last executing test programs: 1m46.411586113s ago: executing program 4 (id=330): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)=ANY=[@ANYBLOB="2800000014001102000000000000000028001100fa"], 0x28}}, 0x0) 1m46.157356103s ago: executing program 4 (id=332): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000009500"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m45.760727222s ago: executing program 4 (id=334): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x11) 1m44.731566298s ago: executing program 4 (id=343): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1/../file0/file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_fuse_handle_req(r0, &(0x7f0000013800)="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", 0x2000, &(0x7f0000001480)={&(0x7f0000000480)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2000000, 0x461410, 0x0, 0x0, 0x10000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m44.397718281s ago: executing program 4 (id=346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0x10}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x2}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000848}, 0x20004804) 1m42.199059746s ago: executing program 4 (id=359): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setresuid(0x0, 0xee01, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="a9", 0x1}], 0x1}}], 0x1, 0x4008440) 1m41.765033126s ago: executing program 32 (id=359): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setresuid(0x0, 0xee01, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="a9", 0x1}], 0x1}}], 0x1, 0x4008440) 34.746083764s ago: executing program 1 (id=807): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @mcast1}, 0x1c) 34.090583607s ago: executing program 1 (id=812): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0xf9e8, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0x3, 0x4) recvmmsg(r0, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/11, 0xb}, 0xa65}], 0x1, 0x45833af96e4b38bf, 0x0) 33.979680152s ago: executing program 1 (id=814): socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, ')+&\''}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 33.723963839s ago: executing program 1 (id=817): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, 0x0, 0x160) 33.231849482s ago: executing program 1 (id=822): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1004014, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 32.421402678s ago: executing program 1 (id=825): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x3, 0x0, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 31.53895564s ago: executing program 33 (id=825): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x3, 0x0, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 7.628026608s ago: executing program 2 (id=992): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f00000001c0)=""/141, 0x8d) getdents(r2, 0x0, 0x58) 6.578675492s ago: executing program 2 (id=994): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x3000001d}) 5.508473033s ago: executing program 3 (id=1003): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000000180)="2cd889f0253e14f3d5", 0x9) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000100)="01aa", 0x2}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 4.571789404s ago: executing program 3 (id=1014): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.891036798s ago: executing program 0 (id=1017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 3.68162439s ago: executing program 3 (id=1018): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x1}, 0x24}}, 0x24000880) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000003200)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x2, 0x4}, {}, {0xfff5, 0xe}}, [@filter_kind_options=@f_basic={{0x5}, {0x8, 0x2, [@TCA_BASIC_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8046}, 0x2000c080) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.172046115s ago: executing program 0 (id=1020): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r1, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) sendmmsg$inet(r0, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000000c0)="14", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000031c0)="d3", 0x1}], 0x1}}], 0x2, 0x8005) 3.066507961s ago: executing program 5 (id=1021): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, &(0x7f0000000480)=[{0x1, 0x1}, {0x0, 0x2}], 0xdeadbeef, 0x8, 0x200000b9}) 2.719608897s ago: executing program 0 (id=1022): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x1, 0x13, r0, 0x28e2d000) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.694782335s ago: executing program 2 (id=1023): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000000101010100000000000000000a0000060c0019800800020001020000744fe49e5ae1077f905e6b9c181e9d97b72c7fd19698621ebdbe86d39640fa8bba503f2b53a8a57d517f184a94c43f97fdecc9430489d8528f"], 0x20}, 0x1, 0x0, 0x0, 0x40c1}, 0x40000) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 2.593902348s ago: executing program 3 (id=1024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r1) socket$kcm(0x10, 0x100000000002, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 2.592983266s ago: executing program 5 (id=1025): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x3ff, 0xfffffffffffffffe, 0xfffd, 0x9, 0x2, 0x8, 0x1, 0x6, 0x6}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) fchown(r1, 0xee01, 0x0) 2.191071127s ago: executing program 5 (id=1026): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x23}}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x5, 0x1, 0x5}, 0x14}}, 0x2400c000) 2.187567523s ago: executing program 2 (id=1028): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) sync() 1.860046541s ago: executing program 3 (id=1029): io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x1, 0x0, 0xffffffff}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400200010000100000000b40d0011"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) 1.847205365s ago: executing program 5 (id=1030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004800) 1.764131392s ago: executing program 2 (id=1031): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x7}], 0x1, 0x2000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) 1.343069111s ago: executing program 6 (id=1032): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f00000001c0)='timers\x00') exit(0x0) pread64(r2, &(0x7f0000000a40)=""/222, 0xde, 0x1000) 1.338578062s ago: executing program 2 (id=1033): r0 = socket$netlink(0x10, 0x3, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c072bd14efb9f49fcdb8f080c26804883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589", @ANYRES8], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0xe00, 0x181080) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.247416494s ago: executing program 5 (id=1034): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) ioctl$KVM_RUN(r2, 0xae80, 0x0) 967.862374ms ago: executing program 0 (id=1035): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80840, 0x0) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 878.263741ms ago: executing program 5 (id=1036): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x9, 0x1, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000500)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) ioctl$TCSETS(r0, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) 846.809738ms ago: executing program 3 (id=1037): lseek(0xffffffffffffffff, 0x75, 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0x4148, 0x0) 846.071269ms ago: executing program 0 (id=1038): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x4}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0xa0000001}) epoll_wait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0x4000005) 491.836004ms ago: executing program 0 (id=1039): socket$unix(0x1, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x1f0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 429.244484ms ago: executing program 6 (id=1040): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000180a010200000000000000000000000008000740000000010900010073797a310000000010010000140a01"], 0x160}, 0x1, 0x0, 0x0, 0x48805}, 0x80840) 349.32764ms ago: executing program 6 (id=1041): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000600)=""/134, 0x9f}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0) 267.165596ms ago: executing program 6 (id=1042): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0x20000801) 195.919771ms ago: executing program 6 (id=1043): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003, 0xffffffffffffffff, 0x0, 0xa00369a4}, 0x38) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 0s ago: executing program 6 (id=1044): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 1(bridge_slave_0) entered disabled state [ 81.245104][ T5845] bridge_slave_0: entered allmulticast mode [ 81.246700][ T5845] bridge_slave_0: entered promiscuous mode [ 81.249842][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.249966][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.250796][ T5838] bridge_slave_0: entered allmulticast mode [ 81.262560][ T5838] bridge_slave_0: entered promiscuous mode [ 81.460871][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.460970][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.461076][ T5845] bridge_slave_1: entered allmulticast mode [ 81.476452][ T5845] bridge_slave_1: entered promiscuous mode [ 81.478257][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.478385][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.478868][ T5838] bridge_slave_1: entered allmulticast mode [ 81.481702][ T5838] bridge_slave_1: entered promiscuous mode [ 81.492378][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.492508][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.492971][ T5839] bridge_slave_0: entered allmulticast mode [ 81.495429][ T5839] bridge_slave_0: entered promiscuous mode [ 81.497850][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.497975][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.498496][ T5840] bridge_slave_0: entered allmulticast mode [ 81.500993][ T5840] bridge_slave_0: entered promiscuous mode [ 81.622686][ T9] cfg80211: failed to load regulatory.db [ 81.793288][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.793427][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.793620][ T5839] bridge_slave_1: entered allmulticast mode [ 81.796345][ T5839] bridge_slave_1: entered promiscuous mode [ 81.804637][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.804764][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.805285][ T5840] bridge_slave_1: entered allmulticast mode [ 81.812104][ T5840] bridge_slave_1: entered promiscuous mode [ 82.232764][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.232865][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.232984][ T5837] bridge_slave_0: entered allmulticast mode [ 82.234442][ T5837] bridge_slave_0: entered promiscuous mode [ 82.259672][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.277299][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.454701][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.454839][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.455025][ T5837] bridge_slave_1: entered allmulticast mode [ 82.456943][ T5837] bridge_slave_1: entered promiscuous mode [ 82.460493][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.464626][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.475350][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.479634][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.697441][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.701287][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.107338][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.109840][ T5845] team0: Port device team_slave_0 added [ 83.114322][ T5838] team0: Port device team_slave_0 added [ 83.213365][ T5847] Bluetooth: hci2: command tx timeout [ 83.213450][ T5844] Bluetooth: hci4: command tx timeout [ 83.292179][ T5847] Bluetooth: hci3: command tx timeout [ 83.292214][ T5847] Bluetooth: hci0: command tx timeout [ 83.292360][ T5844] Bluetooth: hci1: command tx timeout [ 83.297566][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.299777][ T5845] team0: Port device team_slave_1 added [ 83.303728][ T5838] team0: Port device team_slave_1 added [ 83.306728][ T5839] team0: Port device team_slave_0 added [ 83.604002][ T5840] team0: Port device team_slave_0 added [ 83.835529][ T5839] team0: Port device team_slave_1 added [ 83.838224][ T5840] team0: Port device team_slave_1 added [ 84.157422][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.157434][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.157447][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.159550][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.159563][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.159584][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.167128][ T5837] team0: Port device team_slave_0 added [ 84.384939][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.384953][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.384976][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.386560][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.386571][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.386593][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.389578][ T5837] team0: Port device team_slave_1 added [ 84.390478][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.390487][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.390499][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.528477][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.528490][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.528513][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.640114][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.640123][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.640136][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.641033][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.641040][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.641053][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.797145][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.797161][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.797183][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.940514][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.940524][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.940537][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.292104][ T5850] Bluetooth: hci2: command tx timeout [ 85.292192][ T5844] Bluetooth: hci4: command tx timeout [ 85.350698][ T5845] hsr_slave_0: entered promiscuous mode [ 85.353333][ T5845] hsr_slave_1: entered promiscuous mode [ 85.363966][ T5838] hsr_slave_0: entered promiscuous mode [ 85.365244][ T5838] hsr_slave_1: entered promiscuous mode [ 85.366217][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 85.366330][ T5838] Cannot create hsr debugfs directory [ 85.372029][ T5844] Bluetooth: hci1: command tx timeout [ 85.372054][ T5844] Bluetooth: hci0: command tx timeout [ 85.372075][ T5844] Bluetooth: hci3: command tx timeout [ 85.613381][ T5839] hsr_slave_0: entered promiscuous mode [ 85.615976][ T5839] hsr_slave_1: entered promiscuous mode [ 85.616813][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 85.616835][ T5839] Cannot create hsr debugfs directory [ 85.634185][ T5840] hsr_slave_0: entered promiscuous mode [ 85.642324][ T5840] hsr_slave_1: entered promiscuous mode [ 85.643156][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 85.643177][ T5840] Cannot create hsr debugfs directory [ 86.069711][ T5837] hsr_slave_0: entered promiscuous mode [ 86.070897][ T5837] hsr_slave_1: entered promiscuous mode [ 86.071382][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 86.071398][ T5837] Cannot create hsr debugfs directory [ 87.372425][ T5850] Bluetooth: hci4: command tx timeout [ 87.372463][ T5850] Bluetooth: hci2: command tx timeout [ 87.436353][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.452186][ T5850] Bluetooth: hci0: command tx timeout [ 87.452213][ T5850] Bluetooth: hci1: command tx timeout [ 87.452261][ T5844] Bluetooth: hci3: command tx timeout [ 87.486309][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.506077][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.557911][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.702370][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.737232][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.771712][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.846176][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.999253][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.035192][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.101558][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.139373][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.229184][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.286405][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.330839][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.375590][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.429708][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.479758][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.549975][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.550116][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.618151][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.618295][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.638935][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.671713][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.716151][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.759991][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.900631][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.015691][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.085166][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.087646][ T3189] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.087791][ T3189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.141513][ T3189] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.142213][ T3189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.220437][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.247334][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.276886][ T3189] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.282117][ T3189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.369017][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.372067][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.420492][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.466415][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.466619][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.514981][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.540371][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.541030][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.611635][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.700144][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.738591][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.738809][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.784208][ T3797] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.792115][ T3797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.009029][ T5845] veth0_vlan: entered promiscuous mode [ 90.061344][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.084789][ T5845] veth1_vlan: entered promiscuous mode [ 90.089253][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.335437][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.344530][ T5845] veth0_macvtap: entered promiscuous mode [ 90.369023][ T5845] veth1_macvtap: entered promiscuous mode [ 90.496044][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.540940][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.603995][ T3523] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.632659][ T3523] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.653687][ T3523] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.664375][ T3523] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.688496][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.778959][ T5839] veth0_vlan: entered promiscuous mode [ 90.951363][ T5839] veth1_vlan: entered promiscuous mode [ 91.078901][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.081393][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.081413][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.230712][ T1317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.230731][ T1317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.249444][ T5838] veth0_vlan: entered promiscuous mode [ 91.261555][ T5840] veth0_vlan: entered promiscuous mode [ 91.269231][ T5839] veth0_macvtap: entered promiscuous mode [ 91.309780][ T5839] veth1_macvtap: entered promiscuous mode [ 91.336071][ T5838] veth1_vlan: entered promiscuous mode [ 91.339689][ T5840] veth1_vlan: entered promiscuous mode [ 91.494019][ T5837] veth0_vlan: entered promiscuous mode [ 91.498421][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.556751][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.615391][ T5837] veth1_vlan: entered promiscuous mode [ 91.644303][ T3797] Bluetooth: hci5: Frame reassembly failed (-84) [ 91.647608][ T3662] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.668204][ T3662] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.677019][ T3662] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.687162][ T3662] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.702232][ T5838] veth0_macvtap: entered promiscuous mode [ 91.704617][ T5840] veth0_macvtap: entered promiscuous mode [ 91.767311][ T5838] veth1_macvtap: entered promiscuous mode [ 91.775812][ T5840] veth1_macvtap: entered promiscuous mode [ 91.971188][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.991023][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.030406][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.040649][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.043696][ T5837] veth0_macvtap: entered promiscuous mode [ 92.061317][ T3613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.061333][ T3613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.107733][ T5837] veth1_macvtap: entered promiscuous mode [ 92.109450][ T3797] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.117885][ T3797] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.139755][ T3797] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.167975][ T3797] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.197823][ T3613] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.218504][ T3613] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.220993][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.221004][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.316680][ T3613] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.333727][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.437515][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.529961][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.618664][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.618910][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.619768][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.620751][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.699444][ T5962] vlan2: entered promiscuous mode [ 92.699458][ T5962] team0: entered promiscuous mode [ 92.699464][ T5962] team_slave_0: entered promiscuous mode [ 92.699690][ T5962] team_slave_1: entered promiscuous mode [ 92.699923][ T5962] vlan2: entered allmulticast mode [ 92.699930][ T5962] team0: entered allmulticast mode [ 92.699935][ T5962] team_slave_0: entered allmulticast mode [ 92.699945][ T5962] team_slave_1: entered allmulticast mode [ 92.707352][ T5962] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 92.774038][ T3662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.774055][ T3662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.894807][ T3797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.894824][ T3797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.138788][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.138805][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.187842][ T5968] netlink: 'syz.1.8': attribute type 2 has an invalid length. [ 93.187931][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 93.215774][ T5968] Zero length message leads to an empty skb [ 93.265687][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.265704][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.363678][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.363693][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.595095][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.595113][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.606699][ T5975] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5'. [ 93.623334][ T5974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.623348][ T5974] IPv6: NLM_F_CREATE should be set when creating new route [ 93.692887][ T5847] Bluetooth: hci5: command 0x1003 tx timeout [ 93.693013][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 94.121296][ T5852] psmouse serio2: Failed to reset mouse on : -5 [ 94.251020][ T5940] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 94.251057][ T5940] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 94.251080][ T5940] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 94.251103][ T5940] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 94.251127][ T5940] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 94.251151][ T5940] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 94.251174][ T5940] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 94.251198][ T5940] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 94.251221][ T5940] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 94.251246][ T5940] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 94.369925][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 94.371836][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 94.444142][ T5940] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 94.674859][ T5994] IPv4: Oversized IP packet from 172.20.20.24 [ 94.677067][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 94.677483][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 94.851240][ T5993] fido_id[5993]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.932510][ T5987] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.049314][ T6004] bridge0: port 3(syz_tun) entered blocking state [ 95.055761][ T6004] bridge0: port 3(syz_tun) entered disabled state [ 95.056161][ T6004] syz_tun: entered allmulticast mode [ 95.087810][ T6004] syz_tun: entered promiscuous mode [ 95.097521][ T6004] bridge0: port 3(syz_tun) entered blocking state [ 95.097672][ T6004] bridge0: port 3(syz_tun) entered forwarding state [ 95.102104][ T5987] usb 5-1: Using ep0 maxpacket: 32 [ 95.155208][ T5987] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 95.155238][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 95.155260][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 95.155280][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 95.155302][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 95.243229][ T5987] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 95.243255][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.243273][ T5987] usb 5-1: Product: syz [ 95.243285][ T5987] usb 5-1: Manufacturer: syz [ 95.243297][ T5987] usb 5-1: SerialNumber: syz [ 95.257418][ T5987] usb 5-1: config 0 descriptor?? [ 95.566690][ T6009] loop2: detected capacity change from 0 to 7 [ 95.620715][ T6009] Dev loop2: unable to read RDB block 7 [ 95.620751][ T6009] loop2: AHDI p3 p4 [ 95.620837][ T6009] loop2: partition table partially beyond EOD, truncated [ 95.639384][ T6009] loop2: p3 start 1869967406 is beyond EOD, truncated [ 95.715378][ T5987] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 95.715435][ T5987] input input6: Device does not respond to id packet M [ 95.717603][ T5987] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 95.717646][ T5987] input input6: Device does not respond to id packet P [ 95.718416][ T5987] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 95.718455][ T5987] input input6: Device does not respond to id packet B [ 95.754215][ T5987] input input6: Device does not respond to id packet N [ 95.956738][ T5987] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 95.957168][ T5987] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 95.957583][ T5987] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 95.958021][ T5987] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 96.007796][ T5987] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 96.080623][ T5987] usb 5-1: USB disconnect, device number 2 [ 96.155767][ T6014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 96.579858][ T6020] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 96.579886][ T6020] overlayfs: failed to set xattr on upper [ 96.579893][ T6020] overlayfs: ...falling back to redirect_dir=nofollow. [ 96.579900][ T6020] overlayfs: ...falling back to metacopy=off. [ 96.579907][ T6020] overlayfs: ...falling back to index=off. [ 96.579913][ T6020] overlayfs: ...falling back to uuid=null. [ 96.811101][ T6026] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.872013][ T5852] misc userio: Buffer overflowed, userio client isn't keeping up [ 97.927953][ T6048] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 98.234549][ T6057] 9pnet: p9_errstr2errno: server reported unknown error Çpî‘AçÁ›¬ž [ 98.312161][ T5841] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.477531][ T5841] usb 1-1: Using ep0 maxpacket: 8 [ 98.483531][ T5841] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 98.483553][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.483570][ T5841] usb 1-1: Product: syz [ 98.483582][ T5841] usb 1-1: Manufacturer: syz [ 98.483594][ T5841] usb 1-1: SerialNumber: syz [ 98.548551][ T5841] usb 1-1: config 0 descriptor?? [ 98.776382][ T5841] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 98.926333][ T5852] input: PS/2 Generic Mouse as /devices/serio2/input/input5 [ 99.152230][ T5852] psmouse serio2: Failed to enable mouse on [ 99.593163][ T5841] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 99.637625][ T5841] usb 1-1: USB disconnect, device number 2 [ 100.059596][ T6088] loop2: detected capacity change from 0 to 1 [ 100.099891][ T6088] ldm_validate_privheads(): Disk read failed. [ 100.099980][ T6088] Dev loop2: unable to read RDB block 1 [ 100.100006][ T6088] loop2: AHDI p2 p3 [ 100.100114][ T6088] loop2: partition table partially beyond EOD, truncated [ 100.100362][ T6088] loop2: p3 start 335544320 is beyond EOD, truncated [ 100.904150][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.940012][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.983614][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.090104][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.128479][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.216609][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.258920][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.342679][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.390439][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.402044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.031987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.587755][ T6134] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.716294][ T6136] capability: warning: `syz.4.65' uses 32-bit capabilities (legacy support in use) [ 104.300351][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.603156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 104.603253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 104.603282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 104.603331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 104.603382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 104.603434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 104.603486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 104.603539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 104.635361][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.804013][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.571571][ T6156] fuse: root generation should be zero [ 106.042130][ T5852] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.210994][ T5852] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 106.211022][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.211038][ T5852] usb 3-1: Product: syz [ 106.211050][ T5852] usb 3-1: Manufacturer: syz [ 106.211062][ T5852] usb 3-1: SerialNumber: syz [ 106.274564][ T5852] usb 3-1: config 0 descriptor?? [ 106.752098][ T1201] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.922017][ T1201] usb 4-1: Using ep0 maxpacket: 32 [ 106.922960][ T1201] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 106.924953][ T1201] usb 4-1: config 0 has no interfaces? [ 106.926345][ T1201] usb 4-1: config 0 has no interfaces? [ 106.933455][ T1201] usb 4-1: config 0 has no interfaces? [ 106.934840][ T1201] usb 4-1: config 0 has no interfaces? [ 106.936049][ T1201] usb 4-1: config 0 has no interfaces? [ 106.939435][ T1201] usb 4-1: config 0 has no interfaces? [ 106.940819][ T1201] usb 4-1: config 0 has no interfaces? [ 106.942081][ T1201] usb 4-1: config 0 has no interfaces? [ 106.946863][ T1201] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 106.946885][ T1201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.946902][ T1201] usb 4-1: Product: syz [ 106.946914][ T1201] usb 4-1: Manufacturer: syz [ 106.946926][ T1201] usb 4-1: SerialNumber: syz [ 107.044224][ T1201] usb 4-1: config 0 descriptor?? [ 107.311384][ T5841] usb 4-1: USB disconnect, device number 2 [ 107.553759][ T6185] Bluetooth: MGMT ver 1.23 [ 107.706018][ T5852] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 107.726075][ T5852] usb 3-1: USB disconnect, device number 2 [ 107.817382][ T5852] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 107.949643][ T1201] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.015642][ T5504] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 108.051596][ T5504] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 108.115370][ T1201] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 108.115396][ T1201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.152892][ T1201] usb 1-1: config 0 descriptor?? [ 108.184606][ T1201] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 108.451107][ T5852] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 109.150803][ T6208] netlink: 'syz.1.89': attribute type 10 has an invalid length. [ 109.299594][ T6208] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.320659][ T6208] bond0: (slave team0): Enslaving as an active interface with an up link [ 109.452033][ T1201] usb 1-1: USB disconnect, device number 3 [ 109.622365][ T6218] netlink: 'syz.3.91': attribute type 1 has an invalid length. [ 110.311675][ T6237] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 110.570037][ T6240] trusted_key: syz.0.98 sent an empty control message without MSG_MORE. [ 113.062829][ T5852] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.212058][ T5852] usb 3-1: Using ep0 maxpacket: 16 [ 113.214469][ T5852] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 113.214497][ T5852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.214514][ T5852] usb 3-1: config 0 has no interface number 0 [ 113.214559][ T5852] usb 3-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 113.214578][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.282006][ T5852] usb 3-1: config 0 descriptor?? [ 113.303851][ T5852] usb 3-1: Found UVC 0.00 device (0bd3:05f4) [ 113.303887][ T5852] usb 3-1: No valid video chain found. [ 113.414821][ T1201] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 113.574130][ T1201] usb 4-1: unable to get BOS descriptor or descriptor too short [ 113.576531][ T1201] usb 4-1: config 1 interface 0 altsetting 108 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 113.576559][ T1201] usb 4-1: config 1 interface 0 has no altsetting 0 [ 113.580788][ T1201] usb 4-1: string descriptor 0 read error: -22 [ 113.580930][ T1201] usb 4-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40 [ 113.580951][ T1201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.608915][ T6294] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 113.675879][ T1201] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input7 [ 113.922586][ T5917] usb 3-1: USB disconnect, device number 3 [ 114.237098][ T5194] bcm5974 4-1:1.0: could not read from device [ 114.238030][ T981] usb 4-1: USB disconnect, device number 3 [ 114.295173][ T6015] bcm5974 4-1:1.0: could not read from device [ 114.312013][ T5841] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 114.414029][ T6015] udevd[6015]: Error opening device "/dev/input/event4": No such file or directory [ 114.414152][ T6015] udevd[6015]: Unable to EVIOCGABS device "/dev/input/event4" [ 114.414254][ T6015] udevd[6015]: Unable to EVIOCGABS device "/dev/input/event4" [ 114.414385][ T6015] udevd[6015]: Unable to EVIOCGABS device "/dev/input/event4" [ 114.414476][ T6015] udevd[6015]: Unable to EVIOCGABS device "/dev/input/event4" [ 114.465889][ T5841] usb 1-1: config 0 has no interfaces? [ 114.465924][ T5841] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 114.465944][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.506420][ T5841] usb 1-1: config 0 descriptor?? [ 114.820174][ T981] usb 1-1: USB disconnect, device number 4 [ 115.394357][ T6341] syz.4.127 uses obsolete (PF_INET,SOCK_PACKET) [ 115.882090][ T6353] netlink: 'syz.2.130': attribute type 10 has an invalid length. [ 116.574803][ T6334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.642934][ T6334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.675465][ T6334] bond0 (unregistering): Released all slaves [ 116.745790][ T6350] bridge_slave_0: left allmulticast mode [ 116.745819][ T6350] bridge_slave_0: left promiscuous mode [ 116.758654][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.856650][ T6350] bridge_slave_1: left allmulticast mode [ 116.856681][ T6350] bridge_slave_1: left promiscuous mode [ 116.856932][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.966420][ T6350] bond0: (slave bond_slave_0): Releasing backup interface [ 117.057677][ T6350] bond0: (slave bond_slave_1): Releasing backup interface [ 117.169449][ T6350] team0: Port device team_slave_0 removed [ 117.213849][ T6350] team0: Port device team_slave_1 removed [ 117.214834][ T6350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.214860][ T6350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.260903][ T6350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.260931][ T6350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.432406][ T6353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.434527][ T6353] team0: Port device bond0 added [ 118.013155][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'. [ 118.104599][ T6380] veth0: entered promiscuous mode [ 118.806826][ T5852] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.952019][ T5852] usb 1-1: Using ep0 maxpacket: 16 [ 118.956670][ T5852] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 119.008442][ T5852] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 119.008469][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.008487][ T5852] usb 1-1: Product: syz [ 119.008499][ T5852] usb 1-1: Manufacturer: syz [ 119.008512][ T5852] usb 1-1: SerialNumber: syz [ 119.047821][ T5852] usb 1-1: config 0 descriptor?? [ 119.065744][ T5852] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 119.083254][ T5852] usb 1-1: Detected FT232R [ 119.325356][ T5852] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 119.602664][ T5852] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 119.742829][ T5852] usb 1-1: USB disconnect, device number 5 [ 119.914380][ T5852] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 119.917957][ T5852] ftdi_sio 1-1:0.0: device disconnected [ 120.005120][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'. [ 120.005150][ T6424] netlink: 'syz.2.156': attribute type 18 has an invalid length. [ 120.077852][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'. [ 120.077881][ T6424] netlink: 'syz.2.156': attribute type 18 has an invalid length. [ 120.077925][ T3189] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.078792][ T3189] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.078831][ T3189] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.078863][ T3189] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.095067][ T6425] capability: warning: `syz.1.155' uses deprecated v2 capabilities in a way that may be insecure [ 120.823655][ T6441] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.209982][ T6453] netlink: 36 bytes leftover after parsing attributes in process `syz.3.166'. [ 121.744610][ T6461] netlink: 'syz.0.171': attribute type 1 has an invalid length. [ 122.244058][ T6481] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.294689][ T6481] bond_slave_1: entered promiscuous mode [ 122.376318][ T6481] veth0_to_bridge: entered promiscuous mode [ 122.377293][ T6478] veth0_to_bridge: left promiscuous mode [ 122.379180][ T6478] bond_slave_1: left promiscuous mode [ 123.732166][ T981] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 123.896236][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.896281][ T981] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 123.896301][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.927870][ T981] usb 1-1: config 0 descriptor?? [ 124.192251][ T981] usbhid 1-1:0.0: can't add hid device: -71 [ 124.192371][ T981] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 124.220610][ T981] usb 1-1: USB disconnect, device number 6 [ 124.331980][ T5847] Bluetooth: hci5: command 0xfc11 tx timeout [ 124.332153][ T5844] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 124.682761][ T981] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 124.831942][ T981] usb 1-1: Using ep0 maxpacket: 16 [ 124.836644][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.836687][ T981] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 124.836707][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.883146][ T981] usb 1-1: config 0 descriptor?? [ 125.330819][ T981] kye 0003:0458:5016.0002: control desc unexpectedly large [ 125.371427][ T981] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0002/input/input8 [ 125.551342][ T981] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0002/input/input9 [ 125.711992][ T5930] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.861994][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 125.904775][ T5930] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 125.904803][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 125.904820][ T5930] usb 2-1: Product: syz [ 125.904832][ T5930] usb 2-1: Manufacturer: syz [ 125.906843][ T5930] usb 2-1: SerialNumber: syz [ 126.099574][ T5930] usb 2-1: config 0 descriptor?? [ 126.233253][ T981] kye 0003:0458:5016.0002: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 126.525416][ T981] usb 1-1: USB disconnect, device number 7 [ 126.591386][ T6552] fido_id[6552]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 126.700589][ T5930] usb 2-1: USB disconnect, device number 2 [ 127.431682][ T6577] netlink: 52 bytes leftover after parsing attributes in process `syz.1.213'. [ 127.437582][ T6577] unsupported nlmsg_type 40 [ 128.042105][ T1201] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 128.202000][ T1201] usb 2-1: Using ep0 maxpacket: 16 [ 128.209548][ T1201] usb 2-1: config 2 has an invalid interface number: 40 but max is 0 [ 128.209572][ T1201] usb 2-1: config 2 has no interface number 0 [ 128.209607][ T1201] usb 2-1: config 2 interface 40 has no altsetting 0 [ 128.238042][ T1201] usb 2-1: New USB device found, idVendor=044f, idProduct=a01c, bcdDevice=48.22 [ 128.238068][ T1201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.238085][ T1201] usb 2-1: Product: syz [ 128.238097][ T1201] usb 2-1: Manufacturer: syz [ 128.238110][ T1201] usb 2-1: SerialNumber: syz [ 128.347796][ T6589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 128.542295][ T1201] usb 2-1: USB disconnect, device number 3 [ 128.963595][ T981] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 129.136649][ T981] usb 5-1: Using ep0 maxpacket: 16 [ 129.139764][ T6601] netlink: 56 bytes leftover after parsing attributes in process `syz.2.222'. [ 129.203330][ T981] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 129.203355][ T981] usb 5-1: config 0 has no interface number 0 [ 129.203408][ T981] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 129.203429][ T981] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 129.203451][ T981] usb 5-1: config 0 interface 41 has no altsetting 0 [ 129.276117][ T981] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 129.276151][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.276167][ T981] usb 5-1: Product: syz [ 129.276179][ T981] usb 5-1: Manufacturer: syz [ 129.276191][ T981] usb 5-1: SerialNumber: syz [ 129.342330][ T981] usb 5-1: config 0 descriptor?? [ 129.362344][ T6596] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 129.369611][ T6596] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 129.705281][ T6596] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 129.707654][ T6596] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 130.320430][ T981] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 130.336801][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 130.726544][ T981] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 130.726569][ T981] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 130.727145][ T981] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 130.778956][ T981] usb 5-1: USB disconnect, device number 3 [ 130.789327][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 130.789394][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 130.789450][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 130.789498][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 130.789550][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 130.789598][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 130.789646][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 130.922728][ T5940] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.072036][ T5940] usb 4-1: Using ep0 maxpacket: 16 [ 131.076000][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.076027][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.076047][ T5940] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.076085][ T5940] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 131.076105][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.144107][ T5940] usb 4-1: config 0 descriptor?? [ 131.471127][ T6627] loop2: detected capacity change from 0 to 7 [ 131.486441][ T6627] Dev loop2: unable to read RDB block 7 [ 131.486468][ T6627] loop2: AHDI p2 p3 [ 131.486494][ T6627] loop2: partition table partially beyond EOD, truncated [ 131.488246][ T6627] loop2: p3 start 335544320 is beyond EOD, truncated [ 131.623324][ T5940] hid-multitouch 0003:0457:07DA.0003: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 131.825135][ T1201] usb 4-1: USB disconnect, device number 4 [ 132.021422][ T6636] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 132.792718][ T6660] netlink: 'syz.0.244': attribute type 1 has an invalid length. [ 132.792735][ T6660] netlink: 'syz.0.244': attribute type 2 has an invalid length. [ 132.792746][ T6660] __nla_validate_parse: 47 callbacks suppressed [ 132.792756][ T6660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.244'. [ 132.824199][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.824294][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.532135][ T5930] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 133.699181][ T5930] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.699238][ T5930] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 133.699258][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.724504][ T5930] usb 1-1: config 0 descriptor?? [ 133.746191][ T5930] pwc: Askey VC010 type 2 USB webcam detected. [ 133.850129][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 133.972849][ T6692] bridge_slave_1: left allmulticast mode [ 133.972879][ T6692] bridge_slave_1: left promiscuous mode [ 133.975201][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.067910][ T6692] bridge_slave_0: left allmulticast mode [ 134.068074][ T6692] bridge_slave_0: left promiscuous mode [ 134.070529][ T6692] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.158825][ T5930] pwc: recv_control_msg error -32 req 02 val 2b00 [ 134.160326][ T5930] pwc: recv_control_msg error -32 req 02 val 2700 [ 134.161246][ T5930] pwc: recv_control_msg error -32 req 02 val 2c00 [ 134.164212][ T5930] pwc: recv_control_msg error -32 req 04 val 1000 [ 134.368808][ T5930] pwc: recv_control_msg error -71 req 04 val 1400 [ 134.370900][ T5930] pwc: recv_control_msg error -71 req 02 val 2000 [ 134.373947][ T5930] pwc: recv_control_msg error -71 req 02 val 2100 [ 134.374964][ T5930] pwc: recv_control_msg error -71 req 04 val 1500 [ 134.376997][ T5930] pwc: recv_control_msg error -71 req 02 val 2500 [ 134.378457][ T5930] pwc: recv_control_msg error -71 req 02 val 2400 [ 134.379129][ T5930] pwc: recv_control_msg error -71 req 02 val 2600 [ 134.379844][ T5930] pwc: recv_control_msg error -71 req 02 val 2900 [ 134.380296][ T5930] pwc: recv_control_msg error -71 req 02 val 2800 [ 134.381493][ T5930] pwc: recv_control_msg error -71 req 04 val 1100 [ 134.382237][ T5930] pwc: recv_control_msg error -71 req 04 val 1200 [ 134.411430][ T5930] pwc: Registered as video103. [ 134.450055][ T5930] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 134.493509][ T5930] usb 1-1: USB disconnect, device number 8 [ 135.481277][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.263'. [ 136.050109][ T6738] warning: `syz.4.272' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.674287][ T6758] netlink: 'syz.0.280': attribute type 10 has an invalid length. [ 136.710591][ T6754] block nbd4: NBD_DISCONNECT [ 136.724564][ T6754] block nbd4: Send disconnect failed -107 [ 136.763300][ T6754] block nbd4: Send control failed (result -107) [ 136.763384][ T6754] block nbd4: Request send failed, requeueing [ 136.763429][ T6754] block nbd4: Disconnected due to user request. [ 136.777012][ T63] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 136.845845][ T6758] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 136.922694][ T1201] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 137.056219][ T6765] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 4294967272. macoff=96 [ 137.063641][ T6763] team0: Port device team_slave_0 removed [ 137.087068][ T1201] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.087089][ T1201] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.100827][ T1201] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 137.100851][ T1201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.100868][ T1201] usb 3-1: Product: syz [ 137.100880][ T1201] usb 3-1: Manufacturer: syz [ 137.100891][ T1201] usb 3-1: SerialNumber: syz [ 137.177514][ T6763] team0: Port device team_slave_1 removed [ 137.180280][ T6763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.180308][ T6763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.220273][ T6763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.220296][ T6763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.359719][ T1201] usb 3-1: 0:2 : does not exist [ 137.373188][ T1201] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 137.484292][ T1201] usb 3-1: USB disconnect, device number 4 [ 137.628815][ T6551] udevd[6551]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.809896][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.810745][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.972081][ T5978] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 138.130772][ T5978] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.130798][ T5978] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.134126][ T5978] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 138.134149][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.134166][ T5978] usb 2-1: SerialNumber: syz [ 138.389777][ T5978] usb 2-1: 0:2 : does not exist [ 138.431574][ T5978] usb 2-1: USB disconnect, device number 4 [ 138.629788][ T6551] udevd[6551]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.757464][ T6766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.789026][ T6766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.030644][ T3613] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.194704][ T3613] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.194820][ T3613] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.194855][ T3613] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.386325][ T6813] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 140.386467][ T6813] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 140.387385][ T6813] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 140.387450][ T6813] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 140.387502][ T6813] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 140.387557][ T6813] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 140.387612][ T6813] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 140.387667][ T6813] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 140.387722][ T6813] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 140.387777][ T6813] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 140.412249][ T5930] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.586895][ T5930] usb 5-1: unable to get BOS descriptor or descriptor too short [ 140.589229][ T5930] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.600432][ T5930] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.600455][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.600472][ T5930] usb 5-1: Product: syz [ 140.600483][ T5930] usb 5-1: Manufacturer: syz [ 140.600495][ T5930] usb 5-1: SerialNumber: syz [ 141.050595][ T5930] usb 5-1: USB disconnect, device number 4 [ 141.176741][ T6551] udevd[6551]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.403494][ T5978] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 141.552007][ T5978] usb 3-1: Using ep0 maxpacket: 32 [ 141.556191][ T5978] usb 3-1: config 0 has no interfaces? [ 141.556224][ T5978] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 141.556244][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.570758][ T5978] usb 3-1: config 0 descriptor?? [ 141.752168][ T1201] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 141.782223][ T5978] usb 3-1: USB disconnect, device number 5 [ 141.916437][ T1201] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.916470][ T1201] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 141.916506][ T1201] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 141.916525][ T1201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.964099][ T5917] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 141.968757][ T6831] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 141.991413][ T1201] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 142.129608][ T5917] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.129640][ T5917] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 142.159638][ T5917] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.159664][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.159681][ T5917] usb 2-1: Product: syz [ 142.159693][ T5917] usb 2-1: Manufacturer: syz [ 142.159706][ T5917] usb 2-1: SerialNumber: syz [ 142.202655][ T6835] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 142.313263][ T1201] usb 5-1: USB disconnect, device number 5 [ 142.901266][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 142.963060][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 142.965018][ T161] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.978278][ T161] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.978320][ T161] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.978352][ T161] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.292396][ T5917] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 143.292425][ T5917] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 143.743278][ T5917] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 143.781589][ T5917] usb 2-1: USB disconnect, device number 5 [ 143.794252][ T5917] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 143.817544][ T5930] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 143.966821][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.966852][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.966893][ T5930] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 143.966913][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.975033][ T5930] usb 1-1: config 0 descriptor?? [ 145.203801][ T5930] uclogic 0003:256C:006D.0004: interface is invalid, ignoring [ 145.236558][ T981] usb 1-1: USB disconnect, device number 9 [ 145.567061][ T6895] netlink: 'syz.3.333': attribute type 12 has an invalid length. [ 147.614362][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.935298][ T6932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.101061][ T6958] netlink: 'syz.0.356': attribute type 4 has an invalid length. [ 150.225749][ T6978] netlink: 'syz.3.364': attribute type 1 has an invalid length. [ 150.445062][ T3523] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.568376][ T6987] mmap: syz.2.368 (6987) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 150.725723][ T6978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.734655][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.751319][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.763700][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.766041][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.767520][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.816846][ T6980] bond0: (slave gretap1): making interface the new active one [ 150.856093][ T6980] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 151.047216][ T6995] netlink: 165 bytes leftover after parsing attributes in process `syz.3.370'. [ 151.054344][ T6995] netlink: 165 bytes leftover after parsing attributes in process `syz.3.370'. [ 151.080517][ T3523] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.172040][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 151.321968][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 151.326282][ T31] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 151.326305][ T31] usb 2-1: config 0 has no interface number 0 [ 151.326354][ T31] usb 2-1: config 0 interface 12 has no altsetting 0 [ 151.330145][ T31] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 151.330169][ T31] usb 2-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 151.330187][ T31] usb 2-1: Product: syz [ 151.330199][ T31] usb 2-1: Manufacturer: syz [ 151.330212][ T31] usb 2-1: SerialNumber: syz [ 151.419623][ T31] usb 2-1: config 0 descriptor?? [ 151.556570][ T3523] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.957497][ T3523] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.813231][ T5844] Bluetooth: hci1: command tx timeout [ 152.872233][ T31] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 152.872289][ T31] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 152.872303][ T31] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 152.872396][ T31] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 152.915878][ T31] usb 2-1: USB disconnect, device number 6 [ 153.121693][ T6988] chnl_net:caif_netlink_parms(): no params data found [ 153.344617][ T37] audit: type=1326 audit(1756517228.615:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.3.385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa75133ebe9 code=0x0 [ 153.489669][ T3523] bridge_slave_1: left allmulticast mode [ 153.490104][ T3523] bridge_slave_1: left promiscuous mode [ 153.509743][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.609944][ T3523] bridge_slave_0: left allmulticast mode [ 153.609972][ T3523] bridge_slave_0: left promiscuous mode [ 153.610241][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.737436][ T7041] evm: overlay not supported [ 154.014286][ T1201] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 154.162368][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 154.172973][ T1201] usb 2-1: Using ep0 maxpacket: 16 [ 154.176752][ T1201] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 154.176781][ T1201] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 154.176801][ T1201] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 154.187211][ T1201] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.187235][ T1201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 154.187251][ T1201] usb 2-1: SerialNumber: syz [ 154.204648][ T7039] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.678219][ T7062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.396'. [ 154.760614][ T1201] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 154.850925][ T1201] usb 2-1: USB disconnect, device number 7 [ 154.892334][ T5844] Bluetooth: hci1: command tx timeout [ 156.358839][ T7085] IPv4: Oversized IP packet from 172.20.20.24 [ 156.359307][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 156.359445][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 156.742826][ T3523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.822347][ T3523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.846746][ T3523] bond0 (unregistering): Released all slaves [ 156.862082][ T1201] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 156.909981][ T7062] netlink: 'syz.0.396': attribute type 1 has an invalid length. [ 156.909999][ T7062] netlink: 'syz.0.396': attribute type 2 has an invalid length. [ 156.973843][ T5844] Bluetooth: hci1: command tx timeout [ 157.011998][ T1201] usb 2-1: Using ep0 maxpacket: 16 [ 157.014788][ T1201] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.014814][ T1201] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.014849][ T1201] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 157.014869][ T1201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.026268][ T1201] usb 2-1: config 0 descriptor?? [ 157.783919][ T5917] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 157.982383][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.982817][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.982840][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.982882][ T5917] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.982901][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.067244][ T5917] usb 3-1: config 0 descriptor?? [ 158.270631][ T1201] letsketch 0003:6161:4D15.0005: Device info: à° [ 158.545872][ T1201] usb 2-1: Max retries (5) exceeded reading string descriptor 201 [ 158.545949][ T1201] letsketch 0003:6161:4D15.0005: probe with driver letsketch failed with error -71 [ 158.573888][ T1201] usb 2-1: USB disconnect, device number 8 [ 158.585198][ T5917] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 158.700122][ T6988] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.710008][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.710225][ T6988] bridge_slave_0: entered allmulticast mode [ 158.733077][ T6988] bridge_slave_0: entered promiscuous mode [ 158.736683][ T6988] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.736820][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.736988][ T6988] bridge_slave_1: entered allmulticast mode [ 158.739664][ T6988] bridge_slave_1: entered promiscuous mode [ 158.931420][ T5917] usb 3-1: USB disconnect, device number 6 [ 159.051947][ T5844] Bluetooth: hci1: command tx timeout [ 159.331497][ T6988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.581176][ T3523] hsr_slave_0: left promiscuous mode [ 159.612372][ T3523] hsr_slave_1: left promiscuous mode [ 159.613577][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.614870][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.702042][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.702073][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.997560][ T3523] veth1_macvtap: left promiscuous mode [ 159.997836][ T3523] veth0_macvtap: left promiscuous mode [ 159.999018][ T3523] veth1_vlan: left promiscuous mode [ 160.043353][ T3523] veth0_vlan: left promiscuous mode [ 164.952764][ T3523] team0 (unregistering): Port device team_slave_1 removed [ 165.142962][ T3523] team0 (unregistering): Port device team_slave_0 removed [ 166.938274][ T6988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.941170][ T7136] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.422'. [ 166.941467][ T7176] netlink: 'syz.1.438': attribute type 5 has an invalid length. [ 167.121075][ T7180] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 167.121240][ T7180] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 167.142602][ T7190] fuse: Bad value for 'fd' [ 167.229365][ T7180] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 167.295667][ T7180] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.295768][ T7180] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 167.377498][ T6988] team0: Port device team_slave_0 added [ 167.392056][ T6988] team0: Port device team_slave_1 added [ 167.484126][ T7180] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 167.559041][ T7180] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.559178][ T7180] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 167.627420][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.448'. [ 167.647722][ T7180] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 167.739161][ T7180] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 167.743016][ T7180] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 167.821693][ T6988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.821707][ T6988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.821730][ T6988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.871723][ T6988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.871737][ T6988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.871758][ T6988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.902624][ T7180] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 168.055205][ T7180] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 168.055312][ T7180] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 168.183682][ T7180] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 168.670107][ T6988] hsr_slave_0: entered promiscuous mode [ 168.671379][ T6988] hsr_slave_1: entered promiscuous mode [ 168.712485][ T6988] debugfs: 'hsr0' already exists in 'hsr' [ 168.712510][ T6988] Cannot create hsr debugfs directory [ 169.134053][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.279648][ T37] audit: type=1326 audit(1756517500.523:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7245 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04efe4ebe9 code=0x7fc00000 [ 169.372049][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.611945][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.771978][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 169.873656][ T7257] Failed to get privilege flags for destination (handle=0x0:0x0) [ 170.091963][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.364952][ T37] audit: type=1326 audit(1756517501.633:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7245 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f04efdeadb9 code=0x7fc00000 [ 171.009338][ T6988] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 171.180534][ T6988] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 171.212119][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 171.396177][ T6988] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 171.451932][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 171.485997][ T6988] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 171.691933][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 171.740268][ T7297] syzkaller1: entered promiscuous mode [ 171.740294][ T7297] syzkaller1: entered allmulticast mode [ 171.852514][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 172.172041][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.716006][ T6988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.732245][ T7324] syz.1.482 (7324) used greatest stack depth: 16784 bytes left [ 172.802796][ T6988] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.844135][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.848845][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.893873][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.894078][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.293483][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.534269][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.772269][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.882203][ T981] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 173.933240][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 174.002654][ T6988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.038836][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.038865][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.038886][ T981] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.038924][ T981] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.038944][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.098520][ T981] usb 3-1: config 0 descriptor?? [ 174.254951][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.583301][ T981] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 174.834971][ T981] usb 3-1: USB disconnect, device number 7 [ 174.995686][ T7378] fido_id[7378]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 175.016778][ T5978] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 175.173091][ T5978] usb 2-1: Using ep0 maxpacket: 32 [ 175.213016][ T5978] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 175.213042][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.244101][ T5978] usb 2-1: config 0 descriptor?? [ 175.265215][ T5978] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 175.312367][ T5847] Bluetooth: hci4: ISO packet for unknown connection handle 201 [ 175.827203][ T6988] veth0_vlan: entered promiscuous mode [ 175.884186][ T6988] veth1_vlan: entered promiscuous mode [ 176.092334][ T6988] veth0_macvtap: entered promiscuous mode [ 176.207930][ T6988] veth1_macvtap: entered promiscuous mode [ 176.290988][ T6988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.365617][ T6988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.421455][ T3662] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.421692][ T3662] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.436225][ T161] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.449427][ T161] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.454522][ T5978] gspca_nw80x: reg_w err -71 [ 176.454606][ T5978] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 176.480609][ T5978] usb 2-1: USB disconnect, device number 9 [ 176.574607][ T37] audit: type=1326 audit(1756517508.829:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7414 comm="syz.2.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb315d4ebe9 code=0x7ffc0000 [ 176.574657][ T37] audit: type=1326 audit(1756517508.829:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7414 comm="syz.2.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb315d4ebe9 code=0x7ffc0000 [ 176.574695][ T37] audit: type=1326 audit(1756517508.829:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7414 comm="syz.2.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb315d4ebe9 code=0x7ffc0000 [ 176.574733][ T37] audit: type=1326 audit(1756517508.829:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7414 comm="syz.2.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb315d4ebe9 code=0x7ffc0000 [ 176.574771][ T37] audit: type=1326 audit(1756517508.829:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7414 comm="syz.2.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb315d4ebe9 code=0x7ffc0000 [ 176.574809][ T37] audit: type=1326 audit(1756517508.829:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7414 comm="syz.2.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb315d4ebe9 code=0x7ffc0000 [ 176.574845][ T37] audit: type=1326 audit(1756517508.829:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7414 comm="syz.2.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb315d4ebe9 code=0x7ffc0000 [ 177.169957][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.169976][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.209839][ T7425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.508'. [ 177.543910][ T1317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.543936][ T1317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.604086][ T981] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 178.776640][ T981] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.776680][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 178.776706][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 178.776724][ T981] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.776762][ T981] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.776782][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.827039][ T5978] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 178.855019][ T981] usb 3-1: config 0 descriptor?? [ 179.003092][ T5978] usb 2-1: Using ep0 maxpacket: 8 [ 179.033157][ T5978] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 179.033182][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.033199][ T5978] usb 2-1: Product: syz [ 179.033211][ T5978] usb 2-1: Manufacturer: syz [ 179.033223][ T5978] usb 2-1: SerialNumber: syz [ 179.087921][ T5978] usb 2-1: config 0 descriptor?? [ 179.302883][ T5978] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 179.375936][ T981] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 179.464742][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 179.623113][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 179.654566][ T31] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 179.654592][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.654815][ T31] usb 1-1: Product: syz [ 179.654836][ T31] usb 1-1: Manufacturer: syz [ 179.654848][ T31] usb 1-1: SerialNumber: syz [ 179.710635][ T31] usb 1-1: config 0 descriptor?? [ 179.725182][ T5978] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 179.749982][ T5978] usb 2-1: USB disconnect, device number 10 [ 180.248449][ T31] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 180.295084][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 180.298468][ T31] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 180.298559][ T31] usb 1-1: media controller created [ 180.632230][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.785440][ T7460] usb 3-1: string descriptor 0 read error: -2 [ 180.850397][ T31] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 180.850417][ T31] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 181.219450][ T5841] usb 1-1: USB disconnect, device number 10 [ 181.269010][ T7497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.468896][ T5841] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 181.624045][ T981] usb 3-1: USB disconnect, device number 8 [ 182.476783][ T37] audit: type=1326 audit(1756517514.739:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7485 comm="syz.3.529" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa75133ebe9 code=0x0 [ 185.399442][ T7576] netlink: 452 bytes leftover after parsing attributes in process `syz.2.557'. [ 185.923170][ T5841] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 185.962001][ T5978] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 186.072169][ T5841] usb 3-1: Using ep0 maxpacket: 16 [ 186.074604][ T5841] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.074654][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 186.074678][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 186.074697][ T5841] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 186.074717][ T5841] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.076335][ T5841] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 186.076358][ T5841] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 186.076375][ T5841] usb 3-1: Manufacturer: syz [ 186.119640][ T5978] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 186.119668][ T5978] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 186.119701][ T5978] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 186.127150][ T5978] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.127176][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.127192][ T5978] usb 4-1: Product: syz [ 186.127204][ T5978] usb 4-1: Manufacturer: syz [ 186.127216][ T5978] usb 4-1: SerialNumber: syz [ 186.166559][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.280168][ T5841] usb 3-1: config 0 descriptor?? [ 186.581929][ T5841] rc_core: IR keymap rc-hauppauge not found [ 186.581948][ T5841] Registered IR keymap rc-empty [ 186.582603][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.602022][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.610193][ T5978] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 186.642481][ T5841] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 186.669923][ T5841] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 186.742566][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.762074][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.782804][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.802023][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.822262][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.842027][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.862054][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.882020][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.902088][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.922042][ T5841] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 186.959157][ T5841] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 186.959177][ T5841] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 187.032584][ T5841] usb 3-1: USB disconnect, device number 9 [ 187.387868][ T7601] netlink: 'syz.5.565': attribute type 21 has an invalid length. [ 187.387887][ T7601] netlink: 'syz.5.565': attribute type 22 has an invalid length. [ 187.387898][ T7601] netlink: 'syz.5.565': attribute type 23 has an invalid length. [ 187.388363][ T7601] netlink: 'syz.5.565': attribute type 25 has an invalid length. [ 187.388377][ T7601] netlink: 96 bytes leftover after parsing attributes in process `syz.5.565'. [ 187.418912][ T5978] usb 4-1: 2:1: cannot get freq at ep 0x82 [ 187.762033][ T5978] usb 4-1: USB disconnect, device number 5 [ 187.985037][ T5896] udevd[5896]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.051936][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 189.212000][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 189.214533][ T31] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 189.214554][ T31] usb 1-1: config 0 has no interface number 0 [ 189.218014][ T31] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 189.218050][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.218077][ T31] usb 1-1: Product: syz [ 189.218089][ T31] usb 1-1: Manufacturer: syz [ 189.218102][ T31] usb 1-1: SerialNumber: syz [ 189.284176][ T31] usb 1-1: config 0 descriptor?? [ 189.288564][ T31] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 189.537241][ T31] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 189.592666][ T31] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 190.014748][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 190.021639][ T5917] usb 1-1: USB disconnect, device number 11 [ 190.085483][ T5917] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 190.129530][ T5917] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 190.130532][ T5917] quatech2 1-1:0.51: device disconnected [ 190.311129][ T7656] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 190.781953][ T5930] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 190.830040][ T7664] GUP no longer grows the stack in syz.5.593 (7664): 200000004000-20000000a000 (200000002000) [ 190.830089][ T7664] CPU: 1 UID: 0 PID: 7664 Comm: syz.5.593 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 190.830109][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.830126][ T7664] Call Trace: [ 190.830133][ T7664] [ 190.830140][ T7664] dump_stack_lvl+0x189/0x250 [ 190.830173][ T7664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.830197][ T7664] ? __pfx__printk+0x10/0x10 [ 190.830213][ T7664] ? find_vma+0xe7/0x160 [ 190.830249][ T7664] __get_user_pages+0x237e/0x2b60 [ 190.830310][ T7664] get_user_pages_remote+0x2f1/0xad0 [ 190.830333][ T7664] ? __pfx_mtree_load+0x10/0x10 [ 190.830362][ T7664] ? __pfx_get_user_pages_remote+0x10/0x10 [ 190.830386][ T7664] ? __access_remote_vm+0x367/0x7d0 [ 190.830415][ T7664] __access_remote_vm+0x211/0x7d0 [ 190.830449][ T7664] ? __pfx___access_remote_vm+0x10/0x10 [ 190.830471][ T7664] ? set_page_refcounted+0xa0/0x1e0 [ 190.830496][ T7664] ? alloc_pages_noprof+0xe4/0x1e0 [ 190.830523][ T7664] proc_pid_cmdline_read+0x433/0x810 [ 190.830547][ T7664] ? __asan_memset+0x22/0x50 [ 190.830573][ T7664] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 190.830601][ T7664] ? rw_verify_area+0x2ac/0x4e0 [ 190.830625][ T7664] vfs_readv+0x5b3/0x850 [ 190.830660][ T7664] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 190.830688][ T7664] ? __pfx_vfs_readv+0x10/0x10 [ 190.830728][ T7664] ? __fget_files+0x2a/0x420 [ 190.830756][ T7664] ? __fget_files+0x3a6/0x420 [ 190.830777][ T7664] ? __fget_files+0x2a/0x420 [ 190.830809][ T7664] __x64_sys_preadv+0x19a/0x2a0 [ 190.830834][ T7664] ? __pfx___x64_sys_preadv+0x10/0x10 [ 190.830853][ T7664] ? rcu_is_watching+0x15/0xb0 [ 190.830882][ T7664] ? do_syscall_64+0xbe/0x3b0 [ 190.830909][ T7664] do_syscall_64+0xfa/0x3b0 [ 190.830929][ T7664] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.830951][ T7664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.830968][ T7664] ? clear_bhb_loop+0x60/0xb0 [ 190.830989][ T7664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.831006][ T7664] RIP: 0033:0x7f74baeeebe9 [ 190.831029][ T7664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.831044][ T7664] RSP: 002b:00007f74b9156038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 190.831062][ T7664] RAX: ffffffffffffffda RBX: 00007f74bb125fa0 RCX: 00007f74baeeebe9 [ 190.831076][ T7664] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 190.831087][ T7664] RBP: 00007f74baf71e19 R08: 0000000021000008 R09: 0000000000000000 [ 190.831098][ T7664] R10: 0000000000000304 R11: 0000000000000246 R12: 0000000000000000 [ 190.831109][ T7664] R13: 00007f74bb126038 R14: 00007f74bb125fa0 R15: 00007ffe27cc3748 [ 190.831140][ T7664] [ 190.977846][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 191.111938][ T5930] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 191.111965][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.111982][ T5930] usb 4-1: Product: syz [ 191.111994][ T5930] usb 4-1: Manufacturer: syz [ 191.112006][ T5930] usb 4-1: SerialNumber: syz [ 191.148735][ T5930] usb 4-1: config 0 descriptor?? [ 191.161123][ T5930] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 192.111960][ T5917] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 192.266012][ T5917] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.266036][ T5917] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.269234][ T5917] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 192.269259][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 192.269277][ T5917] usb 3-1: SerialNumber: syz [ 192.390744][ T5930] input: sonixj as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 192.491998][ T5841] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 192.516046][ T5917] usb 3-1: 0:2 : does not exist [ 192.640919][ T5917] usb 3-1: USB disconnect, device number 10 [ 192.642178][ T5841] usb 1-1: Using ep0 maxpacket: 32 [ 192.643975][ T10] usb 4-1: USB disconnect, device number 6 [ 192.648940][ T5841] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 192.648962][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.648979][ T5841] usb 1-1: Product: syz [ 192.648991][ T5841] usb 1-1: Manufacturer: syz [ 192.649002][ T5841] usb 1-1: SerialNumber: syz [ 192.681564][ T5841] usb 1-1: config 0 descriptor?? [ 192.757205][ T5841] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 192.943178][ T6551] udevd[6551]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.502157][ T7711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.972275][ T5978] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 194.122009][ T5978] usb 3-1: Using ep0 maxpacket: 32 [ 194.124426][ T5978] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.124453][ T5978] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.131067][ T5978] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 194.131091][ T5978] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 194.131109][ T5978] usb 3-1: Product: syz [ 194.131121][ T5978] usb 3-1: Manufacturer: syz [ 194.195671][ T5841] gspca_stk1135: reg_w 0xf err -71 [ 194.196723][ T5841] gspca_stk1135: serial bus timeout: status=0x00 [ 194.196735][ T5841] gspca_stk1135: Sensor write failed [ 194.196756][ T5841] gspca_stk1135: serial bus timeout: status=0x00 [ 194.196763][ T5841] gspca_stk1135: Sensor write failed [ 194.196783][ T5841] gspca_stk1135: serial bus timeout: status=0x00 [ 194.196791][ T5841] gspca_stk1135: Sensor read failed [ 194.196811][ T5841] gspca_stk1135: serial bus timeout: status=0x00 [ 194.196819][ T5841] gspca_stk1135: Sensor read failed [ 194.196825][ T5841] gspca_stk1135: Detected sensor type unknown (0x0) [ 194.196854][ T5841] gspca_stk1135: serial bus timeout: status=0x00 [ 194.196863][ T5841] gspca_stk1135: Sensor read failed [ 194.196882][ T5841] gspca_stk1135: serial bus timeout: status=0x00 [ 194.196889][ T5841] gspca_stk1135: Sensor read failed [ 194.196909][ T5841] gspca_stk1135: serial bus timeout: status=0x00 [ 194.196917][ T5841] gspca_stk1135: Sensor write failed [ 194.196937][ T5841] gspca_stk1135: serial bus timeout: status=0x00 [ 194.196945][ T5841] gspca_stk1135: Sensor write failed [ 194.197032][ T5841] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 194.256489][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.256576][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.399073][ T5841] usb 1-1: USB disconnect, device number 12 [ 194.551176][ T5978] hub 3-1:4.0: USB hub found [ 194.655718][ T5978] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 195.091123][ T5930] usb 3-1: USB disconnect, device number 11 [ 196.103241][ T5841] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 196.450586][ T5841] usb 2-1: unable to get BOS descriptor or descriptor too short [ 196.452836][ T5841] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 196.452868][ T5841] usb 2-1: can't read configurations, error -71 [ 197.202062][ T5917] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 197.362187][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 197.366855][ T5917] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 197.366877][ T5917] usb 4-1: config 0 has no interface number 0 [ 197.366925][ T5917] usb 4-1: config 0 interface 184 has no altsetting 0 [ 197.370521][ T5917] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 197.370544][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.370561][ T5917] usb 4-1: Product: syz [ 197.370573][ T5917] usb 4-1: Manufacturer: syz [ 197.370585][ T5917] usb 4-1: SerialNumber: syz [ 197.397385][ T5917] usb 4-1: config 0 descriptor?? [ 197.429201][ T5917] smsc75xx v1.0.0 [ 197.612249][ T5930] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 197.769037][ T5930] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 197.769097][ T5930] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 197.769118][ T5930] usb 1-1: config 0 interface 0 has no altsetting 0 [ 197.797541][ T5930] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.797567][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 197.797584][ T5930] usb 1-1: Product: syz [ 197.797591][ T5930] usb 1-1: Manufacturer: syz [ 197.797598][ T5930] usb 1-1: SerialNumber: syz [ 197.841717][ T5930] usb 1-1: config 0 descriptor?? [ 197.847195][ T5930] hub 1-1:0.0: bad descriptor, ignoring hub [ 197.847226][ T5930] hub 1-1:0.0: probe with driver hub failed with error -5 [ 197.866866][ T5930] usb 1-1: selecting invalid altsetting 0 [ 198.199027][ T37] audit: type=1326 audit(1756517530.459:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7810 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74baeeebe9 code=0x7ffc0000 [ 198.223674][ T37] audit: type=1326 audit(1756517530.459:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7810 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74baeeebe9 code=0x7ffc0000 [ 198.223722][ T37] audit: type=1326 audit(1756517530.479:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7810 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f74baeeebe9 code=0x7ffc0000 [ 198.285062][ T37] audit: type=1326 audit(1756517530.549:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7810 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74baeeebe9 code=0x7ffc0000 [ 198.287144][ T37] audit: type=1326 audit(1756517530.549:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7810 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74baeeebe9 code=0x7ffc0000 [ 198.313466][ T37] audit: type=1326 audit(1756517530.579:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7810 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74baeeebe9 code=0x7ffc0000 [ 198.314111][ T37] audit: type=1326 audit(1756517530.579:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7810 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74baeeebe9 code=0x7ffc0000 [ 198.314750][ T37] audit: type=1326 audit(1756517530.579:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7810 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74baeeebe9 code=0x7ffc0000 [ 198.315223][ T37] audit: type=1326 audit(1756517530.579:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7810 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f74baeeebe9 code=0x7ffc0000 [ 198.315697][ T37] audit: type=1326 audit(1756517530.579:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7810 comm="syz.5.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74baeeebe9 code=0x7ffc0000 [ 198.798632][ T7817] Bluetooth: hci0: unsupported parameter 32780 [ 198.798652][ T7817] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 198.886020][ T5917] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 198.886047][ T5917] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 198.886683][ T5917] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 198.886706][ T5917] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 198.886723][ T5917] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 198.886744][ T5917] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 198.887040][ T5917] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 198.909013][ T5917] usb 4-1: USB disconnect, device number 7 [ 199.333304][ T5940] usb 1-1: USB disconnect, device number 13 [ 200.103458][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 200.174319][ T7844] team1: entered promiscuous mode [ 200.174348][ T7844] team1: entered allmulticast mode [ 200.221996][ T1201] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 200.394400][ T1201] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.394429][ T1201] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.394449][ T1201] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.394487][ T1201] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.394508][ T1201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.400508][ T1201] usb 6-1: config 0 descriptor?? [ 200.517434][ T7857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 200.887893][ T1201] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xe [ 200.887936][ T1201] hid_parser_main: 7 callbacks suppressed [ 200.887948][ T1201] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 200.928285][ T1201] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 201.177177][ T981] usb 6-1: USB disconnect, device number 2 [ 201.315854][ T7886] binder: 7885:7886 ioctl c0306201 200000000640 returned -22 [ 201.448479][ T7890] Bluetooth: hci0: service_discovery: too big uuid_count value 65535 [ 202.320274][ T7915] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 202.972145][ T5841] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 203.121918][ T5841] usb 4-1: Using ep0 maxpacket: 32 [ 203.129472][ T5841] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 203.129494][ T5841] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 203.129512][ T5841] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 203.129531][ T5841] usb 4-1: config 1 has no interface number 0 [ 203.129591][ T5841] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 203.129614][ T5841] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 203.129652][ T5841] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 203.129673][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.238601][ T5841] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 203.537689][ T5841] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 203.549390][ T7945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.982187][ T981] usb 4-1: USB disconnect, device number 8 [ 203.983729][ T981] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 204.140535][ T7957] netlink: 156 bytes leftover after parsing attributes in process `syz.2.707'. [ 204.164532][ T7957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.707'. [ 204.694727][ T7966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.081263][ T7971] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.715'. [ 205.558576][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.5.720'. [ 208.255143][ T8043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.712074][ T5841] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 209.888073][ T5841] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 209.888102][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.888118][ T5841] usb 2-1: Product: syz [ 209.888130][ T5841] usb 2-1: Manufacturer: syz [ 209.888142][ T5841] usb 2-1: SerialNumber: syz [ 209.933980][ T5841] usb 2-1: config 0 descriptor?? [ 209.991953][ T5940] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 210.149598][ T5978] usb 2-1: USB disconnect, device number 13 [ 210.162049][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 210.178330][ T5940] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 210.178355][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.178372][ T5940] usb 4-1: Product: syz [ 210.178384][ T5940] usb 4-1: Manufacturer: syz [ 210.178396][ T5940] usb 4-1: SerialNumber: syz [ 210.228951][ T5940] usb 4-1: config 0 descriptor?? [ 210.263839][ T5940] gspca_main: se401-2.14.0 probing 047d:5003 [ 210.662104][ T5940] gspca_se401: Too many frame sizes [ 210.888569][ T5940] usb 4-1: USB disconnect, device number 9 [ 213.233970][ T8125] netlink: 'syz.5.777': attribute type 1 has an invalid length. [ 213.430794][ T8128] bond1: (slave gretap1): making interface the new active one [ 213.431263][ T8128] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 213.464959][ T8131] loop2: detected capacity change from 0 to 7 [ 213.469257][ T8131] loop2: [POWERTEC] p1 p2 p3 [ 213.494160][ T8131] loop2: p2 start 4294967287 is beyond EOD, truncated [ 213.494175][ T8131] loop2: p3 start 1932423285 is beyond EOD, truncated [ 213.683499][ T8133] serio: Serial port ttyS3 [ 214.182193][ T5930] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 214.242024][ T1201] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 214.335453][ T5930] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.335481][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 214.335512][ T5930] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 214.335531][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.340988][ T5930] usb 3-1: config 0 descriptor?? [ 214.395410][ T1201] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.395432][ T1201] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.398111][ T1201] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.398130][ T1201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.398139][ T1201] usb 4-1: Product: syz [ 214.398145][ T1201] usb 4-1: Manufacturer: syz [ 214.398152][ T1201] usb 4-1: SerialNumber: syz [ 214.589579][ T5930] usbhid 3-1:0.0: can't add hid device: -71 [ 214.589761][ T5930] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 214.632797][ T5930] usb 3-1: USB disconnect, device number 12 [ 214.673354][ T1201] usb 4-1: 0:2 : does not exist [ 214.680765][ T1201] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 214.747213][ T1201] usb 4-1: USB disconnect, device number 10 [ 217.162693][ T8208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.809'. [ 217.179488][ T8208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.809'. [ 217.193386][ T3797] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.195389][ T3797] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.195793][ T1317] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.195827][ T1317] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.531977][ T5841] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 218.583291][ T5839] bridge0: port 3(syz_tun) entered disabled state [ 218.681925][ T5841] usb 4-1: Using ep0 maxpacket: 32 [ 218.684807][ T5841] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 218.684829][ T5841] usb 4-1: config 0 has no interface number 0 [ 218.684872][ T5841] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.684895][ T5841] usb 4-1: config 0 interface 85 has no altsetting 0 [ 218.688082][ T5841] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 218.688105][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.688122][ T5841] usb 4-1: Product: syz [ 218.688134][ T5841] usb 4-1: Manufacturer: syz [ 218.688146][ T5841] usb 4-1: SerialNumber: syz [ 218.697364][ T5839] syz_tun (unregistering): left allmulticast mode [ 218.697389][ T5839] syz_tun (unregistering): left promiscuous mode [ 218.697500][ T5839] bridge0: port 3(syz_tun) entered disabled state [ 218.785991][ T5841] usb 4-1: config 0 descriptor?? [ 219.243166][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.826'. [ 219.442469][ T5841] appletouch 4-1:0.85: Geyser mode initialized. [ 219.468790][ T5841] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input16 [ 219.645396][ T5978] usb 4-1: USB disconnect, device number 11 [ 219.924155][ T5978] appletouch 4-1:0.85: input: appletouch disconnected [ 220.923554][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.944532][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.958680][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.963436][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.964197][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 222.026262][ T8268] chnl_net:caif_netlink_parms(): no params data found [ 222.164342][ T8288] loop2: detected capacity change from 0 to 7 [ 222.168208][ T8288] Dev loop2: unable to read RDB block 7 [ 222.168255][ T8288] loop2: unable to read partition table [ 222.168478][ T8288] loop2: partition table beyond EOD, truncated [ 222.168492][ T8288] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 222.590853][ T8268] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.591070][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.591278][ T8268] bridge_slave_0: entered allmulticast mode [ 222.620417][ T8268] bridge_slave_0: entered promiscuous mode [ 222.642470][ T8268] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.643352][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.643517][ T8268] bridge_slave_1: entered allmulticast mode [ 222.648619][ T8268] bridge_slave_1: entered promiscuous mode [ 223.130272][ T5847] Bluetooth: hci3: command tx timeout [ 223.156738][ T8309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.848'. [ 223.239771][ T8268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.263490][ T8268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.465587][ T8315] loop6: detected capacity change from 0 to 7 [ 223.471648][ T8315] Dev loop6: unable to read RDB block 7 [ 223.471676][ T8315] loop6: AHDI p1 p2 p3 [ 223.471702][ T8315] loop6: partition table partially beyond EOD, truncated [ 223.472519][ T8315] loop6: p1 start 926365495 is beyond EOD, truncated [ 223.472538][ T8315] loop6: p2 size 116 extends beyond EOD, truncated [ 223.793745][ T8268] team0: Port device team_slave_0 added [ 223.797141][ T8268] team0: Port device team_slave_1 added [ 223.853380][ T8317] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 223.853405][ T8317] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 224.058042][ T8268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.058058][ T8268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.058078][ T8268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.086669][ T8268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.086683][ T8268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.086706][ T8268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.210136][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 224.211687][ T8332] netlink: 24 bytes leftover after parsing attributes in process `syz.3.857'. [ 224.523339][ T8268] hsr_slave_0: entered promiscuous mode [ 224.524623][ T8268] hsr_slave_1: entered promiscuous mode [ 224.525504][ T8268] debugfs: 'hsr0' already exists in 'hsr' [ 224.525526][ T8268] Cannot create hsr debugfs directory [ 224.811942][ T1201] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 224.985837][ T1201] usb 1-1: config 0 has an invalid interface number: 28 but max is 0 [ 224.985861][ T1201] usb 1-1: config 0 has no interface number 0 [ 224.985908][ T1201] usb 1-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.985931][ T1201] usb 1-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.985966][ T1201] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 224.985992][ T1201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.020969][ T1201] usb 1-1: config 0 descriptor?? [ 225.132301][ T5847] Bluetooth: hci3: command tx timeout [ 225.389931][ T8268] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 225.436188][ T1201] logitech-djreceiver 0003:046D:C534.000A: unknown main item tag 0x0 [ 225.436221][ T1201] logitech-djreceiver 0003:046D:C534.000A: unknown main item tag 0x0 [ 225.436245][ T1201] logitech-djreceiver 0003:046D:C534.000A: unknown main item tag 0x0 [ 225.436269][ T1201] logitech-djreceiver 0003:046D:C534.000A: unknown main item tag 0x0 [ 225.436981][ T8268] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 225.449735][ T1201] logitech-djreceiver 0003:046D:C534.000A: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.0-1/input28 [ 225.518020][ T8268] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 225.565185][ T8268] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 225.643129][ T8366] netlink: 'syz.2.871': attribute type 3 has an invalid length. [ 225.647987][ T5940] usb 1-1: USB disconnect, device number 14 [ 225.653762][ T8366] netlink: 'syz.2.871': attribute type 3 has an invalid length. [ 225.909844][ T8268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.983383][ T8268] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.013071][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.013326][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.049663][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.049789][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.882053][ T8268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.212400][ T5847] Bluetooth: hci3: command tx timeout [ 227.824270][ T8268] veth0_vlan: entered promiscuous mode [ 227.863381][ T8268] veth1_vlan: entered promiscuous mode [ 227.955359][ T8268] veth0_macvtap: entered promiscuous mode [ 227.991986][ T8268] veth1_macvtap: entered promiscuous mode [ 228.080350][ T8268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.106835][ T8416] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 228.154246][ T8268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.197535][ T3523] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.198776][ T3523] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.199176][ T3523] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.200323][ T3523] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.438534][ T8420] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 229.290950][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.290968][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.292126][ T5847] Bluetooth: hci3: command tx timeout [ 229.535791][ T3613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.535810][ T3613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.542894][ T5847] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 231.203722][ T5930] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 231.378372][ T5930] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 231.378399][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.499333][ T5930] usb 7-1: config 0 descriptor?? [ 232.422021][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 232.422038][ T37] audit: type=1326 audit(1756517564.679:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb315d4ebe9 code=0x7ffc0000 [ 232.422081][ T37] audit: type=1326 audit(1756517564.679:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb315d4ebe9 code=0x7ffc0000 [ 232.422120][ T37] audit: type=1326 audit(1756517564.679:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb315d4ebe9 code=0x7ffc0000 [ 232.422157][ T37] audit: type=1326 audit(1756517564.679:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb315d4ebe9 code=0x7ffc0000 [ 232.770215][ T37] audit: type=1326 audit(1756517565.029:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb315d4ebe9 code=0x7ffc0000 [ 232.771014][ T37] audit: type=1326 audit(1756517565.029:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb315d4ebe9 code=0x7ffc0000 [ 232.958033][ T5930] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 232.958068][ T5930] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 232.958405][ T5930] asix 7-1:0.0: probe with driver asix failed with error -71 [ 232.979792][ T5930] usb 7-1: USB disconnect, device number 2 [ 234.036758][ T8510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.391950][ T5930] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 234.554106][ T5930] usb 7-1: Using ep0 maxpacket: 8 [ 234.591252][ T5930] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 234.591278][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.591295][ T5930] usb 7-1: Product: syz [ 234.591307][ T5930] usb 7-1: Manufacturer: syz [ 234.591319][ T5930] usb 7-1: SerialNumber: syz [ 234.643894][ T5930] usb 7-1: config 0 descriptor?? [ 234.763118][ T8524] overlayfs: failed to decode file handle (len=4, type=248, flags=0, err=-22) [ 234.864083][ T5930] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 235.895335][ T5930] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 235.930275][ T5930] usb 7-1: USB disconnect, device number 3 [ 236.715072][ T8560] loop2: detected capacity change from 0 to 7 [ 236.716901][ T8560] loop2: p1 [ 236.716929][ T8560] loop2: partition table partially beyond EOD, truncated [ 236.717046][ T8560] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 237.232015][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 237.381945][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 237.384585][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.384612][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.384647][ T31] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 237.384667][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.442992][ T31] usb 7-1: config 0 descriptor?? [ 237.449154][ T31] hub 7-1:0.0: USB hub found [ 237.658376][ T8578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.663433][ T8578] team0: Failed to send options change via netlink (err -105) [ 237.663453][ T8578] team0: Port device bond1 added [ 237.729138][ T31] hub 7-1:0.0: 1 port detected [ 238.345362][ T31] hub 7-1:0.0: activate --> -90 [ 238.759598][ T10] usb 7-1: USB disconnect, device number 4 [ 238.760340][ T31] usb 7-1-port1: config error [ 239.861878][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.086297][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.417965][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 240.832679][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'. [ 245.291437][ T8704] process 'syz.0.996' launched './file0' with NULL argv: empty string added [ 245.414006][ T8706] input: syz1 as /devices/virtual/input/input17 [ 246.458194][ T8727] netlink: 'syz.6.1009': attribute type 2 has an invalid length. [ 246.458216][ T8727] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1009'. [ 246.459291][ T8727] nbd: must specify at least one socket [ 248.348638][ T8748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1018'. [ 248.663937][ T8755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.956405][ T8782] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1031'. [ 250.086028][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1031'. [ 250.462094][ T5917] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 250.631927][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 250.634408][ T5917] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 250.634434][ T5917] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 75, changing to 10 [ 250.634457][ T5917] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 25344, setting to 1024 [ 250.634480][ T5917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 250.637612][ T5917] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 250.637636][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.637653][ T5917] usb 3-1: Product: syz [ 250.637665][ T5917] usb 3-1: Manufacturer: syz [ 250.637677][ T5917] usb 3-1: SerialNumber: syz [ 250.670186][ T5917] usb 3-1: config 0 descriptor?? [ 250.881034][ T5917] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input18 [ 251.151623][ T981] usb 3-1: USB disconnect, device number 13 [ 251.151629][ C0] synaptics_usb 3-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 251.222567][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 251.318841][ T8811] loop2: detected capacity change from 0 to 7 [ 251.319510][ T8811] Dev loop2: unable to read RDB block 7 [ 251.319542][ T8811] loop2: unable to read partition table [ 251.319668][ T8811] loop2: partition table beyond EOD, truncated [ 251.319678][ T8811] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 251.371995][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 251.374512][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.374534][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.379798][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 251.379823][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.379841][ T31] usb 1-1: Product: syz [ 251.379854][ T31] usb 1-1: Manufacturer: syz [ 251.379866][ T31] usb 1-1: SerialNumber: syz [ 251.497188][ T5847] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 251.497214][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 251.497237][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 251.497249][ T5847] Workqueue: hci3 hci_rx_work [ 251.497285][ T5847] Call Trace: [ 251.497293][ T5847] [ 251.497301][ T5847] dump_stack_lvl+0x189/0x250 [ 251.497333][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.497333][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.497358][ T5847] ? __pfx__printk+0x10/0x10 [ 251.497381][ T5847] ? __rcu_read_unlock+0x84/0xe0 [ 251.497402][ T5847] ? kernfs_path_from_node+0x2c/0x280 [ 251.497420][ T5847] ? kernfs_path_from_node+0x243/0x280 [ 251.497436][ T5847] ? kernfs_path_from_node+0x2c/0x280 [ 251.497458][ T5847] sysfs_create_dir_ns+0x259/0x280 [ 251.497483][ T5847] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 251.497503][ T5847] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 251.497530][ T5847] ? rt_spin_unlock+0x65/0x80 [ 251.497555][ T5847] kobject_add_internal+0x5a5/0xb50 [ 251.497596][ T5847] kobject_add+0x155/0x220 [ 251.497628][ T5847] ? __pfx_kobject_add+0x10/0x10 [ 251.497661][ T5847] ? get_device_parent+0x370/0x3a0 [ 251.497691][ T5847] device_add+0x408/0xb50 [ 251.497719][ T5847] hci_conn_add_sysfs+0xd5/0x1e0 [ 251.497748][ T5847] le_conn_complete_evt+0xc3a/0x1220 [ 251.497785][ T5847] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 251.497808][ T5847] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 251.497830][ T5847] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.497857][ T5847] ? skb_pull_data+0xfb/0x200 [ 251.497882][ T5847] hci_le_conn_complete_evt+0x187/0x450 [ 251.497912][ T5847] hci_event_packet+0x78c/0x1200 [ 251.497935][ T5847] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 251.497961][ T5847] ? __pfx_hci_event_packet+0x10/0x10 [ 251.497979][ T5847] ? __pfx_migrate_enable+0x10/0x10 [ 251.498009][ T5847] ? hci_send_to_monitor+0xe2/0x570 [ 251.498035][ T5847] hci_rx_work+0x46a/0xe80 [ 251.498063][ T5847] ? process_scheduled_works+0x9ef/0x17b0 [ 251.498087][ T5847] process_scheduled_works+0xade/0x17b0 [ 251.498141][ T5847] ? __pfx_process_scheduled_works+0x10/0x10 [ 251.498182][ T5847] worker_thread+0x8a0/0xda0 [ 251.498234][ T5847] kthread+0x711/0x8a0 [ 251.498262][ T5847] ? __pfx_worker_thread+0x10/0x10 [ 251.498283][ T5847] ? __pfx_kthread+0x10/0x10 [ 251.498313][ T5847] ? __pfx_kthread+0x10/0x10 [ 251.498338][ T5847] ret_from_fork+0x3fc/0x770 [ 251.498364][ T5847] ? __pfx_ret_from_fork+0x10/0x10 [ 251.498392][ T5847] ? __switch_to_asm+0x39/0x70 [ 251.498409][ T5847] ? __switch_to_asm+0x33/0x70 [ 251.498424][ T5847] ? __pfx_kthread+0x10/0x10 [ 251.498449][ T5847] ret_from_fork_asm+0x1a/0x30 [ 251.498484][ T5847] [ 251.499655][ T5847] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 251.499696][ T5847] Bluetooth: hci3: failed to register connection device [ 251.573181][ T5847] ================================================================== [ 251.573201][ T5847] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0xd5/0x140 [ 251.573237][ T5847] Read of size 8 at addr ffff888036fd5200 by task kworker/u9:3/5847 [ 251.573252][ T5847] [ 251.573263][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 251.573283][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 251.573296][ T5847] Workqueue: hci3 hci_rx_work [ 251.573314][ T5847] Call Trace: [ 251.573320][ T5847] [ 251.573328][ T5847] dump_stack_lvl+0x189/0x250 [ 251.573352][ T5847] ? __kasan_check_byte+0x12/0x40 [ 251.573374][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.573396][ T5847] ? lock_release+0x4b/0x3e0 [ 251.573420][ T5847] ? __virt_addr_valid+0x4a5/0x5c0 [ 251.573444][ T5847] print_report+0xca/0x240 [ 251.573465][ T5847] ? l2cap_sock_ready_cb+0xd5/0x140 [ 251.573488][ T5847] kasan_report+0x118/0x150 [ 251.573511][ T5847] ? l2cap_sock_ready_cb+0xd5/0x140 [ 251.573538][ T5847] l2cap_sock_ready_cb+0xd5/0x140 [ 251.573574][ T5847] l2cap_le_start+0xb0d/0x13b0 [ 251.573597][ T5847] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 251.573620][ T5847] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.573643][ T5847] ? __pfx_l2cap_le_start+0x10/0x10 [ 251.573662][ T5847] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 251.573684][ T5847] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 251.573706][ T5847] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.573730][ T5847] ? mutex_lock_nested+0x154/0x1d0 [ 251.573747][ T5847] ? l2cap_connect_cfm+0x679/0x1040 [ 251.573771][ T5847] l2cap_connect_cfm+0x6be/0x1040 [ 251.573797][ T5847] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 251.573820][ T5847] ? mutex_lock_nested+0x154/0x1d0 [ 251.573837][ T5847] ? hci_connect_cfm+0x2c/0x140 [ 251.573856][ T5847] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 251.573878][ T5847] hci_connect_cfm+0x95/0x140 [ 251.573898][ T5847] le_conn_complete_evt+0xcd3/0x1220 [ 251.573925][ T5847] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 251.573947][ T5847] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 251.573968][ T5847] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.573991][ T5847] ? skb_pull_data+0xfb/0x200 [ 251.574011][ T5847] hci_le_conn_complete_evt+0x187/0x450 [ 251.574035][ T5847] hci_event_packet+0x78c/0x1200 [ 251.574053][ T5847] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 251.574074][ T5847] ? __pfx_hci_event_packet+0x10/0x10 [ 251.574092][ T5847] ? __pfx_migrate_enable+0x10/0x10 [ 251.574116][ T5847] ? hci_send_to_monitor+0xe2/0x570 [ 251.574139][ T5847] hci_rx_work+0x46a/0xe80 [ 251.574160][ T5847] ? process_scheduled_works+0x9ef/0x17b0 [ 251.574182][ T5847] process_scheduled_works+0xade/0x17b0 [ 251.574216][ T5847] ? __pfx_process_scheduled_works+0x10/0x10 [ 251.574244][ T5847] worker_thread+0x8a0/0xda0 [ 251.574276][ T5847] kthread+0x711/0x8a0 [ 251.574301][ T5847] ? __pfx_worker_thread+0x10/0x10 [ 251.574321][ T5847] ? __pfx_kthread+0x10/0x10 [ 251.574346][ T5847] ? __pfx_kthread+0x10/0x10 [ 251.574370][ T5847] ret_from_fork+0x3fc/0x770 [ 251.574392][ T5847] ? __pfx_ret_from_fork+0x10/0x10 [ 251.574416][ T5847] ? __switch_to_asm+0x39/0x70 [ 251.574432][ T5847] ? __switch_to_asm+0x33/0x70 [ 251.574448][ T5847] ? __pfx_kthread+0x10/0x10 [ 251.574470][ T5847] ret_from_fork_asm+0x1a/0x30 [ 251.574493][ T5847] [ 251.574499][ T5847] [ 251.574503][ T5847] Allocated by task 8813: [ 251.574518][ T5847] kasan_save_track+0x3e/0x80 [ 251.574537][ T5847] __kasan_kmalloc+0x93/0xb0 [ 251.574560][ T5847] __kmalloc_noprof+0x1ef/0x430 [ 251.574581][ T5847] sk_prot_alloc+0xe7/0x220 [ 251.574599][ T5847] sk_alloc+0x3a/0x370 [ 251.574616][ T5847] bt_sock_alloc+0x3b/0x310 [ 251.574630][ T5847] l2cap_sock_create+0x147/0x300 [ 251.574650][ T5847] bt_sock_create+0x163/0x240 [ 251.574666][ T5847] __sock_create+0x4b3/0x9f0 [ 251.574680][ T5847] __sys_socket+0xd7/0x1b0 [ 251.574694][ T5847] __x64_sys_socket+0x7a/0x90 [ 251.574710][ T5847] do_syscall_64+0xfa/0x3b0 [ 251.574728][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.574742][ T5847] [ 251.574746][ T5847] Freed by task 8813: [ 251.574754][ T5847] kasan_save_track+0x3e/0x80 [ 251.574769][ T5847] kasan_save_free_info+0x46/0x50 [ 251.574784][ T5847] __kasan_slab_free+0x5b/0x80 [ 251.574801][ T5847] kfree+0x195/0x550 [ 251.574817][ T5847] __sk_destruct+0x4e4/0x670 [ 251.574835][ T5847] l2cap_sock_release+0x17d/0x200 [ 251.574854][ T5847] sock_close+0xc0/0x240 [ 251.574868][ T5847] __fput+0x45b/0xa80 [ 251.574881][ T5847] task_work_run+0x1d4/0x260 [ 251.574895][ T5847] exit_to_user_mode_loop+0xec/0x110 [ 251.574914][ T5847] do_syscall_64+0x2bd/0x3b0 [ 251.574933][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.574948][ T5847] [ 251.574952][ T5847] The buggy address belongs to the object at ffff888036fd5000 [ 251.574952][ T5847] which belongs to the cache kmalloc-2k of size 2048 [ 251.574966][ T5847] The buggy address is located 512 bytes inside of [ 251.574966][ T5847] freed 2048-byte region [ffff888036fd5000, ffff888036fd5800) [ 251.574982][ T5847] [ 251.574986][ T5847] The buggy address belongs to the physical page: [ 251.575006][ T5847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36fd0 [ 251.575025][ T5847] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 251.575039][ T5847] anon flags: 0x80000000000040(head|node=0|zone=1) [ 251.575058][ T5847] page_type: f5(slab) [ 251.575073][ T5847] raw: 0080000000000040 ffff888019842000 0000000000000000 dead000000000001 [ 251.575088][ T5847] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 251.575103][ T5847] head: 0080000000000040 ffff888019842000 0000000000000000 dead000000000001 [ 251.575117][ T5847] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 251.575133][ T5847] head: 0080000000000003 ffffea0000dbf401 00000000ffffffff 00000000ffffffff [ 251.575147][ T5847] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 251.575157][ T5847] page dumped because: kasan: bad access detected [ 251.575166][ T5847] page_owner tracks the page as allocated [ 251.575172][ T5847] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5198, tgid 5198 (klogd), ts 22737950315, free_ts 0 [ 251.575206][ T5847] post_alloc_hook+0x240/0x2a0 [ 251.575227][ T5847] get_page_from_freelist+0x2119/0x21b0 [ 251.575243][ T5847] __alloc_frozen_pages_noprof+0x181/0x370 [ 251.575258][ T5847] alloc_pages_mpol+0xd1/0x380 [ 251.575277][ T5847] allocate_slab+0x8a/0x370 [ 251.575292][ T5847] ___slab_alloc+0x8d1/0xdd0 [ 251.575312][ T5847] __kmalloc_cache_noprof+0xe6/0x320 [ 251.575331][ T5847] syslog_print+0xd2/0x590 [ 251.575351][ T5847] do_syslog+0x544/0x760 [ 251.575371][ T5847] __x64_sys_syslog+0x7c/0x90 [ 251.575391][ T5847] do_syscall_64+0xfa/0x3b0 [ 251.575411][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.575426][ T5847] page_owner free stack trace missing [ 251.575432][ T5847] [ 251.575437][ T5847] Memory state around the buggy address: [ 251.575446][ T5847] ffff888036fd5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.575458][ T5847] ffff888036fd5180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.575470][ T5847] >ffff888036fd5200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.575479][ T5847] ^ [ 251.575487][ T5847] ffff888036fd5280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.575498][ T5847] ffff888036fd5300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.575507][ T5847] ================================================================== [ 251.579013][ T5847] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 251.579035][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 251.579060][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 251.579074][ T5847] Workqueue: hci3 hci_rx_work [ 251.579094][ T5847] Call Trace: [ 251.579102][ T5847] [ 251.579114][ T5847] dump_stack_lvl+0x99/0x250 [ 251.579144][ T5847] ? __asan_memcpy+0x40/0x70 [ 251.579164][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.579189][ T5847] ? __pfx__printk+0x10/0x10 [ 251.579215][ T5847] vpanic+0x281/0x750 [ 251.579240][ T5847] ? preempt_schedule+0xae/0xc0 [ 251.579265][ T5847] ? __pfx_vpanic+0x10/0x10 [ 251.579287][ T5847] ? preempt_schedule_common+0x83/0xd0 [ 251.579307][ T5847] ? preempt_schedule+0xae/0xc0 [ 251.579328][ T5847] ? __pfx_preempt_schedule+0x10/0x10 [ 251.579354][ T5847] panic+0xb9/0xc0 [ 251.579379][ T5847] ? __pfx_panic+0x10/0x10 [ 251.579408][ T5847] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 251.579436][ T5847] ? l2cap_sock_ready_cb+0xd5/0x140 [ 251.579465][ T5847] check_panic_on_warn+0x89/0xb0 [ 251.579483][ T5847] ? l2cap_sock_ready_cb+0xd5/0x140 [ 251.579512][ T5847] end_report+0x78/0x160 [ 251.579536][ T5847] kasan_report+0x129/0x150 [ 251.579570][ T5847] ? l2cap_sock_ready_cb+0xd5/0x140 [ 251.579603][ T5847] l2cap_sock_ready_cb+0xd5/0x140 [ 251.579633][ T5847] l2cap_le_start+0xb0d/0x13b0 [ 251.579656][ T5847] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 251.579679][ T5847] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.579701][ T5847] ? __pfx_l2cap_le_start+0x10/0x10 [ 251.579722][ T5847] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 251.579746][ T5847] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 251.579772][ T5847] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.579799][ T5847] ? mutex_lock_nested+0x154/0x1d0 [ 251.579816][ T5847] ? l2cap_connect_cfm+0x679/0x1040 [ 251.579839][ T5847] l2cap_connect_cfm+0x6be/0x1040 [ 251.579865][ T5847] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 251.579886][ T5847] ? mutex_lock_nested+0x154/0x1d0 [ 251.579902][ T5847] ? hci_connect_cfm+0x2c/0x140 [ 251.579920][ T5847] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 251.579941][ T5847] hci_connect_cfm+0x95/0x140 [ 251.579960][ T5847] le_conn_complete_evt+0xcd3/0x1220 [ 251.579986][ T5847] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 251.580007][ T5847] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 251.580030][ T5847] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.580053][ T5847] ? skb_pull_data+0xfb/0x200 [ 251.580073][ T5847] hci_le_conn_complete_evt+0x187/0x450 [ 251.580097][ T5847] hci_event_packet+0x78c/0x1200 [ 251.580116][ T5847] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 251.580136][ T5847] ? __pfx_hci_event_packet+0x10/0x10 [ 251.580153][ T5847] ? __pfx_migrate_enable+0x10/0x10 [ 251.580178][ T5847] ? hci_send_to_monitor+0xe2/0x570 [ 251.580201][ T5847] hci_rx_work+0x46a/0xe80 [ 251.580222][ T5847] ? process_scheduled_works+0x9ef/0x17b0 [ 251.580244][ T5847] process_scheduled_works+0xade/0x17b0 [ 251.580278][ T5847] ? __pfx_process_scheduled_works+0x10/0x10 [ 251.580304][ T5847] worker_thread+0x8a0/0xda0 [ 251.580336][ T5847] kthread+0x711/0x8a0 [ 251.580360][ T5847] ? __pfx_worker_thread+0x10/0x10 [ 251.580380][ T5847] ? __pfx_kthread+0x10/0x10 [ 251.580405][ T5847] ? __pfx_kthread+0x10/0x10 [ 251.580428][ T5847] ret_from_fork+0x3fc/0x770 [ 251.580450][ T5847] ? __pfx_ret_from_fork+0x10/0x10 [ 251.580473][ T5847] ? __switch_to_asm+0x39/0x70 [ 251.580490][ T5847] ? __switch_to_asm+0x33/0x70 [ 251.580505][ T5847] ? __pfx_kthread+0x10/0x10 [ 251.580528][ T5847] ret_from_fork_asm+0x1a/0x30 [ 251.580560][ T5847] [ 251.580816][ T5847] Kernel Offset: disabled