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.544703][ T5140] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 148.756709][ T5139] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 148.775904][ T5140] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 148.796298][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.829016][ T5140] usb 4-1: config 0 descriptor?? [ 148.856757][ T5140] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 148.899296][ T6084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.976766][ T5139] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 148.979204][ T6084] veth0_vlan: entered promiscuous mode [ 149.011176][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.031103][ T6084] veth1_vlan: entered promiscuous mode [ 149.166310][ T5139] usb 5-1: config 0 descriptor?? [ 149.653004][ T5139] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 149.731534][ T6084] veth0_macvtap: entered promiscuous mode [ 149.802109][ T6084] veth1_macvtap: entered promiscuous mode [ 149.831885][ T6414] netlink: 'syz.0.355': attribute type 3 has an invalid length. [ 149.865489][ T6414] netlink: 132 bytes leftover after parsing attributes in process `syz.0.355'. [ 149.891561][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.903926][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.924298][ T5139] gp8psk: usb out operation failed. [ 149.929896][ T5139] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-22) [ 149.951994][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.964445][ T5139] dvb_usb_gp8psk 5-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 149.992397][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.002231][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.024401][ T5139] usb 5-1: USB disconnect, device number 2 [ 150.032334][ T5140] gspca_sunplus: reg_w_riv err -71 [ 150.032413][ T5140] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 150.060517][ T5140] usb 4-1: USB disconnect, device number 10 [ 150.075881][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.075898][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.075914][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.075938][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.075951][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.077557][ T6084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.097400][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.097423][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.097435][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.097448][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.097459][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.097472][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.097482][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.097495][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.097507][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.097520][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.104087][ T6084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.135124][ T6084] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.135159][ T6084] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.135185][ T6084] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.135209][ T6084] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.377450][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.377474][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.476964][ T5274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.476988][ T5274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.231356][ T6451] hugetlbfs: syz.4.361 (6451): Using mlock ulimits for SHM_HUGETLB is obsolete [ 151.903714][ T6416] tty tty1: ldisc open failed (-12), clearing slot 0 [ 152.078588][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'. [ 153.732720][ T6506] sctp: [Deprecated]: syz.2.379 (pid 6506) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.732720][ T6506] Use struct sctp_sack_info instead [ 154.165313][ T6512] ======================================================= [ 154.165313][ T6512] WARNING: The mand mount option has been deprecated and [ 154.165313][ T6512] and is ignored by this kernel. Remove the mand [ 154.165313][ T6512] option from the mount to silence this warning. [ 154.165313][ T6512] ======================================================= [ 154.200237][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.961338][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.777560][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.069111][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.188963][ T6534] netlink: 52 bytes leftover after parsing attributes in process `syz.2.387'. [ 157.272494][ T5140] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 157.315253][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.385088][ T6556] nfs: Unknown parameter '' [ 157.476188][ T5140] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.531736][ T5102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.537079][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 157.550160][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.567519][ T5102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.600343][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 157.611781][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.624207][ T5102] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.642380][ T5102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.725164][ T5140] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.817460][ T5140] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.826463][ T6579] vcan0 speed is unknown, defaulting to 1000 [ 157.858895][ T11] bridge_slave_1: left allmulticast mode [ 157.872223][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.875622][ T11] bridge_slave_1: left promiscuous mode [ 157.916989][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.928263][ T5140] usb 4-1: config 0 descriptor?? [ 157.955022][ T6567] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.978649][ T11] bridge_slave_0: left allmulticast mode [ 158.129977][ T11] bridge_slave_0: left promiscuous mode [ 158.266752][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.514770][ T5140] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 158.552159][ T5140] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 158.615056][ T5140] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 159.414322][ T6611] netlink: 100 bytes leftover after parsing attributes in process `syz.1.400'. [ 159.713330][ T5102] Bluetooth: hci4: command tx timeout [ 160.314391][ T5196] usb 4-1: reset high-speed USB device number 11 using dummy_hcd [ 160.356810][ T5196] usb 4-1: device reset changed ep0 maxpacket size! [ 160.392718][ T25] usb 4-1: USB disconnect, device number 11 [ 160.500072][ T5102] Bluetooth: hci5: ACL packet for unknown connection handle 203 [ 160.602137][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 160.662271][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.684367][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.699796][ T11] bond0 (unregistering): Released all slaves [ 160.815723][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 160.828859][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 160.869021][ T25] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 160.896465][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.925265][ T25] usb 4-1: Product: syz [ 160.929454][ T25] usb 4-1: Manufacturer: syz [ 160.935592][ T25] usb 4-1: SerialNumber: syz [ 160.944284][ T25] usb 4-1: config 0 descriptor?? [ 160.952832][ T25] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 161.166445][ T927] usb 4-1: USB disconnect, device number 12 [ 161.792563][ T5102] Bluetooth: hci4: command tx timeout [ 161.888995][ T6579] chnl_net:caif_netlink_parms(): no params data found [ 161.982457][ T5139] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 162.175652][ T11] hsr_slave_0: left promiscuous mode [ 162.222256][ T5139] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 162.241498][ T5102] Bluetooth: hci1: link tx timeout [ 162.248846][ T5102] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.257909][ T11] hsr_slave_1: left promiscuous mode [ 162.271397][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.281560][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.281629][ T4489] Bluetooth: hci5: command tx timeout [ 162.304275][ T5139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 162.315724][ T5139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 162.327009][ T5139] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.342849][ T5139] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.359742][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.389596][ T5139] usb 2-1: config 0 descriptor?? [ 162.393913][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.422476][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.438402][ T6657] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 162.550465][ T11] veth1_macvtap: left promiscuous mode [ 162.567893][ T11] veth0_macvtap: left promiscuous mode [ 162.588047][ T11] veth1_vlan: left promiscuous mode [ 162.600023][ T11] veth0_vlan: left promiscuous mode [ 162.946880][ T5139] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 162.974841][ T5139] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 163.018456][ T5139] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 163.872510][ T4489] Bluetooth: hci4: command tx timeout [ 164.160778][ T11] team0 (unregistering): Port device team_slave_1 removed [ 164.223601][ T11] team0 (unregistering): Port device team_slave_0 removed [ 164.272684][ T4489] Bluetooth: hci1: command 0x0406 tx timeout [ 164.475753][ T2535] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 165.003053][ T6680] team0: entered allmulticast mode [ 165.012441][ T6680] team_slave_0: entered allmulticast mode [ 165.022366][ T6680] team_slave_1: entered allmulticast mode [ 165.078959][ T6681] dvmrp0: entered allmulticast mode [ 165.446822][ T5140] usb 2-1: USB disconnect, device number 7 [ 165.953192][ T5102] Bluetooth: hci4: command tx timeout [ 166.287838][ T6579] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.299042][ T6579] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.306786][ T6579] bridge_slave_0: entered allmulticast mode [ 166.321866][ T6579] bridge_slave_0: entered promiscuous mode [ 166.331138][ T6579] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.338587][ T6579] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.346072][ T6579] bridge_slave_1: entered allmulticast mode [ 166.365152][ T6579] bridge_slave_1: entered promiscuous mode [ 166.519171][ T6579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.598961][ T6579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.774224][ T6579] team0: Port device team_slave_0 added [ 166.877696][ T6579] team0: Port device team_slave_1 added [ 167.037262][ T11] IPVS: stop unused estimator thread 0... [ 167.045409][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.060808][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.102685][ T5140] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 167.115793][ T6579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.146160][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.159483][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.209232][ T4489] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.220496][ T4489] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.228397][ T6579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.240490][ T4489] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.250389][ T4489] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.258403][ T4489] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.266049][ T4489] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.300757][ T5140] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.356493][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.398110][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 167.433370][ T5140] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.477112][ T6579] hsr_slave_0: entered promiscuous mode [ 167.492458][ T5140] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.533582][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.542242][ T6579] hsr_slave_1: entered promiscuous mode [ 167.561476][ T6579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.580324][ T5140] usb 4-1: config 0 descriptor?? [ 167.594112][ T6579] Cannot create hsr debugfs directory [ 167.608847][ T6718] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 167.738490][ T6728] vcan0 speed is unknown, defaulting to 1000 [ 168.107846][ T5140] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 168.164650][ T5140] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 168.212746][ T5140] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 168.662733][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 168.859548][ T8] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.881102][ T8] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 168.901438][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 168.929644][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.950286][ T6751] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 169.075626][ T6728] chnl_net:caif_netlink_parms(): no params data found [ 169.260177][ T6579] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 169.279947][ T5091] usb 3-1: USB disconnect, device number 6 [ 169.315734][ T5102] Bluetooth: hci2: command tx timeout [ 169.431967][ T6579] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 169.453190][ T6728] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.460549][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.482537][ T6728] bridge_slave_0: entered allmulticast mode [ 169.489859][ T6728] bridge_slave_0: entered promiscuous mode [ 169.507636][ T6579] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 169.528528][ T6728] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.542567][ T2535] usb 4-1: reset high-speed USB device number 13 using dummy_hcd [ 169.542661][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.578694][ T6728] bridge_slave_1: entered allmulticast mode [ 169.606037][ T6728] bridge_slave_1: entered promiscuous mode [ 169.623703][ T6579] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 169.645430][ T5107] udevd[5107]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.821787][ T6728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.840313][ T6728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.967953][ T6728] team0: Port device team_slave_0 added [ 169.995043][ T6728] team0: Port device team_slave_1 added [ 170.183438][ T6728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.198691][ T6728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.274702][ T6728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.338593][ T6728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.361281][ T6728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.426253][ T6728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.092550][ T25] usb 4-1: USB disconnect, device number 13 [ 171.364853][ T6728] hsr_slave_0: entered promiscuous mode [ 171.382102][ T6728] hsr_slave_1: entered promiscuous mode [ 171.392713][ T5102] Bluetooth: hci2: command tx timeout [ 171.434134][ T6728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.469784][ T6728] Cannot create hsr debugfs directory [ 171.552684][ T6804] netlink: 24 bytes leftover after parsing attributes in process `syz.3.442'. [ 171.744738][ T6813] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 171.785055][ T6813] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 171.909167][ T6579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.213754][ T6579] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.343570][ T6728] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.389104][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.396221][ T5091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.441424][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.448601][ T5091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.565020][ T6728] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.512989][ T5102] Bluetooth: hci2: command tx timeout [ 173.643569][ T6728] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.761796][ T6579] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.842789][ T6579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.015872][ T6728] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.552479][ T5102] Bluetooth: hci2: command tx timeout [ 176.330806][ T6728] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.347869][ T6901] syz.3.460: attempt to access beyond end of device [ 176.347869][ T6901] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 176.389898][ T6728] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 176.402691][ T6901] syz.3.460: attempt to access beyond end of device [ 176.402691][ T6901] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 176.416456][ T6901] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 176.428798][ T6901] syz.3.460: attempt to access beyond end of device [ 176.428798][ T6901] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 176.445089][ T6901] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 176.466144][ T6901] syz.3.460: attempt to access beyond end of device [ 176.466144][ T6901] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 176.483092][ T6901] syz.3.460: attempt to access beyond end of device [ 176.483092][ T6901] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 176.510928][ T6579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.523399][ T6901] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 176.534682][ T6901] syz.3.460: attempt to access beyond end of device [ 176.534682][ T6901] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 176.547794][ T6901] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 176.567382][ T6728] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.574385][ T6901] syz.3.460: attempt to access beyond end of device [ 176.574385][ T6901] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 176.587570][ T6901] syz.3.460: attempt to access beyond end of device [ 176.587570][ T6901] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 176.606206][ T6901] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 176.616292][ T6901] syz.3.460: attempt to access beyond end of device [ 176.616292][ T6901] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 176.629971][ T6901] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 176.644474][ T6728] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.662052][ T6901] syz.3.460: attempt to access beyond end of device [ 176.662052][ T6901] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 176.679388][ T6901] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 176.689550][ T6901] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 176.699775][ T6901] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 176.871905][ T6579] veth0_vlan: entered promiscuous mode [ 176.930747][ T6579] veth1_vlan: entered promiscuous mode [ 177.085624][ T6579] veth0_macvtap: entered promiscuous mode [ 177.117914][ T6579] veth1_macvtap: entered promiscuous mode [ 177.151213][ T6728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.199082][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.261907][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.298705][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.331665][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.358153][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.373220][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.383879][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.394638][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.405109][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.416811][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.893960][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.061332][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.106137][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.209301][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.220202][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.470'. [ 178.242446][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.252281][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.305101][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.329845][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.340354][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.359852][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.403190][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.434334][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.470825][ T6728] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.509648][ T6579] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.542656][ T6579] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.568253][ T6579] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.587490][ T6579] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.653284][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.660445][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.703086][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.710259][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.862514][ T5272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.898283][ T5272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.004966][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.030947][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.458176][ T6728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.626119][ T6728] veth0_vlan: entered promiscuous mode [ 179.670844][ T6728] veth1_vlan: entered promiscuous mode [ 179.839051][ T6728] veth0_macvtap: entered promiscuous mode [ 179.886346][ T6728] veth1_macvtap: entered promiscuous mode [ 179.966421][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.983110][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.001630][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.028433][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.076186][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.152577][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.206110][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.284041][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.455177][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.577644][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.685677][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.796577][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.942584][ T6728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.054119][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.102394][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.139065][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.182595][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.219734][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.223655][ T6994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.240781][ T4489] Bluetooth: hci1: command 0x0406 tx timeout [ 181.240797][ T5096] Bluetooth: hci0: command 0x0406 tx timeout [ 181.278155][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.296313][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.308002][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.320298][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.331630][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.341894][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.354095][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.396346][ T6728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.488297][ T6728] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.562581][ T6728] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.586871][ T6728] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.602474][ T6728] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.792915][ T5102] Bluetooth: hci4: command tx timeout [ 182.649467][ T5272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.693300][ T5272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.087338][ T5272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.144436][ T5272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.839734][ T7030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.391933][ T7048] Driver unsupported XDP return value 0 on prog (id 72) dev N/A, expect packet loss! [ 184.500757][ T7049] capability: warning: `syz.1.510' uses 32-bit capabilities (legacy support in use) [ 185.367322][ T5090] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 185.378827][ T5090] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 185.388959][ T5090] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 185.422652][ T5090] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 185.433244][ T5090] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 185.440671][ T5090] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 185.777083][ T5268] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.816876][ T7063] vcan0 speed is unknown, defaulting to 1000 [ 185.903629][ T5268] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.311201][ T5268] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.374485][ T7067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 186.615991][ T5268] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.678128][ T7069] vcan0 speed is unknown, defaulting to 1000 [ 186.683629][ T5090] Bluetooth: hci2: unexpected subevent 0x06 length: 5 < 10 [ 186.719189][ T5090] Bluetooth: Unexpected continuation frame (len 18) [ 186.886499][ T7077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.008313][ T7077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.077621][ T7063] chnl_net:caif_netlink_parms(): no params data found [ 187.191400][ T7082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.214257][ T5268] bridge_slave_1: left allmulticast mode [ 187.240269][ T5268] bridge_slave_1: left promiscuous mode [ 187.262015][ T5268] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.428869][ T5268] bridge_slave_0: left allmulticast mode [ 187.456655][ T5268] bridge_slave_0: left promiscuous mode [ 187.494865][ T5268] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.552437][ T5090] Bluetooth: hci6: command tx timeout [ 187.862413][ T2535] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 188.012225][ T5268] dvmrp0 (unregistering): left allmulticast mode [ 188.090552][ T2535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 188.124087][ T2535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 188.154930][ T2535] usb 3-1: New USB device found, idVendor=0b95, idProduct=1780, bcdDevice=17.f7 [ 188.181735][ T2535] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.200834][ T2535] usb 3-1: Product: syz [ 188.210912][ T2535] usb 3-1: Manufacturer: syz [ 188.222410][ T2535] usb 3-1: SerialNumber: syz [ 188.234002][ T2535] usb 3-1: config 0 descriptor?? [ 188.418831][ T5268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.430793][ T5268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.442577][ T5268] bond0 (unregistering): Released all slaves [ 188.466478][ T2535] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 188.501677][ T2535] asix 3-1:0.0: probe with driver asix failed with error -71 [ 188.538653][ T2535] usb 3-1: USB disconnect, device number 7 [ 188.567811][ T7077] vcan0 speed is unknown, defaulting to 1000 [ 188.964003][ T7063] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.971157][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.012630][ T7063] bridge_slave_0: entered allmulticast mode [ 189.052589][ T7063] bridge_slave_0: entered promiscuous mode [ 189.053768][ T2535] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 189.280652][ T2535] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 189.300379][ T7063] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.324120][ T2535] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.330423][ T7063] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.362738][ T7063] bridge_slave_1: entered allmulticast mode [ 189.379873][ T2535] usb 5-1: config 0 descriptor?? [ 189.389960][ T7063] bridge_slave_1: entered promiscuous mode [ 189.642794][ T5090] Bluetooth: hci6: command tx timeout [ 189.775800][ T7063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.896628][ T7063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.005634][ T5268] hsr_slave_0: left promiscuous mode [ 190.024778][ T5268] hsr_slave_1: left promiscuous mode [ 190.034613][ T5268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.042165][ T5268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.051429][ T5268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.060716][ T5268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.076312][ T2535] [drm:udl_init] *ERROR* Selecting channel failed [ 190.106582][ T5268] veth1_macvtap: left promiscuous mode [ 190.112141][ T5268] veth0_macvtap: left promiscuous mode [ 190.129568][ T2535] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 190.145580][ T2535] [drm] Initialized udl on minor 2 [ 190.152855][ T5268] veth1_vlan: left promiscuous mode [ 190.158294][ T5268] veth0_vlan: left promiscuous mode [ 190.166853][ T2535] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 190.187041][ T2535] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 190.208013][ T5140] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 190.225431][ T2535] usb 5-1: USB disconnect, device number 3 [ 190.243245][ T5140] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 190.401031][ T5268] infiniband syz1: set down [ 190.601407][ T29] audit: type=1326 audit(1721539699.671:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7121 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331375b59 code=0x7ffc0000 [ 190.635037][ T29] audit: type=1326 audit(1721539699.671:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7121 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331375b59 code=0x7ffc0000 [ 190.722398][ T29] audit: type=1326 audit(1721539699.671:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7121 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f0331375b59 code=0x7ffc0000 [ 190.811223][ T29] audit: type=1326 audit(1721539699.671:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7121 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331375b59 code=0x7ffc0000 [ 190.889113][ T29] audit: type=1326 audit(1721539699.701:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7121 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331375b59 code=0x7ffc0000 [ 191.223295][ T5268] team_slave_1 (unregistering): left allmulticast mode [ 191.237018][ T5268] team0 (unregistering): Port device team_slave_1 removed [ 191.277015][ T5268] team_slave_0 (unregistering): left allmulticast mode [ 191.286002][ T5268] team0 (unregistering): Port device team_slave_0 removed [ 191.722597][ T5090] Bluetooth: hci6: command tx timeout [ 191.943894][ T5268] team0 (unregistering): left allmulticast mode [ 192.004907][ T5274] smc: removing ib device syz1 [ 192.082435][ T2535] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 192.291902][ T2535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.316261][ T2535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.323846][ T927] vcan0 speed is unknown, defaulting to 1000 [ 192.328006][ T2535] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.347166][ T2535] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 192.356607][ T7131] netlink: 24 bytes leftover after parsing attributes in process `syz.4.531'. [ 192.366029][ T2535] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.394857][ T2535] usb 3-1: config 0 descriptor?? [ 192.647459][ T7063] team0: Port device team_slave_0 added [ 192.719981][ T7063] team0: Port device team_slave_1 added [ 192.928556][ T2535] acrux 0003:1A34:0802.000A: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 192.928608][ T2535] acrux 0003:1A34:0802.000A: no inputs found [ 192.928623][ T2535] acrux 0003:1A34:0802.000A: Failed to enable force feedback support, error: -19 [ 193.034599][ T7063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.034619][ T7063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.034642][ T7063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.058608][ T7063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.216183][ T7063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.254752][ T7063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.792513][ T5090] Bluetooth: hci6: command tx timeout [ 193.805978][ T5140] usb 3-1: USB disconnect, device number 8 [ 194.515910][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.533001][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.796640][ T7063] hsr_slave_0: entered promiscuous mode [ 194.823381][ T7063] hsr_slave_1: entered promiscuous mode [ 194.899701][ T7063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.912587][ T7063] Cannot create hsr debugfs directory [ 195.034674][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'. [ 196.359417][ T7177] binder: 7176:7177 ioctl c03064ca 20000140 returned -22 [ 196.562022][ T7177] binder: 7176:7177 ioctl b704 20000940 returned -22 [ 197.753584][ T5102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.769918][ T5102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 197.781091][ T5102] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 197.812636][ T5102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 197.830608][ T5102] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 197.844100][ T5102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 197.965846][ T7220] netlink: 'syz.2.552': attribute type 21 has an invalid length. [ 197.990863][ T7220] netlink: 'syz.2.552': attribute type 1 has an invalid length. [ 198.010269][ T7220] netlink: 132 bytes leftover after parsing attributes in process `syz.2.552'. [ 198.213507][ T7228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.300891][ T7228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.759008][ T7239] process 'syz.4.556' launched './file1' with NULL argv: empty string added [ 198.966160][ T5270] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.172931][ T5270] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.208832][ T7063] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 199.306840][ T7063] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 199.355683][ T7063] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 199.464838][ T5270] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.591562][ T7063] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 199.707005][ T5270] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.762752][ T5140] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 199.928528][ T7213] chnl_net:caif_netlink_parms(): no params data found [ 199.943053][ T5140] usb 2-1: Using ep0 maxpacket: 8 [ 199.952563][ T5090] Bluetooth: hci1: command tx timeout [ 199.965562][ T5140] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 199.983103][ T5140] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.993389][ T5140] usb 2-1: config 0 has no interface number 0 [ 199.999558][ T5140] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 200.024289][ T5140] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 200.048935][ T5140] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.072579][ T5140] usb 2-1: config 0 interface 52 has no altsetting 0 [ 200.087364][ T5140] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 200.103191][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 200.141923][ T5140] usb 2-1: Product: syz [ 200.161340][ T5140] usb 2-1: SerialNumber: syz [ 200.193493][ T5140] usb 2-1: config 0 descriptor?? [ 200.277608][ T5270] bridge_slave_1: left allmulticast mode [ 200.290338][ T5270] bridge_slave_1: left promiscuous mode [ 200.310608][ T5270] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.393385][ T5270] bridge_slave_0: left allmulticast mode [ 200.416855][ T5270] bridge_slave_0: left promiscuous mode [ 200.427459][ T5140] input: syz (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input15 [ 200.442709][ T5270] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.444032][ T4529] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 200.480396][ T4529] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 200.498014][ T4529] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 200.561031][ T4529] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 200.632615][ T7249] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 200.695484][ T5105] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 200.840419][ T4529] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 200.935110][ T4529] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 201.069041][ T7285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.558'. [ 201.241516][ T4529] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 201.774146][ T5270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.790716][ T5270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.827445][ T5270] bond0 (unregistering): Released all slaves [ 201.894210][ T7277] netlink: 'syz.4.562': attribute type 21 has an invalid length. [ 201.910531][ T7277] netlink: 'syz.4.562': attribute type 1 has an invalid length. [ 201.922164][ T7277] netlink: 132 bytes leftover after parsing attributes in process `syz.4.562'. [ 202.032641][ T5090] Bluetooth: hci1: command tx timeout [ 202.190952][ T7213] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.211729][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.225020][ T7213] bridge_slave_0: entered allmulticast mode [ 202.242491][ T7213] bridge_slave_0: entered promiscuous mode [ 202.338312][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.342958][ T927] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 202.364936][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.392742][ T7213] bridge_slave_1: entered allmulticast mode [ 202.401862][ T7213] bridge_slave_1: entered promiscuous mode [ 202.549420][ T7213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.549584][ T927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.577936][ T7213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.587118][ T927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.606985][ T927] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.685796][ T927] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.710889][ T927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.714448][ T7213] team0: Port device team_slave_0 added [ 202.748214][ T7213] team0: Port device team_slave_1 added [ 202.757076][ T927] usb 3-1: config 0 descriptor?? [ 202.777501][ T5270] hsr_slave_0: left promiscuous mode [ 202.794537][ T5270] hsr_slave_1: left promiscuous mode [ 202.819441][ T5270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.838830][ T5270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.857012][ T5270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.872481][ T5270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.927979][ T5270] veth0_macvtap: left promiscuous mode [ 202.955076][ T5270] veth1_vlan: left promiscuous mode [ 202.960486][ T5270] veth0_vlan: left promiscuous mode [ 203.159254][ T5140] usb 2-1: USB disconnect, device number 8 [ 203.233142][ T927] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 203.264731][ T927] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 203.501810][ T927] usb 3-1: USB disconnect, device number 9 [ 204.112938][ T5090] Bluetooth: hci1: command tx timeout [ 204.278967][ T5270] team0 (unregistering): Port device team_slave_1 removed [ 204.347844][ T5270] team0 (unregistering): Port device team_slave_0 removed [ 205.089087][ T7339] batadv0: entered promiscuous mode [ 205.102079][ T7339] batadv_slave_0: entered promiscuous mode [ 205.112583][ T7339] batadv_slave_0: left promiscuous mode [ 205.125251][ T7339] batadv0: left promiscuous mode [ 205.192385][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.199501][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.267981][ T7213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.324743][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.341870][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.410060][ T7213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.456094][ T7063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.499642][ T7357] netlink: 'syz.1.574': attribute type 21 has an invalid length. [ 205.514345][ T7357] netlink: 'syz.1.574': attribute type 1 has an invalid length. [ 205.543977][ T7357] netlink: 132 bytes leftover after parsing attributes in process `syz.1.574'. [ 205.787694][ T7213] hsr_slave_0: entered promiscuous mode [ 205.820980][ T7213] hsr_slave_1: entered promiscuous mode [ 205.847208][ T7213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.862502][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 205.888978][ T7213] Cannot create hsr debugfs directory [ 205.974923][ T7063] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.082491][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 206.092012][ T5196] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.099277][ T5196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.123639][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 206.137571][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.162463][ T8] usb 5-1: Product: syz [ 206.180666][ T8] usb 5-1: Manufacturer: syz [ 206.192779][ T5090] Bluetooth: hci1: command tx timeout [ 206.198820][ T8] usb 5-1: SerialNumber: syz [ 206.210492][ T8] usb 5-1: config 0 descriptor?? [ 206.226271][ T8] appledisplay 5-1:0.0: Could not find int-in endpoint [ 206.235396][ T8] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 206.292565][ T927] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 206.344840][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.352037][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.488399][ T2535] usb 5-1: USB disconnect, device number 4 [ 206.512529][ T927] usb 2-1: Using ep0 maxpacket: 16 [ 206.543331][ T927] usb 2-1: unable to get BOS descriptor or descriptor too short [ 206.575036][ T927] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01be, bcdDevice=bd.17 [ 206.598226][ T927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.622402][ T5140] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 206.622590][ T927] usb 2-1: Product: syz [ 206.652353][ T927] usb 2-1: Manufacturer: syz [ 206.663186][ T927] usb 2-1: SerialNumber: syz [ 206.677255][ T927] usb 2-1: config 0 descriptor?? [ 206.686396][ T927] hub 2-1:0.0: bad descriptor, ignoring hub [ 206.703794][ T927] hub 2-1:0.0: probe with driver hub failed with error -5 [ 206.712187][ T927] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 206.731410][ T927] ftdi_sio ttyUSB0: unknown device type: 0xbd17 [ 206.813263][ T5140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.842045][ T5140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.875998][ T5140] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.902013][ T5140] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.941238][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.978615][ T5140] usb 3-1: config 0 descriptor?? [ 207.004012][ T8] usb 2-1: USB disconnect, device number 9 [ 207.045083][ T8] ftdi_sio 2-1:0.0: device disconnected [ 207.428331][ T5140] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 207.484179][ T5140] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 207.538111][ T7213] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 207.715724][ T7213] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 207.787978][ T7213] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 207.873483][ T7213] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 207.910036][ T5140] usb 3-1: USB disconnect, device number 10 [ 207.946899][ T7063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.132101][ T7063] veth0_vlan: entered promiscuous mode [ 208.177855][ T7063] veth1_vlan: entered promiscuous mode [ 208.318209][ T7213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.333273][ T2535] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 208.370282][ T7063] veth0_macvtap: entered promiscuous mode [ 208.420304][ T7213] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.453634][ T7063] veth1_macvtap: entered promiscuous mode [ 208.514750][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.521947][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.551400][ T2535] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 208.574357][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.581510][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.589686][ T2535] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 208.615790][ T2535] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 208.625240][ T2535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.640707][ T2535] usb 5-1: Product: syz [ 208.645717][ T2535] usb 5-1: Manufacturer: syz [ 208.653491][ T2535] usb 5-1: SerialNumber: syz [ 208.668590][ T2535] usb 5-1: config 0 descriptor?? [ 208.697264][ T7401] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 208.719822][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.723403][ T7401] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 208.745327][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.777885][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.805142][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.816057][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.827092][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.838098][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.849122][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.861074][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.872078][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.889269][ T7063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.919945][ T7410] batadv0: entered promiscuous mode [ 208.931066][ T7410] batadv_slave_0: entered promiscuous mode [ 208.939644][ T7410] batadv_slave_0: left promiscuous mode [ 208.946327][ T7410] batadv0: left promiscuous mode [ 208.986735][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.030529][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.049914][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.065177][ T7401] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 209.092327][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.110251][ T7401] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 209.142349][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.163894][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.184909][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.212581][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.233891][ T7063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.248529][ T7063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.260723][ T7063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.306816][ T7063] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.337224][ T7063] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.371909][ T7063] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.393176][ T7063] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.585607][ T7213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.645194][ T5268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.692522][ T5268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.735140][ T5278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.757071][ T2535] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 209.760825][ T5278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.839428][ T7213] veth0_vlan: entered promiscuous mode [ 209.845456][ T2535] usb 5-1: USB disconnect, device number 5 [ 209.918705][ T7213] veth1_vlan: entered promiscuous mode [ 209.973960][ T7213] veth0_macvtap: entered promiscuous mode [ 210.015252][ T7213] veth1_macvtap: entered promiscuous mode [ 210.073160][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.093210][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.113202][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.134721][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.162388][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.182380][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.212416][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.228095][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.254654][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.274864][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.294436][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.319632][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.373333][ T7213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.425341][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.462523][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.481875][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.498322][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.534012][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.632521][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.701559][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.731633][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.767224][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.782454][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.799108][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.822424][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.839153][ T7213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.868972][ T7213] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.902445][ T7213] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.932414][ T7213] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.952545][ T7213] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.281830][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.322209][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.401056][ T5274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.425383][ T5274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.953338][ T5196] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 212.159328][ T5196] usb 1-1: Using ep0 maxpacket: 8 [ 212.185696][ T5196] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 212.231184][ T5196] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 212.262469][ T5196] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.302382][ T5196] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.346209][ T5196] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.385471][ T5196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.509457][ T7493] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 212.560260][ T7490] kvm: pic: non byte write [ 212.645053][ T5196] usb 1-1: usb_control_msg returned -32 [ 212.675518][ T5196] usbtmc 1-1:16.0: can't read capabilities [ 213.039719][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 213.073120][ T7504] usbtmc 1-1:16.0: Unable to send data, error -71 [ 213.234020][ T5091] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 213.440840][ T5091] usb 5-1: Using ep0 maxpacket: 8 [ 213.454040][ T5091] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 213.498350][ T5091] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.518237][ T5091] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 213.531659][ T5091] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 213.840586][ T5091] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 214.059123][ T5091] usb 5-1: language id specifier not provided by device, defaulting to English [ 214.196007][ T5091] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.245837][ T5091] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.295403][ T5091] usb 5-1: Product: syz [ 214.342437][ T5091] usb 5-1: SerialNumber: syz [ 214.361994][ T5091] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 214.389958][ T7511] netlink: 'syz.3.605': attribute type 1 has an invalid length. [ 214.402458][ T5091] cdc_ncm 5-1:1.0: bind() failure [ 214.425480][ T5091] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 214.443374][ T7511] netlink: 'syz.3.605': attribute type 1 has an invalid length. [ 214.451285][ T5091] cdc_ncm 5-1:1.1: bind() failure [ 214.473833][ T7511] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.605'. [ 214.691914][ T5091] usb 1-1: USB disconnect, device number 9 [ 214.745477][ T5196] usb 5-1: USB disconnect, device number 6 [ 215.296786][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 215.428465][ T7536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.885211][ T5091] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 216.172757][ T5091] usb 4-1: Using ep0 maxpacket: 8 [ 216.195126][ T5091] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.292885][ T29] audit: type=1326 audit(1721539725.311:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7546 comm="syz.4.621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fece4b75b59 code=0x0 [ 216.325656][ T5091] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 216.988622][ T5091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.022666][ T5091] usb 4-1: config 0 descriptor?? [ 217.072765][ T5102] Bluetooth: hci1: command 0x0405 tx timeout [ 217.294169][ T5091] usb 4-1: USB disconnect, device number 14 [ 219.219440][ T7594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.634'. [ 219.432388][ T5138] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 219.824489][ T5138] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.842344][ T5138] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 219.912976][ T5138] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.943475][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.992767][ T7590] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 220.709109][ T7618] netlink: 'syz.0.644': attribute type 29 has an invalid length. [ 220.734328][ T7620] netlink: 'syz.0.644': attribute type 29 has an invalid length. [ 220.900663][ T5138] usb 5-1: USB disconnect, device number 7 [ 220.920394][ T7623] dccp_close: ABORT with 1 bytes unread [ 221.346477][ T5091] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 221.552527][ T5091] usb 3-1: Using ep0 maxpacket: 8 [ 221.604313][ T5091] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 221.618529][ T5091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.636570][ T7648] netlink: 32 bytes leftover after parsing attributes in process `syz.3.654'. [ 221.651793][ T5091] usb 3-1: config 0 descriptor?? [ 221.792487][ T5102] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 221.799519][ T5102] Bluetooth: hci3: command 0x206a tx timeout [ 223.204619][ T7674] netlink: 32 bytes leftover after parsing attributes in process `syz.1.666'. [ 223.307459][ T7676] netlink: get zone limit has 8 unknown bytes [ 224.113527][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 224.348906][ T8] usb 4-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=98.53 [ 224.359577][ T5091] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 224.380078][ T5091] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 224.382824][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.415671][ T5091] asix 3-1:0.0: probe with driver asix failed with error -71 [ 224.435100][ T8] usb 4-1: Product: syz [ 224.439302][ T8] usb 4-1: Manufacturer: syz [ 224.446095][ T5091] usb 3-1: USB disconnect, device number 11 [ 224.450684][ T8] usb 4-1: SerialNumber: syz [ 224.483497][ T8] usb 4-1: config 0 descriptor?? [ 224.500242][ T8] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 224.569819][ T7703] netlink: 32 bytes leftover after parsing attributes in process `syz.0.678'. [ 225.033690][ T8] usb 4-1: USB disconnect, device number 15 [ 225.072651][ T5138] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 225.419693][ T5091] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 225.737724][ T5138] usb 5-1: Using ep0 maxpacket: 8 [ 225.773082][ T5138] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 225.781322][ T5138] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.919134][ T5138] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.931778][ T5138] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.942426][ T5138] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.955627][ T5091] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.966616][ T5138] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 225.976504][ T5091] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.987535][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.996164][ T5091] usb 1-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 226.008233][ T5091] usb 1-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 226.022863][ T5091] usb 1-1: config 1 interface 1 has no altsetting 0 [ 226.042895][ T5091] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.051961][ T5091] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.060041][ T5091] usb 1-1: Product: syz [ 226.072360][ T5091] usb 1-1: Manufacturer: syz [ 226.077808][ T5091] usb 1-1: SerialNumber: syz [ 226.098902][ T5091] usb 1-1: selecting invalid altsetting 1 [ 226.115764][ T5091] usb 1-1: selecting invalid altsetting 0 [ 226.121636][ T5091] usb 1-1: selecting invalid altsetting 0 [ 226.152536][ T5091] cdc_ncm 1-1:1.0: bind() failure [ 226.300622][ T5138] usb 5-1: GET_CAPABILITIES returned 0 [ 226.332406][ T5138] usbtmc 5-1:16.0: can't read capabilities [ 226.592530][ T5090] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 226.601342][ T5090] Bluetooth: hci6: Injecting HCI hardware error event [ 226.611773][ T5090] Bluetooth: hci6: hardware error 0x00 [ 226.702427][ T8] usb 5-1: USB disconnect, device number 8 [ 227.873892][ T5102] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 227.882607][ T5102] Bluetooth: hci5: Injecting HCI hardware error event [ 227.891862][ T5096] Bluetooth: hci5: hardware error 0x00 [ 228.085765][ T5091] usb 1-1: selecting invalid altsetting 0 [ 228.093824][ T5091] usbtest 1-1:1.1: probe with driver usbtest failed with error -22 [ 228.135702][ T5091] usb 1-1: USB disconnect, device number 10 [ 229.761318][ T5090] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 230.332460][ T5096] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 231.045475][ T5096] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 231.180885][ T7779] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 231.191217][ T7779] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 232.653352][ T5139] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 232.812774][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 232.854392][ T5139] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 163, using maximum allowed: 30 [ 232.874391][ T5139] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 163 [ 232.891529][ T5139] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 232.913461][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.947429][ T5139] usb 1-1: config 0 descriptor?? [ 232.961221][ T5139] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 233.002489][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 233.027180][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 233.049947][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 233.074160][ T5096] Bluetooth: hci3: command 0x206a tx timeout [ 233.102463][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 233.124349][ T8] usb 3-1: New USB device found, idVendor=10bd, idProduct=1427, bcdDevice=60.d0 [ 233.142599][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.160433][ T8] usb 3-1: Product: syz [ 233.181455][ T8] usb 3-1: Manufacturer: syz [ 233.189027][ T8] usb 3-1: SerialNumber: syz [ 233.210084][ T8] usb 3-1: config 0 descriptor?? [ 233.229978][ T5139] usb 1-1: USB disconnect, device number 11 [ 233.482359][ T8] kaweth 3-1:0.0: Firmware present in device. [ 233.653126][ T8] kaweth 3-1:0.0: Error reading configuration (-71), no net device created [ 233.672657][ T8] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 233.694582][ T8] usb 3-1: USB disconnect, device number 12 [ 233.882615][ T5138] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 234.082386][ T5138] usb 5-1: Using ep0 maxpacket: 8 [ 234.089292][ T5138] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 234.106695][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.106873][ T7827] sg_write: data in/out 196720/1 bytes for SCSI command 0xcb-- guessing data in; [ 234.106873][ T7827] program syz.1.718 not setting count and/or reply_len properly [ 234.144357][ T5138] usb 5-1: config 0 descriptor?? [ 234.227019][ T7829] netlink: 312 bytes leftover after parsing attributes in process `syz.0.721'. [ 234.953762][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.963383][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.067413][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'. [ 235.092974][ T7857] syzkaller1: entered promiscuous mode [ 235.098482][ T7857] syzkaller1: entered allmulticast mode [ 235.152688][ T5096] Bluetooth: hci3: command 0x206a tx timeout [ 237.227782][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.743'. [ 237.753489][ T5138] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 237.802490][ T5138] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 237.902555][ T5138] asix 5-1:0.0: probe with driver asix failed with error -71 [ 237.941472][ T5138] usb 5-1: USB disconnect, device number 9 [ 239.520800][ T5096] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 239.686967][ T7940] netlink: 16 bytes leftover after parsing attributes in process `syz.3.757'. [ 240.498463][ T7941] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 240.522400][ T7941] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 241.553061][ T5096] Bluetooth: hci3: command 0x206a tx timeout [ 242.114767][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 242.345748][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'. [ 242.352971][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 242.378972][ T8] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 242.402404][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.451569][ T8] usb 3-1: config 0 descriptor?? [ 243.161139][ T7955] netlink: 'syz.2.762': attribute type 10 has an invalid length. [ 243.174882][ T7955] team0: Device veth1_macvtap failed to register rx_handler [ 243.222560][ T5139] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 243.257288][ T8005] syz_tun: entered allmulticast mode [ 243.268260][ T8004] syz_tun: left allmulticast mode [ 243.435320][ T5139] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 243.446716][ T5139] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 243.466340][ T5139] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 243.496639][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.536448][ T8010] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 243.571392][ T8010] mac80211_hwsim hwsim19 wlan1: left promiscuous mode [ 243.633248][ T5096] Bluetooth: hci3: command 0x206a tx timeout [ 243.889891][ T8018] Bluetooth: MGMT ver 1.23 [ 244.752694][ T5102] Bluetooth: hci1: command 0x0405 tx timeout [ 245.966576][ T5102] Bluetooth: hci3: command 0x206a tx timeout [ 246.852488][ T5096] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 246.934529][ T5139] usb 1-1: string descriptor 0 read error: -71 [ 246.984232][ T8] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 247.024772][ T5139] usb 1-1: USB disconnect, device number 12 [ 247.049313][ T8] asix 3-1:0.0: probe with driver asix failed with error -71 [ 247.099160][ T8] usb 3-1: USB disconnect, device number 13 [ 247.929649][ T2535] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 247.975383][ T8067] vhci_hcd: invalid port number 0 [ 248.122433][ T2535] usb 1-1: Using ep0 maxpacket: 32 [ 248.141462][ T2535] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 248.167555][ T2535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.214590][ T2535] usb 1-1: config 0 descriptor?? [ 248.230857][ T2535] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 248.292252][ T8078] batadv_slave_1: entered promiscuous mode [ 248.300552][ T8077] batadv_slave_1: left promiscuous mode [ 248.438518][ T8084] Bluetooth: MGMT ver 1.23 [ 248.659215][ T2535] gspca_vc032x: reg_w err -71 [ 248.679516][ T2535] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.695962][ T2535] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.708955][ T2535] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.726224][ T2535] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.745613][ T2535] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.767576][ T2535] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.793922][ T2535] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.816411][ T2535] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.821726][ T2535] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.848664][ T2535] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.874761][ T2535] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.904645][ T2535] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.913436][ T5102] Bluetooth: hci3: command 0x206a tx timeout [ 248.940259][ T2535] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.985598][ T2535] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.013711][ T2535] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.013729][ T2535] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.013740][ T2535] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.013750][ T2535] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.013760][ T2535] gspca_vc032x: Unknown sensor... [ 249.013840][ T2535] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 249.031583][ T2535] usb 1-1: USB disconnect, device number 13 [ 249.576351][ T8109] netlink: 'syz.1.820': attribute type 9 has an invalid length. [ 249.635460][ T8110] tipc: Failed to remove unknown binding: 66,1,1/0:1851451136/1851451138 [ 249.651080][ T8110] tipc: Failed to remove unknown binding: 66,1,1/0:1851451136/1851451138 [ 249.659882][ T8110] tipc: Failed to remove unknown binding: 66,1,1/0:1851451136/1851451138 [ 249.901102][ T8109] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.820'. [ 250.386589][ T8118] tmpfs: Bad value for 'mpol' [ 250.603328][ T5142] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 250.681423][ T8134] vhci_hcd: invalid port number 0 [ 251.002536][ T5090] Bluetooth: hci3: command 0x206a tx timeout [ 251.008687][ T5096] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 251.187253][ T8138] netlink: 16 bytes leftover after parsing attributes in process `syz.4.829'. [ 251.351211][ T5142] usb 2-1: Using ep0 maxpacket: 32 [ 251.696011][ T8148] tipc: Failed to remove unknown binding: 66,1,1/0:1737935468/1737935470 [ 251.705890][ T8148] tipc: Failed to remove unknown binding: 66,1,1/0:1737935468/1737935470 [ 251.715092][ T8148] tipc: Failed to remove unknown binding: 66,1,1/0:1737935468/1737935470 [ 252.082806][ T5142] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 252.140833][ T8136] syzkaller0: entered promiscuous mode [ 252.169261][ T5142] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 252.212736][ T5142] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 252.245970][ T8136] syzkaller0: entered allmulticast mode [ 252.259251][ T5142] usb 2-1: Product: syz [ 252.309371][ T5142] usb 2-1: Manufacturer: syz [ 252.339355][ T5142] usb 2-1: SerialNumber: syz [ 252.367851][ T5142] usb 2-1: config 0 descriptor?? [ 252.383126][ T8112] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 252.848917][ T8168] vhci_hcd: invalid port number 0 [ 252.982936][ T5142] usb 2-1: USB disconnect, device number 10 [ 255.369305][ T5096] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 255.376086][ T5090] Bluetooth: hci3: command 0x206a tx timeout [ 255.383708][ T5096] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 255.954391][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.960844][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.122629][ T5142] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 256.346529][ T5142] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.383710][ T5142] usb 4-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=5d.6c [ 256.417383][ T5142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.445603][ T5142] usb 4-1: Product: syz [ 256.449805][ T5142] usb 4-1: Manufacturer: syz [ 256.479811][ T5142] usb 4-1: SerialNumber: syz [ 256.500333][ T5142] usb 4-1: config 0 descriptor?? [ 256.773002][ T5142] usb 4-1: USB disconnect, device number 16 [ 257.392709][ T5096] Bluetooth: hci3: command 0x206a tx timeout [ 257.400049][ T5090] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 257.982517][ T2535] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 258.185033][ T2535] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.195725][ T2535] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.209390][ T2535] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 258.219757][ T2535] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.237287][ T2535] usb 4-1: config 0 descriptor?? [ 258.246462][ T2535] radioshark2 4-1:0.0: Invalid radioSHARK2 device [ 258.254246][ T2535] radioshark2 4-1:0.0: probe with driver radioshark2 failed with error -22 [ 258.271354][ T2535] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 258.485802][ T2535] usb 4-1: USB disconnect, device number 17 [ 259.472622][ T5090] Bluetooth: hci3: command 0x206a tx timeout [ 260.478571][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.857'. [ 261.258146][ T8216] bond1 (unregistering): Released all slaves [ 261.876763][ T8237] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 261.974836][ T8237] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 44993 - 0 [ 262.011560][ T8237] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 44993 - 0 [ 262.049404][ T8237] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 44993 - 0 [ 262.089431][ T8237] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 44993 - 0 [ 262.119412][ T8237] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 48572 - 0 [ 262.143133][ T8237] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 48572 - 0 [ 262.151959][ T8237] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 48572 - 0 [ 262.182359][ T8237] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 48572 - 0 [ 262.201741][ T8237] geneve2: entered promiscuous mode [ 262.214570][ T8237] geneve2: entered allmulticast mode [ 262.313393][ T927] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 262.522549][ T927] usb 2-1: Using ep0 maxpacket: 16 [ 262.531587][ T927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 262.562527][ T927] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 262.571720][ T927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.195777][ T927] usb 2-1: config 0 descriptor?? [ 264.583635][ T8237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.622898][ T8237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.694308][ T927] hid (null): nested delimiters [ 264.700091][ T927] hid (null): nested delimiters [ 264.712495][ T927] hid (null): nested delimiters [ 264.717384][ T927] hid (null): report_id 24797 is invalid [ 264.723474][ T927] hid (null): bogus close delimiter [ 264.728718][ T927] hid (null): unknown global tag 0x83 [ 264.735564][ T927] hid (null): unknown global tag 0xc [ 264.754157][ T927] hid-generic 0003:0158:0100.000D: unknown main item tag 0x1 [ 264.761578][ T927] hid-generic 0003:0158:0100.000D: unexpected long global item [ 264.771290][ T927] hid-generic 0003:0158:0100.000D: probe with driver hid-generic failed with error -22 [ 264.895791][ T2535] usb 2-1: USB disconnect, device number 11 [ 266.059329][ T8291] cgroup: fork rejected by pids controller in /syz3 [ 266.598739][ T8337] tipc: Started in network mode [ 266.620544][ T8337] tipc: Node identity 080211, cluster identity 4711 [ 266.644177][ T8337] tipc: Enabled bearer , priority 0 [ 266.684907][ T8337] mac80211_hwsim hwsim14 : renamed from wlan0 (while UP) [ 266.826928][ T8337] tipc: Disabling bearer [ 268.293957][ T8366] cgroup: fork rejected by pids controller in /syz4 [ 268.349456][ T8367] trusted_key: syz.3.904 sent an empty control message without MSG_MORE. [ 269.040769][ T8410] netlink: 112 bytes leftover after parsing attributes in process `syz.2.907'. [ 270.155047][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.911'. [ 270.364580][ T29] audit: type=1326 audit(1721539779.441:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8418 comm="syz.0.913" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd17e175b59 code=0x0 [ 271.629285][ T8441] cgroup: fork rejected by pids controller in /syz2 [ 272.137129][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.922'. [ 273.355102][ T8480] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 273.405689][ T8480] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 273.962279][ T2535] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 274.227391][ T2535] usb 5-1: Using ep0 maxpacket: 32 [ 274.615202][ T2535] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 274.615248][ T2535] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 274.615288][ T2535] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 274.615316][ T2535] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 274.615344][ T2535] usb 5-1: config 0 interface 0 has no altsetting 0 [ 274.617406][ T2535] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 274.617463][ T2535] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 274.617486][ T2535] usb 5-1: Product: syz [ 274.617502][ T2535] usb 5-1: Manufacturer: syz [ 274.617519][ T2535] usb 5-1: SerialNumber: syz [ 274.624283][ T2535] usb 5-1: config 0 descriptor?? [ 274.791295][ T2535] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 274.816854][ T2535] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 275.019887][ T8521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.940'. [ 275.119959][ T8523] random: crng reseeded on system resumption [ 275.984985][ T29] audit: type=1326 audit(1721539785.061:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8528 comm="syz.3.943" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab20d75b59 code=0x0 [ 276.393228][ T8520] Restarting kernel threads ... done. [ 276.424971][ T927] usb 5-1: USB disconnect, device number 10 [ 276.437952][ T927] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 276.822387][ T5196] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 277.012595][ T5196] usb 1-1: Using ep0 maxpacket: 8 [ 277.123136][ T5196] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=79.b0 [ 277.269992][ T5196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.420950][ T5196] usb 1-1: config 0 descriptor?? [ 277.455806][ T5196] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state. [ 277.495186][ T5196] dvb-usb: bulk message failed: -22 (2/0) [ 277.573869][ T5196] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-22) [ 277.608086][ T5196] dvb_usb_cxusb 1-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 277.673574][ T5196] usb 1-1: USB disconnect, device number 14 [ 277.829974][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 277.871833][ T8556] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.880346][ T8556] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.913261][ T8556] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.920599][ T8556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.929025][ T8556] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.936214][ T8556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.944238][ T25] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 278.014291][ T8556] team0: Port device bridge0 added [ 278.049595][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 278.123326][ T5141] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 278.173617][ T25] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 278.192459][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.210099][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 278.220264][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.233925][ T25] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 278.243337][ T25] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 278.251334][ T25] usb 4-1: Product: syz [ 278.343025][ T5141] usb 3-1: Using ep0 maxpacket: 32 [ 278.386851][ T5141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.427732][ T5141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.474009][ T25] usb 4-1: Manufacturer: syz [ 278.476970][ T5141] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 278.495248][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.503468][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 278.509189][ T5141] usb 3-1: config 0 descriptor?? [ 278.515215][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 278.521271][ T25] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 278.542343][ T25] cdc_wdm 4-1:1.0: Unknown control protocol [ 279.257522][ T5141] hub 3-1:0.0: USB hub found [ 279.264563][ T5141] hub 3-1:0.0: 1 port detected [ 279.393492][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 279.400387][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 279.400896][ T927] usb 4-1: USB disconnect, device number 18 [ 279.406459][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 279.514545][ T5141] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 279.557430][ T5141] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 281.318590][ T5141] usbhid 3-1:0.0: can't add hid device: -71 [ 281.362569][ T5141] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 281.493181][ T5141] usb 3-1: USB disconnect, device number 14 [ 281.700488][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.966'. [ 281.729468][ T8595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.966'. [ 281.906919][ T5090] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 281.917873][ T5090] Bluetooth: hci2: Injecting HCI hardware error event [ 281.926512][ T5090] Bluetooth: hci2: hardware error 0x00 [ 283.206125][ T8613] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 283.215203][ T8613] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 283.223586][ T8] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 283.310602][ T8615] input: syz0 as /devices/virtual/input/input18 [ 283.424657][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 283.487887][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 283.511491][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 283.546877][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 283.578840][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.595834][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 283.612276][ T8] usb 1-1: SerialNumber: syz [ 283.648678][ T8606] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 283.696636][ T8] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 283.726331][ T8] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 283.937557][ T5142] usb 1-1: USB disconnect, device number 15 [ 284.037104][ T8619] binder: 8618:8619 ioctl c00c620f 20000340 returned -22 [ 286.862395][ T5090] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 287.212418][ T5142] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 287.436765][ T5142] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 287.468316][ T5142] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.498718][ T5142] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 287.529461][ T5142] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.562995][ T5142] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 287.572350][ T5142] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 287.591486][ T5142] usb 3-1: Product: syz [ 287.596945][ T5142] usb 3-1: Manufacturer: syz [ 287.617032][ T5142] cdc_wdm 3-1:1.0: skipping garbage [ 287.632584][ T5142] cdc_wdm 3-1:1.0: skipping garbage [ 287.649618][ T5142] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 287.662555][ T5142] cdc_wdm 3-1:1.0: Unknown control protocol [ 287.712562][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 287.932579][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 287.950497][ T8] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 287.979880][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 288.025051][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 288.028203][ T5138] usb 3-1: USB disconnect, device number 15 [ 288.031665][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 288.031684][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 288.053365][ T8] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 288.065006][ T8] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 288.078217][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 288.100370][ T8] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 288.122605][ T8] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 288.161525][ T8] usb 2-1: Product: syz [ 288.166748][ T8] usb 2-1: Manufacturer: syz [ 288.171365][ T8] usb 2-1: SerialNumber: syz [ 288.197426][ T8] usb 2-1: config 0 descriptor?? [ 288.215239][ T8] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 288.247261][ T8] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 288.508875][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 288.992464][ T5090] Bluetooth: hci3: command 0x206a tx timeout [ 289.066392][ T5138] usb 2-1: USB disconnect, device number 12 [ 291.698021][ T5138] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 291.930845][ T8670] usb usb8: usbfs: process 8670 (syz.3.988) did not claim interface 0 before use [ 292.034231][ T8675] input: syz1 as /devices/virtual/input/input19 [ 292.407816][ T8681] netlink: 830 bytes leftover after parsing attributes in process `syz.3.992'. [ 293.152698][ T5138] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 293.372401][ T5138] usb 2-1: Using ep0 maxpacket: 8 [ 293.386887][ T5138] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 293.425211][ T5138] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 293.449758][ T5138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.475045][ T5138] usb 2-1: Product: syz [ 293.487476][ T5138] usb 2-1: Manufacturer: syz [ 293.505754][ T5138] usb 2-1: SerialNumber: syz [ 293.541263][ T8707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.633466][ T8707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.737569][ T5138] adutux 2-1:168.0: interrupt endpoints not found [ 293.800647][ T5138] usb 2-1: USB disconnect, device number 13 [ 293.965976][ T5090] Bluetooth: hci1: unexpected event 0x04 length: 14 > 10 [ 294.869199][ T5096] Bluetooth: hci4: sending frame failed (-49) [ 294.884651][ T5090] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 295.284407][ T8733] usb usb8: usbfs: process 8733 (syz.4.1003) did not claim interface 0 before use [ 296.032625][ T5090] Bluetooth: hci1: command 0x0405 tx timeout [ 298.422407][ T5091] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 298.622519][ T5091] usb 5-1: Using ep0 maxpacket: 8 [ 298.655960][ T5091] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 298.694642][ T5091] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 298.718371][ T5091] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.733279][ T5091] usb 5-1: Product: syz [ 298.737476][ T5091] usb 5-1: Manufacturer: syz [ 298.742087][ T5091] usb 5-1: SerialNumber: syz [ 298.844172][ T8758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.930113][ T8758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.004759][ T5091] adutux 5-1:168.0: interrupt endpoints not found [ 299.023878][ T5091] usb 5-1: USB disconnect, device number 11 [ 301.625020][ T8748] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1012'. [ 306.360908][ T5139] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 307.224197][ T5139] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 307.267687][ T5139] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 307.302496][ T5139] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 307.311561][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.602652][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 307.692787][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 307.701701][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 307.817088][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 307.927546][ T8] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 307.946112][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.971125][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1055'. [ 307.990519][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.021029][ T5139] usb 3-1: string descriptor 0 read error: -71 [ 308.039270][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 308.055044][ T5139] usb 3-1: USB disconnect, device number 16 [ 308.081308][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.155156][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 308.179452][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.423419][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 308.449768][ T8] usbtmc 5-1:16.0: can't read capabilities [ 308.745164][ T8] usb 5-1: USB disconnect, device number 12 [ 310.394901][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'. [ 310.880035][ T8947] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.898464][ T8947] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.905705][ T8947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.596869][ T5090] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 417.652322][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 417.666748][ C1] rcu: 0-...!: (0 ticks this GP) idle=f86c/1/0x4000000000000000 softirq=28365/28365 fqs=1 [ 417.678110][ C1] rcu: (detected by 1, t=10502 jiffies, g=34149, q=218 ncpus=2) [ 417.685841][ C1] Sending NMI from CPU 1 to CPUs 0: [ 417.691066][ C0] NMI backtrace for cpu 0 [ 417.691090][ C0] CPU: 0 PID: 8976 Comm: syz.2.1096 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 417.691108][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 417.691118][ C0] RIP: 0010:rb_insert_color+0x29/0x690 [ 417.691147][ C0] Code: 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 f7 48 89 fd 48 bb 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 48 89 ef e8 e9 c8 76 f6 48 89 6c 24 08 4c 8b 75 [ 417.691160][ C0] RSP: 0018:ffffc90000007c50 EFLAGS: 00000802 [ 417.691175][ C0] RAX: 1ffff1100f9e5468 RBX: dffffc0000000000 RCX: dffffc0000000000 [ 417.691187][ C0] RDX: 0000000000000000 RSI: ffff8880b942c9d0 RDI: ffff88807cf2a340 [ 417.691198][ C0] RBP: ffff88807cf2a340 R08: ffff88807cf2a357 R09: 0000000000000000 [ 417.691210][ C0] R10: ffff88807cf2a340 R11: ffffed100f9e546b R12: ffff8880b942c9d0 [ 417.691222][ C0] R13: ffff8880b942c9d0 R14: 0000000000000000 R15: ffff8880b942c9d0 [ 417.691234][ C0] FS: 00005555942e3500(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 417.691248][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.691259][ C0] CR2: 00007fab21c0bfa8 CR3: 000000001c3e4000 CR4: 00000000003506f0 [ 417.691272][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 417.691282][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 417.691292][ C0] Call Trace: [ 417.691301][ C0] [ 417.691309][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 417.691347][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 417.691391][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 417.691420][ C0] ? nmi_handle+0x2a/0x5a0 [ 417.691444][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 417.691463][ C0] ? nmi_handle+0x14f/0x5a0 [ 417.691477][ C0] ? nmi_handle+0x2a/0x5a0 [ 417.691493][ C0] ? rb_insert_color+0x29/0x690 [ 417.691513][ C0] ? default_do_nmi+0x63/0x160 [ 417.691532][ C0] ? exc_nmi+0x123/0x1f0 [ 417.691550][ C0] ? end_repeat_nmi+0xf/0x53 [ 417.691575][ C0] ? rb_insert_color+0x29/0x690 [ 417.691595][ C0] ? rb_insert_color+0x29/0x690 [ 417.691617][ C0] ? rb_insert_color+0x29/0x690 [ 417.691638][ C0] [ 417.691643][ C0] [ 417.691647][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 417.691665][ C0] ? advance_sched+0xa02/0xca0 [ 417.691686][ C0] timerqueue_add+0x260/0x290 [ 417.691703][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 417.691724][ C0] enqueue_hrtimer+0x1b2/0x3c0 [ 417.691743][ C0] __hrtimer_run_queues+0x6cb/0xd50 [ 417.691759][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 417.691789][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 417.691806][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 417.691829][ C0] hrtimer_interrupt+0x396/0x990 [ 417.691858][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 417.691883][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 417.691906][ C0] [ 417.691911][ C0] [ 417.691917][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 417.691936][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 417.691954][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 ee 66 64 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 33 cf d0 f5 65 8b 05 14 04 72 74 85 c0 74 43 48 c7 04 24 0e 36 [ 417.691972][ C0] RSP: 0018:ffffc9000c147b80 EFLAGS: 00000206 [ 417.691985][ C0] RAX: 74ce64a265bad600 RBX: 1ffff92001828f74 RCX: ffffffff947c8703 [ 417.691997][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcacd20 RDI: 0000000000000001 [ 417.692009][ C0] RBP: ffffc9000c147c10 R08: ffffffff8fae89af R09: 1ffffffff1f5d135 [ 417.692020][ C0] R10: dffffc0000000000 R11: fffffbfff1f5d136 R12: dffffc0000000000 [ 417.692032][ C0] R13: 1ffff92001828f70 R14: ffffc9000c147ba0 R15: 0000000000000246 [ 417.692054][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 417.692071][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 417.692091][ C0] ? __pfx_lock_release+0x10/0x10 [ 417.692114][ C0] debug_check_no_obj_freed+0x561/0x580 [ 417.692139][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 417.692160][ C0] ? __dentry_kill+0x4e9/0x630 [ 417.692178][ C0] ? dput+0x37/0x2b0 [ 417.692194][ C0] ? file_free+0x24/0x1f0 [ 417.692210][ C0] kmem_cache_free+0x10f/0x350 [ 417.692230][ C0] file_free+0x24/0x1f0 [ 417.692247][ C0] task_work_run+0x24f/0x310 [ 417.692267][ C0] ? __pfx_task_work_run+0x10/0x10 [ 417.692284][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 417.692308][ C0] syscall_exit_to_user_mode+0x168/0x370 [ 417.692332][ C0] do_syscall_64+0x100/0x230 [ 417.692353][ C0] ? clear_bhb_loop+0x35/0x90 [ 417.692372][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.692389][ C0] RIP: 0033:0x7f0331375b59 [ 417.692407][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.692420][ C0] RSP: 002b:00007ffc9e76b5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 417.692434][ C0] RAX: 0000000000000000 RBX: 000000000004c4fa RCX: 00007f0331375b59 [ 417.692445][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 417.692454][ C0] RBP: ffffffffffffffff R08: 0000000000000001 R09: 000000029e76b8cf [ 417.692465][ C0] R10: 00007f0331200000 R11: 0000000000000246 R12: 00007f0331505f6c [ 417.692476][ C0] R13: 0000000000000032 R14: 00007f0331507a60 R15: 00007f0331505f60 [ 417.692495][ C0] [ 417.693059][ C1] rcu: rcu_preempt kthread starved for 10495 jiffies! g34149 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 418.228115][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 418.238192][ C1] rcu: RCU grace-period kthread stack dump: [ 418.244104][ C1] task:rcu_preempt state:R running task stack:26456 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 418.255856][ C1] Call Trace: [ 418.259141][ C1] [ 418.262084][ C1] __schedule+0x17ae/0x4a10 [ 418.266642][ C1] ? __pfx___schedule+0x10/0x10 [ 418.271518][ C1] ? __pfx_lock_release+0x10/0x10 [ 418.276565][ C1] ? __asan_memset+0x23/0x50 [ 418.281176][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 418.286995][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.293332][ C1] ? schedule+0x90/0x320 [ 418.297581][ C1] schedule+0x14b/0x320 [ 418.301762][ C1] schedule_timeout+0x1be/0x310 [ 418.306635][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 418.312024][ C1] ? __pfx_process_timeout+0x10/0x10 [ 418.317329][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 418.322895][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 418.327854][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 418.333080][ C1] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 418.339598][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 418.344913][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 418.350930][ C1] ? finish_swait+0xd4/0x1e0 [ 418.355541][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 418.360146][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 418.365352][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 418.371258][ C1] ? __kthread_parkme+0x169/0x1d0 [ 418.376294][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 418.381500][ C1] kthread+0x2f0/0x390 [ 418.385580][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 418.390785][ C1] ? __pfx_kthread+0x10/0x10 [ 418.395387][ C1] ret_from_fork+0x4b/0x80 [ 418.399814][ C1] ? __pfx_kthread+0x10/0x10 [ 418.404417][ C1] ret_from_fork_asm+0x1a/0x30 [ 418.409207][ C1] [ 418.412226][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 418.418545][ C1] CPU: 1 PID: 5278 Comm: kworker/u8:16 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 418.428522][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 418.438576][ C1] Workqueue: events_unbound toggle_allocation_gate [ 418.445094][ C1] RIP: 0010:smp_call_function_many_cond+0x1860/0x29d0 [ 418.451858][ C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 89 14 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 34 10 0c 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 18 10 [ 418.471480][ C1] RSP: 0018:ffffc90004537700 EFLAGS: 00000293 [ 418.477573][ C1] RAX: ffffffff818732a8 RBX: 1ffff11017288c29 RCX: ffff888028a93c00 [ 418.485567][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 418.493548][ C1] RBP: ffffc900045378e0 R08: ffffffff81873277 R09: 1ffffffff25fa0c0 [ 418.501527][ C1] R10: dffffc0000000000 R11: fffffbfff25fa0c1 R12: dffffc0000000000 [ 418.509501][ C1] R13: ffff8880b9446148 R14: ffff8880b953f980 R15: 0000000000000000 [ 418.517476][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 418.526412][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.533002][ C1] CR2: 0000001b2d611ff8 CR3: 000000000e134000 CR4: 00000000003506f0 [ 418.540977][ C1] Call Trace: [ 418.544260][ C1] [ 418.547113][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 418.553458][ C1] ? print_other_cpu_stall+0x1470/0x15a0 [ 418.559112][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 418.564928][ C1] ? __pfx_lock_release+0x10/0x10 [ 418.569976][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 418.576226][ C1] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 418.581619][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 418.587264][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 418.592465][ C1] ? acct_account_cputime+0x207/0x210 [ 418.597847][ C1] ? update_process_times+0x1ce/0x230 [ 418.603230][ C1] ? tick_nohz_handler+0x37c/0x500 [ 418.608347][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 418.613811][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 418.619183][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 418.625187][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 418.630917][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 418.636998][ C1] ? hrtimer_interrupt+0x396/0x990 [ 418.642135][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 418.648302][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 418.654136][ C1] [ 418.657068][ C1] [ 418.660000][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 418.666166][ C1] ? smp_call_function_many_cond+0x1847/0x29d0 [ 418.672321][ C1] ? smp_call_function_many_cond+0x1878/0x29d0 [ 418.678480][ C1] ? smp_call_function_many_cond+0x1860/0x29d0 [ 418.684642][ C1] ? kmem_cache_alloc_bulk_noprof+0x146/0x770 [ 418.690720][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 418.695799][ C1] ? kmem_cache_alloc_bulk_noprof+0x146/0x770 [ 418.701892][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 418.708229][ C1] ? __pfx___might_resched+0x10/0x10 [ 418.713519][ C1] ? __mutex_trylock_common+0x183/0x2e0 [ 418.719068][ C1] ? __pfx___might_resched+0x10/0x10 [ 418.724360][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 418.729394][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 418.734511][ C1] text_poke_bp_batch+0x352/0xb30 [ 418.739556][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 418.745109][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 418.750144][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 418.756402][ C1] text_poke_finish+0x30/0x50 [ 418.761082][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 418.767070][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 418.772971][ C1] static_key_enable+0x1a/0x20 [ 418.777742][ C1] toggle_allocation_gate+0xb5/0x250 [ 418.783035][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 418.788939][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.795287][ C1] ? process_scheduled_works+0x945/0x1830 [ 418.801015][ C1] process_scheduled_works+0xa2c/0x1830 [ 418.806599][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 418.812592][ C1] ? assign_work+0x364/0x3d0 [ 418.817191][ C1] worker_thread+0x86d/0xd40 [ 418.821797][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 418.827702][ C1] ? __kthread_parkme+0x169/0x1d0 [ 418.832738][ C1] ? __pfx_worker_thread+0x10/0x10 [ 418.837855][ C1] kthread+0x2f0/0x390 [ 418.841938][ C1] ? __pfx_worker_thread+0x10/0x10 [ 418.847065][ C1] ? __pfx_kthread+0x10/0x10 [ 418.851664][ C1] ret_from_fork+0x4b/0x80 [ 418.856176][ C1] ? __pfx_kthread+0x10/0x10 [ 418.860776][ C1] ret_from_fork_asm+0x1a/0x30 [ 418.865566][ C1]