last executing test programs: 4m6.232970923s ago: executing program 4 (id=356): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) 4m6.004715842s ago: executing program 4 (id=359): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0) 4m5.713997131s ago: executing program 4 (id=362): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000100)=[{0x20, 0x0, 0xee, 0x69df}, {0x28, 0x0, 0x7c, 0x6ebf}, {0x6}]}, 0x10) sendmmsg$unix(r3, &(0x7f00000000c0), 0x3f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) 4m4.517423076s ago: executing program 4 (id=363): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x9, 0x200, 0x4, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x40, 0x5, 0x0, 0x5, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) brk(0x55555ede6001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = getpgrp(r3) syz_pidfd_open(r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1001402, 0x0) 4m2.477073639s ago: executing program 4 (id=365): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x110d, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESOCT=r2], 0x125) io_uring_setup(0x7945, &(0x7f0000000340)={0x0, 0x50000001, 0x0, 0x3, 0x0, 0x0, r2}) 4m2.207549957s ago: executing program 1 (id=369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c300"/20, @ANYRES32=r2, @ANYBLOB="0000d400000000000a000100003b"], 0x2c}}, 0x0) 4m1.932883746s ago: executing program 4 (id=370): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x48000) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x1ff) 4m1.695154086s ago: executing program 32 (id=370): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x48000) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x1ff) 4m1.677350766s ago: executing program 1 (id=372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) 4m1.396798215s ago: executing program 1 (id=374): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4210, r0, 0x0, 0x0) 4m0.639335991s ago: executing program 1 (id=376): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x9, 0x200, 0x4, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x40, 0x5, 0x0, 0x5, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) brk(0x55555ede6001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = getpgrp(r3) syz_pidfd_open(r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1001402, 0x0) 3m58.930227995s ago: executing program 1 (id=379): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x2, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24044004}, 0x810) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04002420"], 0x7) r8 = socket$l2tp6(0xa, 0x2, 0x73) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000000c0), 0x4) ioctl$sock_ifreq(r8, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000000100)=0x6, 0x0, 0x4) 3m57.936460571s ago: executing program 2 (id=381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c300"/20, @ANYRES32=r2, @ANYBLOB="0000d400000000000a000100003b"], 0x2c}}, 0x0) 3m57.70085131s ago: executing program 2 (id=383): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x68}}, 0x4000010) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) setrlimit(0x3, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r5 = syz_open_pts(r4, 0x141601) fcntl$setstatus(r5, 0x4, 0x102800) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) dup3(r5, r4, 0x0) unshare(0x2c020400) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) 3m56.355178275s ago: executing program 2 (id=385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sync_file_range(r0, 0x7, 0xfffffffffffffff8, 0x3) 3m56.354905345s ago: executing program 1 (id=386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004"], 0xe8}}, 0x0) 3m55.526794962s ago: executing program 33 (id=386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004"], 0xe8}}, 0x0) 3m55.495363742s ago: executing program 2 (id=389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x9, 0x200, 0x4, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x40, 0x5, 0x0, 0x5, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) brk(0x55555ede6001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = getpgrp(r3) syz_pidfd_open(r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1001402, 0x0) 3m54.214758786s ago: executing program 2 (id=392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c300"/20, @ANYRES32=r2, @ANYBLOB="0000d400000000000a000100003b"], 0x2c}}, 0x0) 3m46.404861376s ago: executing program 2 (id=399): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@private1}, {@in6=@loopback, 0x1, 0x32}, @in=@loopback, {}, {0x0, 0x2}, {0x0, 0x0, 0x6}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 3m45.437613355s ago: executing program 34 (id=399): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@private1}, {@in6=@loopback, 0x1, 0x32}, @in=@loopback, {}, {0x0, 0x2}, {0x0, 0x0, 0x6}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 7.579288638s ago: executing program 7 (id=1194): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000100)=[{0x20, 0x0, 0xee, 0x69df}, {0x28, 0x0, 0x7c, 0x6ebf}, {0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000063110700000000008510000002000000850000000800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmmsg$unix(r3, &(0x7f00000000c0), 0x3f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) 6.449281784s ago: executing program 7 (id=1198): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x24000000) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, 0x0, 0x12) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) 6.344844613s ago: executing program 6 (id=1199): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$nfc_llcp(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x20000028) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206050000000000000000000704000014000780080008400000009805001400200000000500010006000100050005000a00000005000400000000000900020071797a31000000"], 0x60}}, 0x20000000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2402, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718"], 0x398}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 6.334921274s ago: executing program 3 (id=1200): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 6.148788313s ago: executing program 3 (id=1202): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.045527343s ago: executing program 6 (id=1203): open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)=ANY=[]) 4.971199708s ago: executing program 7 (id=1205): socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = semget(0x2, 0x0, 0x22) semctl$SETVAL(r1, 0x2, 0x10, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) io_setup(0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)="17000000010001000003be8c5ee17688a20032080303ca2bcf01ee2a593b9a00ecff3f0000000300000a0000000098fc5ad9485bbb69fffffffffffb0000dba67e06000000e28900000200df018000000000d50607bd3f003c1e4b98", 0x5c) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0xfce1) 4.969748838s ago: executing program 6 (id=1207): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r1 = fcntl$dupfd(r0, 0x406, r0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x3, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374", 0x0, 0x0, 0x30, 0x0, 0x0}) 3.707084044s ago: executing program 6 (id=1211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x17) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 3.312886282s ago: executing program 0 (id=1215): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061107e000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.238888412s ago: executing program 0 (id=1216): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.157092462s ago: executing program 0 (id=1217): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x2, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24044004}, 0x810) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04002420"], 0x7) r8 = socket$l2tp6(0xa, 0x2, 0x73) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000000c0), 0x4) ioctl$sock_ifreq(r8, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000000100)=0x6, 0x0, 0x4) 2.696747439s ago: executing program 6 (id=1218): open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)=ANY=[]) 1.987957657s ago: executing program 0 (id=1219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 1.961091907s ago: executing program 5 (id=1220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) syz_clone(0x10208000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="11ce01004002"}) close(0x3) 1.912813767s ago: executing program 7 (id=1222): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffe}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.827964957s ago: executing program 0 (id=1223): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64], 0x10) 1.827196676s ago: executing program 6 (id=1224): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000653000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000, 0x1}) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9b47d21c343ece0}, {@in=@local, 0x1, 0x33}, @in=@dev, {0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfff, 0x0, 0x7}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'blake2s-128-arm\x00'}}}]}, 0x138}}, 0x20008040) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) 1.737993126s ago: executing program 0 (id=1225): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0xa000) close(0x4) read(0xffffffffffffffff, &(0x7f0000002180)=""/129, 0x81) 1.726557986s ago: executing program 3 (id=1226): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$cgroup_int(r0, 0x0, 0x0) 1.624809876s ago: executing program 5 (id=1227): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) close(r1) 1.624557116s ago: executing program 3 (id=1228): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x6, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.582717645s ago: executing program 3 (id=1229): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110d, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESOCT=r3], 0x125) io_uring_setup(0x7945, &(0x7f0000000340)={0x0, 0x50000001, 0x0, 0x3, 0x0, 0x0, r3}) 1.540769226s ago: executing program 5 (id=1230): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cpu.idle\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000400)=0x80000000, 0x12) 514.079601ms ago: executing program 3 (id=1231): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001402) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="57be3fb494b3"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c9801288463ff0f46002829"], 0xffdd) 468.692242ms ago: executing program 5 (id=1232): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r1, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r3, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000280)=r3, 0x4) 342.986391ms ago: executing program 5 (id=1233): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c85000000a800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x50, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) 288.713461ms ago: executing program 7 (id=1234): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='N-N,,'], 0x6a) 104.75305ms ago: executing program 5 (id=1235): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) 0s ago: executing program 7 (id=1236): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r1 = fcntl$dupfd(r0, 0x406, r0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x3, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374", 0x0, 0x0, 0x30, 0x0, 0x0}) kernel console output (not intermixed with test programs): wlan1: link becomes ready [ 67.940106][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.940623][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.941101][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.941578][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.970285][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.044566][ T4166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.054718][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.066574][ T4166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.075834][ T4166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.084858][ T4166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.101976][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.117467][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 68.853423][ T4250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 68.976664][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.999021][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.069001][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.099082][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.117832][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.149808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.158011][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 69.172227][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 69.234443][ T4217] Bluetooth: hci4: command 0x0419 tx timeout [ 69.262220][ T4217] Bluetooth: hci3: command 0x0419 tx timeout [ 69.291179][ T4217] Bluetooth: hci0: command 0x0419 tx timeout [ 69.381921][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.391497][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.400558][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 71.158738][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.165369][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.313583][ T4217] Bluetooth: hci4: command 0x0405 tx timeout [ 71.396133][ T4252] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.675017][ T4252] usb 1-1: Using ep0 maxpacket: 16 [ 71.702912][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 71.712913][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 71.732903][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 71.748764][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 71.759708][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 71.769860][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 72.153124][ T4252] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 72.162473][ T4252] usb 1-1: config 0 has no interface number 0 [ 72.169082][ T4252] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 72.198075][ T4252] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 72.209430][ T4252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.232413][ T4252] usb 1-1: config 0 descriptor?? [ 72.253921][ T4288] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 72.563608][ T4252] usb 1-1: string descriptor 0 read error: -71 [ 72.578777][ T4252] usb 1-1: invalid MIDI in EP 0 [ 72.757606][ T4252] snd-usb-audio: probe of 1-1:0.2 failed with error -22 [ 72.810501][ T4252] usb 1-1: USB disconnect, device number 2 [ 72.853285][ T4312] udevd[4312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.012977][ T4212] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.413205][ T4212] usb 3-1: config index 0 descriptor too short (expected 146, got 18) [ 73.583168][ T4212] usb 3-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 73.600695][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.609235][ T4214] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 73.714055][ T4212] usb 3-1: Product: syz [ 73.732585][ T4212] usb 3-1: Manufacturer: syz [ 73.845791][ T4212] usb 3-1: SerialNumber: syz [ 74.066002][ T4212] usb 3-1: config 0 descriptor?? [ 74.093823][ T4214] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 74.194871][ T4214] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 74.382641][ T4214] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 74.460262][ T4280] ODEBUG: Out of memory. ODEBUG disabled [ 74.501290][ T4325] netlink: 80 bytes leftover after parsing attributes in process `syz.4.24'. [ 74.523364][ T4214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.624648][ T4315] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 74.723088][ T4212] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 74.751163][ T4212] asix: probe of 3-1:0.0 failed with error -71 [ 74.798900][ T4212] usb 3-1: USB disconnect, device number 2 [ 77.077554][ T4346] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.267096][ T4211] usb 1-1: USB disconnect, device number 3 [ 78.293032][ T4296] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.543073][ T4296] usb 3-1: Using ep0 maxpacket: 16 [ 78.566256][ T4280] Set syz1 is full, maxelem 65536 reached [ 78.663339][ T4296] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 78.663388][ T4296] usb 3-1: config 0 has no interface number 0 [ 78.663422][ T4296] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 78.663460][ T4296] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 78.663485][ T4296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.676474][ T4296] usb 3-1: config 0 descriptor?? [ 78.693205][ T4360] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.953037][ T4296] usb 3-1: string descriptor 0 read error: -71 [ 78.962601][ T4296] usb 3-1: invalid MIDI in EP 0 [ 79.023496][ T4296] snd-usb-audio: probe of 3-1:0.2 failed with error -22 [ 79.039704][ T4296] usb 3-1: USB disconnect, device number 3 [ 79.095942][ T4374] No such timeout policy "syz0" [ 79.324306][ T4333] udevd[4333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.983125][ T4214] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 81.583409][ T4214] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 81.631366][ T21] cfg80211: failed to load regulatory.db [ 81.714383][ T4214] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 82.185154][ T4214] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 82.212784][ T4214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.294519][ T4392] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 82.453069][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.823073][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.834547][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.848013][ T21] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 82.857736][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.882103][ T21] usb 1-1: config 0 descriptor?? [ 82.893692][ T4214] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.173086][ T4214] usb 5-1: Using ep0 maxpacket: 16 [ 83.243893][ T4170] usb 3-1: USB disconnect, device number 4 [ 83.313633][ T4214] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 18 [ 83.328562][ T4214] usb 5-1: config 0 has no interface number 0 [ 83.341065][ T4214] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 83.353878][ T4214] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=3f.88 [ 83.363642][ T4214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.374847][ T4214] usb 5-1: config 0 descriptor?? [ 83.377688][ T21] hid-rmi 0003:06CB:81A7.0001: item fetching failed at offset 3/5 [ 83.391952][ T21] hid-rmi 0003:06CB:81A7.0001: parse failed [ 83.398477][ T21] hid-rmi: probe of 0003:06CB:81A7.0001 failed with error -22 [ 83.403366][ T4424] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 83.680359][ T4211] usb 1-1: USB disconnect, device number 4 [ 83.723161][ T4214] usb 5-1: string descriptor 0 read error: -71 [ 83.830924][ T4214] usb 5-1: invalid MIDI in EP 0 [ 84.531036][ T4214] snd-usb-audio: probe of 5-1:0.2 failed with error -22 [ 84.541397][ T4214] usb 5-1: USB disconnect, device number 2 [ 86.547733][ T4333] udevd[4333]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.230858][ T4216] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 87.603247][ T4216] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.717570][ T4216] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 87.781920][ T4216] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 88.379092][ T4475] mmap: syz.3.73 (4475) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 88.432004][ T4216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.493328][ T4460] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.699651][ T4216] usb 1-1: USB disconnect, device number 5 [ 93.283730][ T4543] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.493002][ T4170] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.793435][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.873549][ T4170] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.895362][ T4170] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 93.916218][ T4170] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.930615][ T4554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 93.932177][ T4170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.003211][ T4541] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 94.107854][ T4556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 94.140590][ T4556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.163078][ T21] usb 2-1: config index 0 descriptor too short (expected 146, got 18) [ 94.173636][ T4556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.184013][ T4556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.191876][ T4556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.302713][ T4557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.104'. [ 94.333031][ T21] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 94.342536][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.351624][ T21] usb 2-1: Product: syz [ 94.356523][ T21] usb 2-1: Manufacturer: syz [ 94.361514][ T21] usb 2-1: SerialNumber: syz [ 94.388286][ T21] usb 2-1: config 0 descriptor?? [ 95.331129][ T21] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 95.451622][ T21] asix: probe of 2-1:0.0 failed with error -71 [ 95.668797][ T21] usb 2-1: USB disconnect, device number 2 [ 96.781010][ T13] usb 4-1: USB disconnect, device number 2 [ 98.157716][ T4588] lo speed is unknown, defaulting to 1000 [ 98.164176][ T4588] lo speed is unknown, defaulting to 1000 [ 98.179493][ T4588] lo speed is unknown, defaulting to 1000 [ 98.205843][ T4588] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.243520][ T4588] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 98.568629][ T4588] lo speed is unknown, defaulting to 1000 [ 98.575224][ T4588] lo speed is unknown, defaulting to 1000 [ 98.581563][ T4588] lo speed is unknown, defaulting to 1000 [ 98.588071][ T4588] lo speed is unknown, defaulting to 1000 [ 98.594771][ T4588] lo speed is unknown, defaulting to 1000 [ 100.405330][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.493066][ T4214] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.917952][ T13] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 100.972502][ T13] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 100.984287][ T4214] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.000738][ T4214] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 101.013439][ T13] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 101.023460][ T4214] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.033245][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.041850][ T4214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.103372][ T4603] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 101.123547][ T4610] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 101.443673][ T4634] siw: device registration error -23 [ 102.592984][ T4211] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.813321][ T13] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 102.855504][ T13] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input5 [ 102.899206][ T13] usb 4-1: USB disconnect, device number 3 [ 102.905174][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 103.013298][ T4211] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 103.038119][ T4211] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 103.065115][ T4211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 103.083169][ T4211] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 103.102989][ T4211] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 103.254311][ T4211] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 103.273012][ T4211] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 103.320987][ T4211] usb 2-1: Product: syz [ 103.329095][ T4211] usb 2-1: Manufacturer: syz [ 103.513509][ T4211] cdc_wdm 2-1:1.0: skipping garbage [ 103.518748][ T4211] cdc_wdm 2-1:1.0: skipping garbage [ 103.533435][ T4296] usb 5-1: USB disconnect, device number 3 [ 103.550896][ T4211] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 103.569856][ T4211] cdc_wdm 2-1:1.0: Unknown control protocol [ 103.652186][ T4170] usb 2-1: USB disconnect, device number 3 [ 105.222435][ T4659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'. [ 105.264059][ T4659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.271484][ T4659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.287180][ T4659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.306362][ T4659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.557415][ T4170] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 105.589892][ T4170] Bluetooth: hci2: Injecting HCI hardware error event [ 105.618907][ T4176] Bluetooth: hci2: hardware error 0x00 [ 107.400915][ T4682] netlink: 104 bytes leftover after parsing attributes in process `syz.2.138'. [ 107.583027][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.243134][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.279368][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.322922][ T13] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 108.373159][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.398467][ T13] usb 5-1: config 0 descriptor?? [ 108.899891][ T13] hid-rmi 0003:06CB:81A7.0002: item fetching failed at offset 3/5 [ 108.918214][ T13] hid-rmi 0003:06CB:81A7.0002: parse failed [ 108.939953][ T13] hid-rmi: probe of 0003:06CB:81A7.0002 failed with error -22 [ 109.122706][ T1111] usb 5-1: USB disconnect, device number 4 [ 116.612352][ T4816] capability: warning: `syz.1.185' uses 32-bit capabilities (legacy support in use) [ 117.995330][ T4832] siw: device registration error -23 [ 118.934161][ T4843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.193'. [ 123.787375][ T4214] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 124.693115][ T4214] usb 1-1: Using ep0 maxpacket: 16 [ 124.823311][ T4214] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.844109][ T4214] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 125.903127][ T4214] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 125.922676][ T4214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.947037][ T4214] usb 1-1: Product: syz [ 125.959193][ T4214] usb 1-1: Manufacturer: syz [ 125.971424][ T4214] usb 1-1: SerialNumber: syz [ 125.993270][ T4214] usb 1-1: config 0 descriptor?? [ 126.302595][ T4904] libceph: resolve '0.0' (ret=-3): failed [ 126.350758][ T4170] usb 1-1: USB disconnect, device number 6 [ 127.748142][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 130.423441][ T4984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.240'. [ 132.403327][ T4170] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.597106][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.603585][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.696391][ T4170] usb 4-1: Using ep0 maxpacket: 16 [ 132.823224][ T4170] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.845842][ T4170] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 133.124527][ T4170] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 133.169920][ T4170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.189749][ T4170] usb 4-1: Product: syz [ 133.243514][ T4170] usb 4-1: Manufacturer: syz [ 133.248229][ T4170] usb 4-1: SerialNumber: syz [ 133.266192][ T4170] usb 4-1: config 0 descriptor?? [ 133.575425][ T4992] libceph: resolve '0.0' (ret=-3): failed [ 133.611313][ T7] usb 4-1: USB disconnect, device number 4 [ 136.444120][ T4296] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 136.783105][ T4296] usb 5-1: Using ep0 maxpacket: 16 [ 136.904281][ T4296] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.998224][ T4296] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.344188][ T4296] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 137.364500][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.378949][ T4296] usb 5-1: Product: syz [ 137.385926][ T4296] usb 5-1: Manufacturer: syz [ 137.439391][ T4296] usb 5-1: SerialNumber: syz [ 137.480039][ T4296] usb 5-1: config 0 descriptor?? [ 138.306216][ T5074] libceph: resolve '0.0' (ret=-3): failed [ 138.453189][ T13] usb 5-1: USB disconnect, device number 5 [ 142.835556][ T5148] loop6: detected capacity change from 0 to 524287999 [ 142.944528][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.955630][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.008734][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.019730][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.100850][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.111848][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.210861][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.221851][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.321035][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.332153][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.455591][ T5152] loop_set_status: loop6 ($) has still dirty pages (nrpages=1) [ 145.442829][ C0] sched: RT throttling activated [ 145.615611][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.626655][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.676818][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.687853][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.698792][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.709719][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.717910][ T5148] ldm_validate_partition_table(): Disk read failed. [ 145.726742][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.737703][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.900450][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.911404][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.925164][ T5148] Dev loop6: unable to read RDB block 0 [ 146.073026][ T4252] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.443395][ T4252] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.468862][ T4252] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 146.627218][ T5148] loop6: unable to read partition table [ 146.653098][ T5148] loop_reread_partitions: partition scan of loop6 ($) failed (rc=-5) [ 146.693024][ T4252] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.854049][ T4252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.881279][ T3546] ldm_validate_partition_table(): Disk read failed. [ 146.891404][ T3546] Dev loop6: unable to read RDB block 0 [ 146.894750][ T5184] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 147.082231][ T3546] loop6: unable to read partition table [ 147.121784][ T5202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.312'. [ 149.440204][ T4252] usb 3-1: USB disconnect, device number 5 [ 150.721128][ T5240] loop6: detected capacity change from 0 to 524287999 [ 150.744581][ T5231] device vlan2 entered promiscuous mode [ 150.750367][ T5231] device syz_tun entered promiscuous mode [ 150.826242][ C1] print_req_error: 24 callbacks suppressed [ 150.826259][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.843045][ C1] buffer_io_error: 24 callbacks suppressed [ 150.843061][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.376328][ T5244] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 151.392512][ T5244] smc: net device caif0 applied user defined pnetid SYZ2 [ 151.463282][ T5242] loop_set_status: loop6 ($) has still dirty pages (nrpages=1) [ 151.483153][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.494156][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.522865][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.533848][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.588401][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.599400][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.652094][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.663076][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.677123][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.688082][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.697182][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.708254][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.721275][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.732236][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.742940][ T5240] ldm_validate_partition_table(): Disk read failed. [ 151.742967][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 151.760959][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.771908][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.783283][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.794251][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.808770][ T5240] Dev loop6: unable to read RDB block 0 [ 151.817068][ T5240] loop6: unable to read partition table [ 151.825932][ T5240] loop_reread_partitions: partition scan of loop6 ($) failed (rc=-5) [ 151.839687][ T3546] ldm_validate_partition_table(): Disk read failed. [ 151.849804][ T3546] Dev loop6: unable to read RDB block 0 [ 151.858335][ T3546] loop6: unable to read partition table [ 153.153179][ T7] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 153.174614][ T7] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 153.367789][ T7] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 153.378282][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.413231][ T5249] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.211641][ T5283] siw: device registration error -23 [ 155.393152][ T7] usb 3-1: USB disconnect, device number 6 [ 155.779052][ T5301] loop6: detected capacity change from 0 to 524287999 [ 156.640276][ T4333] udevd[4333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.662974][ T5304] loop_set_status: loop6 ($) has still dirty pages (nrpages=1) [ 156.941479][ C1] print_req_error: 24 callbacks suppressed [ 156.941498][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.958300][ C1] buffer_io_error: 24 callbacks suppressed [ 156.958317][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.973131][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.984094][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 157.166123][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 157.177450][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 157.223214][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 157.234180][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 157.243584][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 157.254536][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 157.272363][ T5298] device vlan2 entered promiscuous mode [ 157.277947][ T5298] device syz_tun entered promiscuous mode [ 157.286226][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 157.297285][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 157.332381][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 157.343368][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 157.358502][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 157.369414][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 157.381722][ T5301] ldm_validate_partition_table(): Disk read failed. [ 157.414022][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 157.424973][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 157.434801][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 157.445831][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.898199][ T5301] Dev loop6: unable to read RDB block 0 [ 159.057687][ T5301] loop6: unable to read partition table [ 159.078343][ T5301] loop_reread_partitions: partition scan of loop6 ($) failed (rc=-5) [ 160.836567][ T1111] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 161.214112][ T1111] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.234948][ T1111] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 161.252466][ T1111] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.275516][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.313264][ T5339] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 163.373906][ T5377] ======================================================= [ 163.373906][ T5377] WARNING: The mand mount option has been deprecated and [ 163.373906][ T5377] and is ignored by this kernel. Remove the mand [ 163.373906][ T5377] option from the mount to silence this warning. [ 163.373906][ T5377] ======================================================= [ 163.774992][ T5375] siw: device registration error -23 [ 164.703444][ T4167] device syz_tun left promiscuous mode [ 165.395519][ T21] usb 4-1: USB disconnect, device number 5 [ 165.590657][ T4297] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.465054][ T5405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.375'. [ 166.671224][ T4297] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.724177][ T5409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.377'. [ 168.073257][ T1111] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 168.081790][ T1111] Bluetooth: hci4: Injecting HCI hardware error event [ 168.476377][ T4176] Bluetooth: hci4: hardware error 0x00 [ 168.935917][ T4211] Bluetooth: hci0: command 0x0409 tx timeout [ 168.944488][ T5414] Zero length message leads to an empty skb [ 169.056052][ T4297] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.771706][ T5410] lo speed is unknown, defaulting to 1000 [ 169.793494][ T4214] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 169.852727][ T4297] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.643008][ T4169] syz-executor (4169) used greatest stack depth: 18744 bytes left [ 170.754889][ T4214] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 170.821618][ T4214] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 171.064673][ T4214] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 171.231426][ T4214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.433631][ T5425] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 171.483818][ T1111] Bluetooth: hci0: command 0x041b tx timeout [ 171.583323][ T5443] tmpfs: Unknown parameter 'quota' [ 171.692978][ T5410] chnl_net:caif_netlink_parms(): no params data found [ 172.816445][ T5410] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.829828][ T5410] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.841703][ T5410] device bridge_slave_0 entered promiscuous mode [ 172.866009][ T5410] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.898556][ T5410] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.934310][ T5410] device bridge_slave_1 entered promiscuous mode [ 172.969338][ T1111] usb 4-1: USB disconnect, device number 6 [ 173.039571][ T5410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.069433][ T5462] lo speed is unknown, defaulting to 1000 [ 173.207847][ T5410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.554136][ T4296] Bluetooth: hci0: command 0x040f tx timeout [ 173.579049][ T5410] team0: Port device team_slave_0 added [ 173.606819][ T5410] team0: Port device team_slave_1 added [ 173.887130][ T5410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.906401][ T5410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.945342][ T5410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.794461][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 177.832472][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 177.843166][ T4183] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 177.856652][ T5410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.871771][ T5410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.904229][ T5410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.999718][ T5410] device hsr_slave_0 entered promiscuous mode [ 178.008167][ T5410] device hsr_slave_1 entered promiscuous mode [ 178.027416][ T5410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.037432][ T5410] Cannot create hsr debugfs directory [ 178.309358][ T5462] chnl_net:caif_netlink_parms(): no params data found [ 179.039115][ T4297] device hsr_slave_0 left promiscuous mode [ 179.081775][ T4297] device hsr_slave_1 left promiscuous mode [ 179.099051][ T4297] device bridge_slave_1 left promiscuous mode [ 179.111944][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.129743][ T4297] device bridge_slave_0 left promiscuous mode [ 179.142740][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.202277][ T4297] device veth1_macvtap left promiscuous mode [ 179.213365][ T4297] device veth0_macvtap left promiscuous mode [ 179.228820][ T4297] device veth1_vlan left promiscuous mode [ 179.238881][ T5503] ptrace attach of "./syz-executor exec"[4166] was attempted by "./syz-executor exec"[5503] [ 179.243744][ T4297] device veth0_vlan left promiscuous mode [ 179.847095][ T4297] team0 (unregistering): Port device team_slave_1 removed [ 179.873126][ T4217] Bluetooth: hci2: command 0x041b tx timeout [ 179.887701][ T4297] team0 (unregistering): Port device team_slave_0 removed [ 179.994513][ T4297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.041149][ T4297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.241491][ T4297] bond0 (unregistering): Released all slaves [ 180.499683][ T4296] lo speed is unknown, defaulting to 1000 [ 181.413697][ T5462] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.431125][ T5462] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.463189][ T5462] device bridge_slave_0 entered promiscuous mode [ 181.527864][ T5462] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.540116][ T5462] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.602655][ T5462] device bridge_slave_1 entered promiscuous mode [ 181.709351][ T5410] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 181.769798][ T5410] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 181.847853][ T5410] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 181.909285][ T5410] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 181.916182][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 181.953076][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 181.991390][ T5462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.040164][ T5462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.160152][ T5462] team0: Port device team_slave_0 added [ 182.182237][ T5462] team0: Port device team_slave_1 added [ 182.293263][ T13] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 182.322974][ T13] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 182.339647][ T13] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 182.349735][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.383394][ T5521] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 182.472368][ T5462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.493868][ T5462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.537071][ T5462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.576124][ T5462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.586721][ T5462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.631032][ T5462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.668249][ T5410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.810858][ T5410] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.856297][ T5462] device hsr_slave_0 entered promiscuous mode [ 182.889237][ T5462] device hsr_slave_1 entered promiscuous mode [ 182.904746][ T5462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.918220][ T5462] Cannot create hsr debugfs directory [ 182.931941][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.942483][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.022665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.055180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.077772][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.084890][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.139086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.168220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.198774][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.205898][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.233423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.255031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.318893][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.371876][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.391402][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.419596][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.446034][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.477480][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.505507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.523641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.584632][ T5410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.597632][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.611133][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.630269][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.766377][ T5538] chnl_net:caif_netlink_parms(): no params data found [ 184.033835][ T4217] Bluetooth: hci2: command 0x0419 tx timeout [ 184.073885][ T7] usb 4-1: USB disconnect, device number 7 [ 184.169247][ T5462] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 184.261070][ T5462] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 184.304097][ T5462] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 184.351210][ T5462] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 184.358487][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 184.555370][ T5538] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.564675][ T5538] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.597490][ T5538] device bridge_slave_0 entered promiscuous mode [ 184.638112][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.665009][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.676644][ T5538] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.688275][ T5538] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.707378][ T5538] device bridge_slave_1 entered promiscuous mode [ 184.917757][ T5410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.548829][ T5538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.617248][ T5538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.757403][ T5538] team0: Port device team_slave_0 added [ 185.804273][ T5462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.823025][ T5538] team0: Port device team_slave_1 added [ 185.873033][ T4214] Bluetooth: hci3: command 0x0406 tx timeout [ 185.879856][ T4214] Bluetooth: hci1: command 0x0406 tx timeout [ 185.929918][ T5538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.949374][ T5538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.983095][ T5538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.003681][ T5538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.010703][ T5538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.043005][ T5538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.132551][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.164962][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.177763][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.188967][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.357369][ T5462] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.401143][ T5462] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.411811][ T5462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.440181][ T4217] Bluetooth: hci4: command 0x041b tx timeout [ 186.922220][ T5538] device hsr_slave_0 entered promiscuous mode [ 187.278597][ T5538] device hsr_slave_1 entered promiscuous mode [ 187.298081][ T5538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.325217][ T5538] Cannot create hsr debugfs directory [ 187.474212][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.483520][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.491994][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.499128][ T4430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.508952][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.518545][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.527391][ T4430] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.534492][ T4430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.542558][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.551660][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.561069][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.570953][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.614050][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.724051][ T4170] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 187.729247][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.765822][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.801767][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.884492][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.898445][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.949336][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.966344][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.195355][ T5410] device veth0_vlan entered promiscuous mode [ 188.221290][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.244213][ T4170] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 188.258635][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.273155][ T4170] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 188.284807][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.292878][ T4170] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 188.304124][ T4170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.344865][ T5615] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 188.372714][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.384229][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.421465][ T5410] device veth1_vlan entered promiscuous mode [ 188.616590][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.654950][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.705977][ T5410] device veth0_macvtap entered promiscuous mode [ 188.747730][ T5462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.759706][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.771122][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.786570][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.818362][ T5410] device veth1_macvtap entered promiscuous mode [ 188.886580][ T5410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.013626][ T5410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.055469][ T5410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.090656][ T5410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.101730][ T5410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.112233][ T5410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.123961][ T5410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.133265][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.150994][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.277047][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.424977][ T5410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.468768][ T5410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.547181][ T5410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.560897][ T5410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.588442][ T5410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.603403][ T5410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.636638][ T5410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.816294][ T4297] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.936288][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 189.950203][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.980610][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.015969][ T5410] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.031899][ T5410] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.042083][ T5410] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.060796][ T5410] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.171478][ T4297] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.969349][ T4214] usb 1-1: USB disconnect, device number 7 [ 191.072246][ T4297] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.143774][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.151863][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.172698][ T4297] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.220028][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.229698][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.246328][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 191.258084][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.270381][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.287365][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.301239][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.322247][ T5462] device veth0_vlan entered promiscuous mode [ 191.353726][ T4253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.361783][ T4253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.381071][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 191.396319][ T5462] device veth1_vlan entered promiscuous mode [ 191.423014][ T4214] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 191.484423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.494846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 191.503476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.512513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.535915][ T4297] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.645289][ T5462] device veth0_macvtap entered promiscuous mode [ 191.672550][ T5462] device veth1_macvtap entered promiscuous mode [ 191.730696][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.741364][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.751836][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.762372][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.772269][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.782920][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.943447][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.069192][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.211877][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.549146][ T4212] Bluetooth: hci4: command 0x0419 tx timeout [ 192.598308][ T4297] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.625622][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.633365][ T4214] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 192.643316][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.645790][ T4214] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 192.672214][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.723328][ T4214] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 192.732477][ T4214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.760418][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.773313][ T5665] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 192.791702][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.876216][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.912123][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.944649][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.959033][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.037481][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.075566][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.098646][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.121816][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.178056][ T4297] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.207712][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.219610][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.249975][ T5462] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.725820][ T5462] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.109210][ T5462] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.143274][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.149638][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.204865][ T5462] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.246085][ T4297] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.237474][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.251217][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.311609][ T5699] usb 1-1: USB disconnect, device number 8 [ 195.339664][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.350340][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.360111][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 195.464168][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 195.477129][ T5538] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 195.561329][ T5538] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 195.664056][ T5538] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 195.736068][ T5538] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 196.796843][ T5538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.965841][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.986085][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.096724][ T5538] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.131938][ T5752] loop9: detected capacity change from 0 to 6 [ 197.230779][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.268493][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.383927][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.391033][ T4253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.417696][ T5762] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 197.541743][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.575156][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.886471][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.893654][ T4253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.994509][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.018509][ T5744] tipc: Trying to set illegal importance in message [ 198.343914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.384728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.452673][ T5762] smc: net device caif0 applied user defined pnetid SYZ2 [ 198.501886][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.521838][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.556666][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.705456][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.730501][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.753464][ T4213] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 198.768084][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.783692][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.800593][ T5538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.039199][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.600077][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.622343][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.910231][ T5790] ptrace attach of "./syz-executor exec"[5462] was attempted by "./syz-executor exec"[5790] [ 199.933929][ T4213] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 199.985697][ T4213] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 200.056589][ T4213] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.132887][ T4213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.186725][ T5769] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.660332][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.687304][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.762456][ T5538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.002861][ T4252] usb 1-1: USB disconnect, device number 9 [ 203.883369][ T5842] device bridge2 entered promiscuous mode [ 204.015827][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.036839][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.082920][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.108292][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.177805][ T5538] device veth0_vlan entered promiscuous mode [ 204.226286][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.234769][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.293117][ T5538] device veth1_vlan entered promiscuous mode [ 204.365936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 204.376020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 204.386329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.403436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.416372][ T5538] device veth0_macvtap entered promiscuous mode [ 204.431208][ T5538] device veth1_macvtap entered promiscuous mode [ 204.449834][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.460785][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.471206][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.482078][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.498846][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.545251][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.555667][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.566588][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.576896][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.587737][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.599646][ T5538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.626443][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 204.653792][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 204.682226][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.710000][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.804088][ T5859] device syzkaller0 entered promiscuous mode [ 204.814518][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.833986][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.855686][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.869695][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.879939][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.899944][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.921788][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.946670][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.994385][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.018332][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.036451][ T5538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.049136][ T4297] device hsr_slave_0 left promiscuous mode [ 205.057071][ T4297] device hsr_slave_1 left promiscuous mode [ 205.064789][ T4297] device bridge_slave_1 left promiscuous mode [ 205.069202][ T4252] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 205.071401][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.089505][ T4297] device bridge_slave_0 left promiscuous mode [ 205.096340][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.109782][ T4297] device hsr_slave_0 left promiscuous mode [ 205.116679][ T4297] device hsr_slave_1 left promiscuous mode [ 205.123799][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.132394][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.171115][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.194552][ T5872] tipc: Trying to set illegal importance in message [ 205.202185][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.240815][ T4297] device bridge_slave_1 left promiscuous mode [ 205.297907][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.371578][ T4297] device bridge_slave_0 left promiscuous mode [ 205.395267][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.473505][ T4252] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 205.497067][ T4252] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 205.527628][ T4252] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 205.545057][ T4252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.566373][ T4297] device veth1_macvtap left promiscuous mode [ 205.589559][ T4297] device veth0_macvtap left promiscuous mode [ 205.602058][ T4297] device veth1_vlan left promiscuous mode [ 205.608544][ T5867] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 205.629502][ T4297] device veth0_vlan left promiscuous mode [ 205.682722][ T4297] device veth1_macvtap left promiscuous mode [ 205.722539][ T4297] device veth0_macvtap left promiscuous mode [ 205.728713][ T4297] device veth1_vlan left promiscuous mode [ 205.737878][ T4297] device veth0_vlan left promiscuous mode [ 207.054961][ T26] audit: type=1326 audit(1737886226.715:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5878 comm="syz.6.465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f674fdf6d29 code=0x0 [ 207.142109][ T4297] team0 (unregistering): Port device team_slave_1 removed [ 207.161982][ T4297] team0 (unregistering): Port device team_slave_0 removed [ 207.177083][ T4297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.192719][ T4297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.237821][ T4297] smc: removing net device caif0 with user defined pnetid SYZ2 [ 207.314307][ T4297] bond0 (unregistering): Released all slaves [ 207.499615][ T4297] team0 (unregistering): Port device team_slave_1 removed [ 207.514721][ T4297] team0 (unregistering): Port device team_slave_0 removed [ 207.530143][ T4297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.544733][ T4297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.617787][ T4297] bond0 (unregistering): Released all slaves [ 207.671898][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 207.680705][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 207.800985][ T4296] usb 1-1: USB disconnect, device number 10 [ 207.840717][ T5538] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.862320][ T5538] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.871502][ T5538] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.880679][ T5538] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.833628][ T4253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.842328][ T4253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.931413][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 208.989167][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.536144][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.589881][ T4214] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 209.674243][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.746803][ T5931] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 210.162003][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 211.147825][ T5949] lo speed is unknown, defaulting to 1000 [ 211.153731][ T5949] lo speed is unknown, defaulting to 1000 [ 211.159886][ T5949] lo speed is unknown, defaulting to 1000 [ 211.173393][ T5949] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 211.191453][ T5949] lo speed is unknown, defaulting to 1000 [ 211.198361][ T5949] lo speed is unknown, defaulting to 1000 [ 211.206029][ T5949] lo speed is unknown, defaulting to 1000 [ 211.212683][ T5949] lo speed is unknown, defaulting to 1000 [ 211.219480][ T5949] lo speed is unknown, defaulting to 1000 [ 212.209503][ T4214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 212.240050][ T4214] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 212.294870][ T4214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 212.334010][ T4214] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 212.513190][ T23] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.538756][ T23] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 212.567584][ T23] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 212.632064][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.213010][ T23] usb 7-1: can't set config #27, error -71 [ 213.230422][ T23] usb 7-1: USB disconnect, device number 2 [ 213.363007][ T4214] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 213.376400][ T4214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.508307][ T4214] usb 4-1: Product: syz [ 213.512509][ T4214] usb 4-1: Manufacturer: syz [ 213.670504][ T5991] lo speed is unknown, defaulting to 1000 [ 214.271698][ T4214] usb 4-1: config 0 descriptor?? [ 214.363095][ T4214] usb 4-1: can't set config #0, error -71 [ 214.376516][ T4214] usb 4-1: USB disconnect, device number 8 [ 214.620378][ T6001] syz.5.484 uses obsolete (PF_INET,SOCK_PACKET) [ 214.732000][ T6004] siw: device registration error -23 [ 216.913213][ T5764] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 217.803638][ T5764] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 218.507803][ T5764] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 218.518257][ T6045] netlink: 28 bytes leftover after parsing attributes in process `syz.5.495'. [ 218.529044][ T26] audit: type=1326 audit(1737886238.185:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.7.489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c78b11d29 code=0x0 [ 218.549406][ T5764] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 218.582070][ T5764] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.633396][ T6031] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 218.832978][ T4296] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 218.859790][ T4296] Bluetooth: hci4: Injecting HCI hardware error event [ 218.983941][ T4183] Bluetooth: hci4: hardware error 0x00 [ 221.647286][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.507'. [ 221.743890][ T5764] usb 7-1: USB disconnect, device number 3 [ 221.779299][ T6110] process 'syz.0.512' launched './file0' with NULL argv: empty string added [ 221.894615][ T6112] tmpfs: Bad value for 'mpol' [ 222.173308][ T4179] Bluetooth: hci5: sending frame failed (-49) [ 223.293045][ T4296] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 223.737848][ T4296] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 223.837307][ T4296] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 223.856228][ T6175] siw: device registration error -23 [ 223.892996][ T4296] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 224.193287][ T4176] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 224.613228][ T4296] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.753538][ T6148] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 227.027794][ T4296] usb 8-1: USB disconnect, device number 2 [ 227.324176][ T6236] siw: device registration error -23 [ 227.952973][ T4296] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 227.968767][ T4296] Bluetooth: hci0: Injecting HCI hardware error event [ 228.001405][ T4176] Bluetooth: hci0: hardware error 0x00 [ 229.550727][ T6275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.553'. [ 229.561424][ T6275] IPv6: Can't replace route, no match found [ 229.762924][ T4211] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 230.173189][ T4211] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 230.233092][ T4211] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 230.368415][ T4211] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 230.393069][ T4211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.443411][ T6273] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 231.454402][ T4213] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 231.463095][ T4213] Bluetooth: hci3: Injecting HCI hardware error event [ 231.470396][ T4183] Bluetooth: hci3: hardware error 0x00 [ 231.590692][ T6328] netlink: 'syz.7.564': attribute type 10 has an invalid length. [ 231.598667][ T6328] netlink: 40 bytes leftover after parsing attributes in process `syz.7.564'. [ 231.611365][ T6328] device ipvlan1 entered promiscuous mode [ 231.630272][ T6328] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 232.465311][ T21] usb 6-1: USB disconnect, device number 2 [ 233.992848][ T4211] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 234.539141][ T6362] siw: device registration error -23 [ 235.372859][ T4211] usb 1-1: device not accepting address 11, error -71 [ 236.410013][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.7.581'. [ 236.427126][ T5764] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 236.503518][ T6394] sit0: Master is either lo or non-ether device [ 236.705966][ T6395] lo speed is unknown, defaulting to 1000 [ 237.113092][ T5764] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.136850][ T5764] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 237.154991][ T5764] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 237.165581][ T5764] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.213277][ T6384] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 237.382877][ T5699] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 237.632214][ T26] audit: type=1326 audit(1737886257.285:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e95efd29 code=0x7ffc0000 [ 237.659207][ T6422] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 237.702292][ T26] audit: type=1326 audit(1737886257.285:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd6e95efd29 code=0x7ffc0000 [ 237.763168][ T5699] usb 7-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 237.777974][ T26] audit: type=1326 audit(1737886257.285:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e95efd29 code=0x7ffc0000 [ 237.802515][ T5699] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 237.811860][ T5699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.821014][ T26] audit: type=1326 audit(1737886257.285:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6e95ee690 code=0x7ffc0000 [ 237.865499][ T6409] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 237.897392][ T5699] aiptek 7-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 237.980138][ T26] audit: type=1326 audit(1737886257.285:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd6e95f1557 code=0x7ffc0000 [ 238.003734][ T26] audit: type=1326 audit(1737886257.285:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6e95efd29 code=0x7ffc0000 [ 238.027768][ T26] audit: type=1326 audit(1737886257.285:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd6e95f1557 code=0x7ffc0000 [ 238.070708][ T26] audit: type=1326 audit(1737886257.285:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd6e95ee98a code=0x7ffc0000 [ 238.103238][ T6435] siw: device registration error -23 [ 238.245770][ T26] audit: type=1326 audit(1737886257.285:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e95efd29 code=0x7ffc0000 [ 238.388067][ T26] audit: type=1326 audit(1737886257.285:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6e95efd29 code=0x7ffc0000 [ 238.593023][ T1111] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 238.609373][ T1111] Bluetooth: hci2: Injecting HCI hardware error event [ 238.631936][ T4176] Bluetooth: hci2: hardware error 0x00 [ 239.498893][ T6457] sp0: Synchronizing with TNC [ 240.379690][ T1108] usb 7-1: USB disconnect, device number 4 [ 241.475540][ T5764] usb 6-1: USB disconnect, device number 3 [ 244.065975][ T6513] siw: device registration error -23 [ 247.482990][ T4211] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 248.653096][ T4211] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 248.692822][ T4211] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 248.782853][ T4211] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 248.817848][ T4211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.904594][ T6528] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 249.443042][ T4214] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 250.282141][ T6571] siw: device registration error -23 [ 251.092969][ T4214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 251.122131][ T4214] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 251.166656][ T4214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 251.197040][ T4214] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 251.261978][ T4214] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 251.292995][ T4214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.323241][ T4214] usb 4-1: config 0 descriptor?? [ 251.341264][ T1111] usb 7-1: USB disconnect, device number 5 [ 251.653122][ T4214] hdpvr 4-1:0.0: firmware version 0x0 dated [ 251.663021][ T4214] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 253.653384][ T4214] hdpvr 4-1:0.0: Could not setup controls [ 253.659598][ T4214] hdpvr 4-1:0.0: registering videodev failed [ 254.468796][ T4214] hdpvr: probe of 4-1:0.0 failed with error -71 [ 254.515641][ T4214] usb 4-1: USB disconnect, device number 9 [ 255.255019][ T4176] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 255.957981][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.630'. [ 255.966854][ T6627] device bridge_slave_1 left promiscuous mode [ 255.973811][ T6627] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.517438][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.531768][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.822154][ T6627] device bridge_slave_0 left promiscuous mode [ 256.829699][ T6627] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.314118][ T4213] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 259.344711][ T4213] Bluetooth: hci1: Injecting HCI hardware error event [ 259.403013][ T4183] Bluetooth: hci1: hardware error 0x00 [ 260.154182][ T6672] siw: device registration error -23 [ 264.079863][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.7.649'. [ 264.089265][ T6709] device bridge_slave_1 left promiscuous mode [ 264.096396][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.168356][ T6709] device bridge_slave_0 left promiscuous mode [ 264.175303][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.703015][ T4217] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 264.963003][ T4217] usb 1-1: Using ep0 maxpacket: 32 [ 265.112960][ T4217] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 265.124215][ T4217] usb 1-1: config 0 has no interface number 0 [ 265.168475][ T6730] netlink: 72 bytes leftover after parsing attributes in process `syz.5.656'. [ 265.178151][ T5764] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 265.299171][ T4217] usb 1-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice= 5.48 [ 265.318478][ T4217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.353615][ T4217] usb 1-1: Product: syz [ 265.357908][ T4217] usb 1-1: Manufacturer: syz [ 265.371058][ T4217] usb 1-1: SerialNumber: syz [ 265.385989][ T4217] usb 1-1: config 0 descriptor?? [ 265.424291][ T4217] usb 1-1: Expected 3 endpoints, found: 0 [ 265.433188][ T5764] usb 7-1: Using ep0 maxpacket: 16 [ 265.524062][ T5699] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 265.584527][ T5764] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.813019][ T5699] usb 6-1: Using ep0 maxpacket: 16 [ 265.896868][ T5764] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.916697][ T4296] usb 1-1: USB disconnect, device number 13 [ 265.964077][ T5699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.969654][ T5764] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 266.034033][ T5699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.053472][ T5699] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 266.072186][ T5699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.092331][ T5764] usb 7-1: SerialNumber: syz [ 266.095047][ T5699] usb 6-1: config 0 descriptor?? [ 266.244128][ T5764] cdc_acm 7-1:1.0: skipping garbage [ 267.084878][ T5699] logitech 0003:046D:C29C.0003: unknown main item tag 0x0 [ 267.193010][ T4296] usb 7-1: USB disconnect, device number 6 [ 267.242298][ T5699] logitech 0003:046D:C29C.0003: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 267.306052][ T6759] input: syz1 as /devices/virtual/input/input8 [ 267.873102][ T5699] logitech 0003:046D:C29C.0003: no inputs found [ 267.971186][ T6769] netlink: 'syz.0.663': attribute type 1 has an invalid length. [ 268.008806][ T5699] usb 6-1: USB disconnect, device number 4 [ 268.059885][ T6769] No such timeout policy "syz1" [ 269.933275][ T5699] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 270.422945][ T5699] usb 7-1: Using ep0 maxpacket: 32 [ 270.553063][ T5699] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 270.586002][ T5699] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 270.616977][ T5699] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 270.644608][ T5699] usb 7-1: config 1 has no interface number 0 [ 270.661454][ T5699] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.702187][ T5699] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 270.787037][ T5699] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 270.850186][ T5699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.225743][ T5699] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 272.433940][ T5699] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 272.563347][ T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 272.943359][ T7] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 273.096252][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.358804][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.412827][ T7] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 273.503213][ T21] snd_usb_pod 7-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 273.556633][ T7] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 273.582204][ T7] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 273.634823][ T7] usb 6-1: Manufacturer: syz [ 273.868509][ T6842] netlink: 104 bytes leftover after parsing attributes in process `syz.0.676'. [ 274.624011][ T7] usb 6-1: config 0 descriptor?? [ 274.783423][ T4296] usb 7-1: USB disconnect, device number 7 [ 274.799451][ T4296] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 275.222820][ T7] usb 6-1: can't set config #0, error -71 [ 275.236457][ T7] usb 6-1: USB disconnect, device number 5 [ 277.362887][ T4217] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 277.604003][ T4217] usb 4-1: device descriptor read/64, error -71 [ 277.923024][ T4217] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 278.047936][ T6896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.534871][ T6906] siw: device registration error -23 [ 280.501097][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.700'. [ 280.774165][ T23] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 281.132926][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 281.263005][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 281.293225][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 281.394033][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 281.452899][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.502002][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 281.581536][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.693743][ T6972] siw: device registration error -23 [ 281.696656][ T6970] lo speed is unknown, defaulting to 1000 [ 282.113689][ T23] usb 4-1: GET_CAPABILITIES returned 0 [ 282.119354][ T23] usbtmc 4-1:16.0: can't read capabilities [ 282.646332][ T4217] usb 4-1: USB disconnect, device number 12 [ 282.789592][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.7.709'. [ 282.968437][ T5699] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 283.122773][ T4170] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 283.426053][ T4170] usb 6-1: Using ep0 maxpacket: 16 [ 283.431379][ T5699] usb 1-1: config 129 has an invalid interface number: 249 but max is 0 [ 283.454619][ T5699] usb 1-1: config 129 has no interface number 0 [ 283.493717][ T5699] usb 1-1: config 129 interface 249 has no altsetting 0 [ 283.535391][ T5699] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=99.21 [ 283.564734][ T4170] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.615202][ T4170] usb 6-1: config 0 has no interfaces? [ 283.625827][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.648831][ T4170] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 283.700363][ T4170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.827754][ T4170] usb 6-1: config 0 descriptor?? [ 284.091206][ T5699] usb 1-1: string descriptor 0 read error: -71 [ 284.207406][ T5699] redrat3 1-1:129.249: Couldn't find all endpoints [ 284.226328][ T5699] usb 1-1: USB disconnect, device number 14 [ 285.328645][ T7] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 286.178103][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 286.667473][ T5699] usb 6-1: USB disconnect, device number 6 [ 286.729967][ T7] usb 4-1: not running at top speed; connect to a high speed hub [ 286.825323][ T7] usb 4-1: config 3 has an invalid interface number: 106 but max is 0 [ 286.842145][ T7] usb 4-1: config 3 has no interface number 0 [ 286.870250][ T7] usb 4-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 286.907480][ T7] usb 4-1: config 3 interface 106 has no altsetting 0 [ 288.203893][ T7] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 288.213101][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.260918][ T7] usb 4-1: Product: syz [ 288.260940][ T7] usb 4-1: Manufacturer: syz [ 288.260957][ T7] usb 4-1: SerialNumber: syz [ 288.271332][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.7.721'. [ 288.280332][ T7] usb 4-1: can't set config #3, error -71 [ 288.282146][ T7] usb 4-1: USB disconnect, device number 13 [ 288.606508][ T150] block nbd6: Attempted send on invalid socket [ 288.613514][ T150] print_req_error: 7 callbacks suppressed [ 288.613531][ T150] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.642856][ T7090] hpfs: hpfs_map_sector(): read error [ 289.274127][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.7.730'. [ 290.866153][ T4214] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 291.251206][ T4214] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 291.277386][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 291.282363][ T4214] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 291.854887][ T4214] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 291.875813][ T4214] usb 1-1: config 1 has no interface number 1 [ 291.893554][ T4214] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 291.935300][ T4214] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.224182][ T4214] usb 1-1: string descriptor 0 read error: -22 [ 292.230502][ T4214] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 292.335498][ T4214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.402827][ T7157] siw: device registration error -23 [ 294.206201][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 295.082637][ T7180] netlink: 'syz.5.748': attribute type 27 has an invalid length. [ 295.533697][ T7180] bond0: (slave bond_slave_0): Releasing backup interface [ 298.104494][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 298.104510][ T26] audit: type=1326 audit(1737886316.734:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674fdf6d29 code=0x7ffc0000 [ 298.999104][ T7195] syz.5.751 (7195): drop_caches: 2 [ 299.005101][ T26] audit: type=1326 audit(1737886316.734:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674fdf6d29 code=0x7ffc0000 [ 300.231137][ T26] audit: type=1326 audit(1737886316.734:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f674fdf6d29 code=0x7ffc0000 [ 300.550039][ T7232] siw: device registration error -23 [ 301.438726][ T26] audit: type=1326 audit(1737886316.734:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674fdf6d29 code=0x7ffc0000 [ 301.610286][ T26] audit: type=1326 audit(1737886316.734:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674fdf6d29 code=0x7ffc0000 [ 301.706517][ T26] audit: type=1326 audit(1737886316.762:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f674fdf6d29 code=0x7ffc0000 [ 301.742618][ T26] audit: type=1326 audit(1737886316.762:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674fdf6d29 code=0x7ffc0000 [ 301.866923][ T26] audit: type=1326 audit(1737886316.762:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674fdf6d29 code=0x7ffc0000 [ 301.973839][ T1111] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 301.994285][ T26] audit: type=1326 audit(1737886316.762:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f674fdf6d29 code=0x7ffc0000 [ 302.119627][ T26] audit: type=1326 audit(1737886316.762:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.6.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674fdf6d29 code=0x7ffc0000 [ 302.294584][ T1111] usb 8-1: Using ep0 maxpacket: 8 [ 302.351556][ T5699] usb 1-1: USB disconnect, device number 15 [ 302.476838][ T1111] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.518927][ T1111] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 302.566490][ T1111] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.621139][ T1111] usb 8-1: config 0 descriptor?? [ 302.680951][ T1111] metro_usb 8-1:0.0: required endpoints missing [ 302.903386][ T4217] usb 8-1: USB disconnect, device number 3 [ 308.195672][ T5699] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 308.244105][ T7318] syz.7.774 (7318): drop_caches: 2 [ 308.441597][ T5699] usb 7-1: device descriptor read/64, error -71 [ 308.762298][ T5699] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 308.986799][ T5699] usb 7-1: device descriptor read/64, error -71 [ 309.125886][ T5699] usb usb7-port1: attempt power cycle [ 309.238497][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'. [ 309.585488][ T5699] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 309.724593][ T5699] usb 7-1: device descriptor read/8, error -71 [ 310.017274][ T5699] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 310.339758][ T5699] usb 7-1: device descriptor read/8, error -71 [ 310.490861][ T5699] usb usb7-port1: unable to enumerate USB device [ 311.173866][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.7.803'. [ 313.265388][ T4170] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 314.749026][ T4214] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 314.994920][ T4214] usb 8-1: device descriptor read/64, error -71 [ 315.080607][ T4170] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 315.100972][ T4170] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.133488][ T4170] usb 6-1: Product: syz [ 315.153361][ T4170] usb 6-1: config 0 descriptor?? [ 315.208868][ T4170] usb 6-1: can't set config #0, error -71 [ 315.235979][ T4170] usb 6-1: USB disconnect, device number 7 [ 315.283625][ T4214] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 315.497493][ T4214] usb 8-1: device descriptor read/64, error -71 [ 315.625756][ T4214] usb usb8-port1: attempt power cycle [ 315.856613][ T7532] fuse: Bad value for 'fd' [ 315.878365][ T7532] sctp: [Deprecated]: syz.0.817 (pid 7532) Use of int in max_burst socket option deprecated. [ 315.878365][ T7532] Use struct sctp_assoc_value instead [ 316.064041][ T4214] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 316.192876][ T4214] usb 8-1: device descriptor read/8, error -71 [ 319.319615][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.325987][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.607762][ T7588] tipc: Started in network mode [ 319.613193][ T7588] tipc: Node identity 10000, cluster identity 4711 [ 319.619814][ T7588] tipc: Node number set to 65536 [ 319.805753][ T5699] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 320.060900][ T5699] usb 1-1: device descriptor read/64, error -71 [ 322.437751][ T5699] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 322.531883][ T7610] serio: Serial port pts0 [ 322.710125][ T5699] usb 1-1: device descriptor read/64, error -71 [ 322.842872][ T5699] usb usb1-port1: attempt power cycle [ 324.652911][ T7623] netlink: 224 bytes leftover after parsing attributes in process `syz.0.836'. [ 324.675071][ T7623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.836'. [ 324.688982][ T7626] siw: device registration error -23 [ 325.055161][ T7636] bridge0: port 3(bond0) entered blocking state [ 326.209447][ T7636] bridge0: port 3(bond0) entered disabled state [ 326.236260][ T7636] device bond0 entered promiscuous mode [ 326.277668][ T7636] device bond_slave_0 entered promiscuous mode [ 326.288400][ T7636] device bond_slave_1 entered promiscuous mode [ 326.295411][ T7636] bridge0: port 3(bond0) entered blocking state [ 326.301756][ T7636] bridge0: port 3(bond0) entered forwarding state [ 326.310459][ T7641] netlink: 16 bytes leftover after parsing attributes in process `syz.7.840'. [ 326.319612][ T7641] netlink: 52 bytes leftover after parsing attributes in process `syz.7.840'. [ 326.328773][ T7641] netlink: 12 bytes leftover after parsing attributes in process `syz.7.840'. [ 328.368827][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 328.368845][ T26] audit: type=1326 audit(1737886345.002:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.7.850" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c78b11d29 code=0x0 [ 328.592366][ T7683] siw: device registration error -23 [ 329.701461][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.7.855'. [ 332.810036][ T21] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 333.758185][ T21] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.859114][ T21] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.892647][ T7749] netlink: 300 bytes leftover after parsing attributes in process `syz.5.869'. [ 333.982173][ T21] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 334.002308][ T21] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 334.031866][ T21] usb 8-1: SerialNumber: syz [ 334.070633][ T7756] tipc: Failed to obtain node identity [ 334.104600][ T7756] tipc: Enabling of bearer rejected, failed to enable media [ 334.531549][ T21] usb 8-1: 0:2 : does not exist [ 334.536877][ T21] usb 8-1: unit 5 not found! [ 335.228752][ T21] usb 8-1: USB disconnect, device number 8 [ 335.645783][ T4160] udevd[4160]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.003091][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'. [ 341.031146][ T7875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.899'. [ 342.604366][ T7902] sp0: Synchronizing with TNC [ 343.707064][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.6.911'. [ 347.845875][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.925'. [ 348.467287][ T4170] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 348.755919][ T4170] usb 6-1: Using ep0 maxpacket: 16 [ 348.927764][ T4170] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.027130][ T4170] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.100938][ T4170] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 349.296274][ T4170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.313990][ T4170] usb 6-1: config 0 descriptor?? [ 350.661665][ T4170] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x2 [ 350.698704][ T4170] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x2 [ 350.755390][ T4170] konepure 0003:1E7D:2DB4.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.5-1/input0 [ 350.846630][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.938'. [ 351.268397][ T4213] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 351.553386][ T7] usb 6-1: USB disconnect, device number 8 [ 351.739570][ T4213] usb 8-1: Using ep0 maxpacket: 32 [ 351.882203][ T4213] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.906843][ T4213] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.922220][ T4213] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 351.936384][ T4213] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.964602][ T4213] usb 8-1: config 0 descriptor?? [ 352.283728][ T21] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 352.575337][ T4213] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 352.601933][ T4213] ft260 0003:0403:6030.0005: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 352.657929][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 353.470577][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.534856][ T4213] ft260 0003:0403:6030.0005: failed to retrieve chip version [ 353.547465][ T4213] ft260: probe of 0003:0403:6030.0005 failed with error -71 [ 353.575209][ T4213] usb 8-1: USB disconnect, device number 9 [ 353.695155][ T21] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 353.704236][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.715528][ T8026] input: syz0 as /devices/virtual/input/input10 [ 353.736403][ T21] usb 1-1: Product: syz [ 353.741148][ T21] usb 1-1: Manufacturer: syz [ 353.746033][ T21] usb 1-1: SerialNumber: syz [ 353.772165][ T21] usb 1-1: config 0 descriptor?? [ 354.012583][ T21] msi2500 1-1:0.0: Registered as swradio24 [ 354.042773][ T21] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 354.225010][ T8032] fuse: Bad value for 'fd' [ 354.378371][ T8032] sctp: [Deprecated]: syz.3.947 (pid 8032) Use of int in max_burst socket option deprecated. [ 354.378371][ T8032] Use struct sctp_assoc_value instead [ 355.726245][ T4213] usb 1-1: USB disconnect, device number 19 [ 355.795582][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.7.951'. [ 357.089313][ T8068] sctp: [Deprecated]: syz.7.960 (pid 8068) Use of int in max_burst socket option deprecated. [ 357.089313][ T8068] Use struct sctp_assoc_value instead [ 357.169434][ T4213] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 358.430889][ T4213] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 358.528935][ T4213] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 359.920048][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.966'. [ 359.933405][ T4213] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 359.968846][ T4213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.038417][ T4213] usb 1-1: can't set config #27, error -71 [ 360.057995][ T4213] usb 1-1: USB disconnect, device number 20 [ 360.349060][ T4215] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 360.665178][ T4215] usb 7-1: Using ep0 maxpacket: 32 [ 361.500893][ T8106] fuse: Bad value for 'fd' [ 361.538859][ T8106] sctp: [Deprecated]: syz.3.971 (pid 8106) Use of int in max_burst socket option deprecated. [ 361.538859][ T8106] Use struct sctp_assoc_value instead [ 361.574048][ T4215] usb 7-1: unable to get BOS descriptor or descriptor too short [ 361.670215][ T4215] usb 7-1: config 7 has an invalid interface number: 187 but max is 0 [ 361.688598][ T4215] usb 7-1: config 7 has no interface number 0 [ 361.705954][ T4215] usb 7-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947 [ 361.770930][ T4215] usb 7-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 361.805739][ T4215] usb 7-1: config 7 interface 187 has no altsetting 0 [ 362.097686][ T5699] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 362.258047][ T4215] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 362.365069][ T5699] usb 4-1: Using ep0 maxpacket: 16 [ 362.475994][ T4215] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.516020][ T4215] usb 7-1: Product: syz [ 362.520389][ T4215] usb 7-1: Manufacturer: syz [ 362.523604][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.525006][ T4215] usb 7-1: SerialNumber: syz [ 362.541747][ T8119] netlink: 12 bytes leftover after parsing attributes in process `syz.5.975'. [ 362.557740][ T8093] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 362.575857][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.579344][ T8093] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 362.599904][ T5699] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 362.609507][ T8119] netlink: 12 bytes leftover after parsing attributes in process `syz.5.975'. [ 362.618825][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.684665][ T5699] usb 4-1: config 0 descriptor?? [ 362.804074][ T8121] netlink: 16 bytes leftover after parsing attributes in process `syz.5.976'. [ 362.860945][ T4215] usb 7-1: Limiting number of CPorts to U8_MAX [ 362.884065][ T4215] usb 7-1: Unused bulk OUT endpoint found: 0x03 [ 362.892600][ T8123] input: syz0 as /devices/virtual/input/input11 [ 362.904774][ T4215] usb 7-1: Not enough endpoints found in device, aborting! [ 363.015420][ T8128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.979'. [ 363.081680][ T4216] usb 7-1: USB disconnect, device number 12 [ 363.271651][ T5699] konepure 0003:1E7D:2DB4.0006: unknown main item tag 0x2 [ 363.300694][ T5699] konepure 0003:1E7D:2DB4.0006: unknown main item tag 0x2 [ 363.345507][ T5699] konepure 0003:1E7D:2DB4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 364.321888][ T5699] usb 4-1: USB disconnect, device number 14 [ 365.183954][ T8162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.990'. [ 365.261511][ T8169] netlink: 40 bytes leftover after parsing attributes in process `syz.7.992'. [ 365.629708][ T4216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.353052][ T4217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.980887][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.989647][ T8190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1000'. [ 367.101980][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1000'. [ 367.561531][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1003'. [ 368.086820][ T8212] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1007'. [ 368.152741][ T8212] unsupported nlmsg_type 40 [ 368.593257][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.702271][ T4214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.729830][ T4216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.422622][ T4216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.458224][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1015'. [ 372.519415][ T4213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.938899][ T4217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.351275][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1024'. [ 373.367478][ T4214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.411771][ T8263] siw: device registration error -23 [ 373.419597][ T8262] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1024'. [ 373.634356][ T4213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.788051][ T8271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1028'. [ 373.825989][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'. [ 373.977240][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1030'. [ 374.200674][ T4213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.211737][ T4253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.222601][ T4214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.231764][ T4213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.322569][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1031'. [ 375.488490][ T4213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.728274][ T4217] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 376.001195][ T4217] usb 6-1: Using ep0 maxpacket: 16 [ 376.263227][ T7] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 376.282846][ T8313] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1040'. [ 376.299790][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1040'. [ 376.305683][ T4217] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.320208][ T4217] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.330604][ T4217] usb 6-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 376.339756][ T4217] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.467464][ T4217] usb 6-1: config 0 descriptor?? [ 376.530077][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 376.701549][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 376.820118][ T7] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 376.903297][ T7] usb 4-1: config 7 has no interface number 0 [ 377.086043][ T7] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947 [ 377.134313][ T7] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 377.146850][ T4217] lenovo 0003:17EF:6009.0007: collection stack underflow [ 377.167941][ T4217] lenovo 0003:17EF:6009.0007: item 0 0 0 12 parsing failed [ 377.192577][ T4213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.203599][ T7] usb 4-1: config 7 interface 187 has no altsetting 0 [ 377.218337][ T4217] lenovo 0003:17EF:6009.0007: hid_parse failed [ 377.401713][ T4217] lenovo: probe of 0003:17EF:6009.0007 failed with error -22 [ 377.425258][ T4217] usb 6-1: USB disconnect, device number 9 [ 377.471003][ T4214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.567276][ T7] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 377.576361][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.619596][ T7] usb 4-1: Product: syz [ 377.638403][ T7] usb 4-1: Manufacturer: syz [ 377.662328][ T7] usb 4-1: SerialNumber: syz [ 377.676220][ T8326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.685736][ T8326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.694072][ T8326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.704796][ T8326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.713334][ T8326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.717040][ T8305] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 377.722609][ T8326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.740264][ T8305] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 377.764585][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.781969][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.994785][ T7] usb 4-1: Limiting number of CPorts to U8_MAX [ 378.025431][ T7] usb 4-1: Unused bulk OUT endpoint found: 0x03 [ 378.119805][ T7] usb 4-1: Not enough endpoints found in device, aborting! [ 378.263714][ T7] usb 4-1: USB disconnect, device number 15 [ 378.515333][ T8345] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1052'. [ 378.559586][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1052'. [ 379.059977][ T8358] siw: device registration error -23 [ 380.122314][ T7] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 380.218951][ T8376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1063'. [ 380.271849][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1063'. [ 380.378801][ T7] usb 8-1: Using ep0 maxpacket: 16 [ 381.372905][ T7] usb 8-1: unable to read config index 0 descriptor/all [ 381.379927][ T7] usb 8-1: can't read configurations, error -71 [ 382.638263][ T8411] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1077'. [ 382.709443][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1077'. [ 383.055046][ T8425] lo speed is unknown, defaulting to 1000 [ 383.318607][ T1111] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 383.457794][ T4214] net_ratelimit: 65 callbacks suppressed [ 383.457811][ T4214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.471642][ T4214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.607475][ T1111] usb 1-1: Using ep0 maxpacket: 8 [ 383.629269][ T4214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.631744][ T8441] siw: device registration error -23 [ 383.757018][ T1111] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.960368][ T1111] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 383.969467][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.999342][ T1111] usb 1-1: Product: syz [ 384.010121][ T1111] usb 1-1: Manufacturer: syz [ 384.020914][ T1111] usb 1-1: SerialNumber: syz [ 384.059220][ T1111] usb 1-1: config 0 descriptor?? [ 384.249293][ T1111] msi2500 1-1:0.0: Registered as swradio24 [ 384.255152][ T1111] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 385.287178][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.293502][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.293839][ T4217] usb 1-1: USB disconnect, device number 21 [ 385.313856][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.444272][ T8458] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1092'. [ 385.678549][ T8460] lo speed is unknown, defaulting to 1000 [ 386.047915][ T8476] fuse: Bad value for 'fd' [ 386.122656][ T8476] sctp: [Deprecated]: syz.3.1100 (pid 8476) Use of int in max_burst socket option deprecated. [ 386.122656][ T8476] Use struct sctp_assoc_value instead [ 386.245656][ T8485] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1103'. [ 386.451494][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.707807][ T4217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.066145][ T21] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 387.173037][ T8509] fuse: Bad value for 'fd' [ 387.220964][ T8506] lo speed is unknown, defaulting to 1000 [ 387.371724][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 387.388617][ T8513] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1115'. [ 387.509563][ T21] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.563859][ T4213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.734058][ T21] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 387.754200][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.781483][ T21] usb 6-1: Product: syz [ 387.785814][ T21] usb 6-1: Manufacturer: syz [ 387.812526][ T21] usb 6-1: SerialNumber: syz [ 387.876141][ T21] usb 6-1: config 0 descriptor?? [ 388.059525][ T21] msi2500 6-1:0.0: Registered as swradio24 [ 388.074596][ T21] msi2500 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 388.936617][ T4217] usb 6-1: USB disconnect, device number 10 [ 388.939054][ T4213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.971422][ T8542] fuse: Bad value for 'fd' [ 389.768624][ T8563] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1135'. [ 389.848817][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1135'. [ 389.957669][ T4211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.054454][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.062543][ T8575] fuse: Bad value for 'fd' [ 390.630930][ T21] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 390.688366][ T8596] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1149'. [ 390.708172][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1149'. [ 390.898211][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 391.037424][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.054720][ T8605] fuse: Bad value for 'fd' [ 391.174459][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.251352][ T21] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 391.282189][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.327112][ T8608] siw: device registration error -23 [ 391.336765][ T21] usb 4-1: Product: syz [ 391.340982][ T21] usb 4-1: Manufacturer: syz [ 391.345582][ T21] usb 4-1: SerialNumber: syz [ 391.402910][ T21] usb 4-1: config 0 descriptor?? [ 391.582080][ T21] msi2500 4-1:0.0: Registered as swradio24 [ 391.596205][ T21] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 392.319115][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.321295][ T7] usb 4-1: USB disconnect, device number 16 [ 392.726752][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1161'. [ 392.940578][ T8639] fuse: Bad value for 'fd' [ 393.207871][ T4211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.473228][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.891914][ T4211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.989743][ T8663] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1174'. [ 394.226872][ T8669] fuse: Bad value for 'fd' [ 394.650590][ T4213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.784269][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.033546][ T8691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1186'. [ 396.828718][ T8694] siw: device registration error -23 [ 396.867310][ T4214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.956056][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.082734][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.167252][ T8704] fuse: Bad value for 'fd' [ 399.214318][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.501417][ T8709] device syzkaller0 entered promiscuous mode [ 400.437781][ T4215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.547046][ T4213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.698986][ T8727] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1199'. [ 401.915075][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.368973][ T4213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.524357][ T8768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1213'. [ 403.727083][ T4214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.709415][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.021778][ T4211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.684570][ T4214] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 406.525499][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.902176][ T4214] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 406.932780][ T4214] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 406.965153][ T8820] ------------[ cut here ]------------ [ 406.976057][ T8820] trace type BPF program uses run-time allocation [ 406.982816][ T4214] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 406.986506][ T8820] WARNING: CPU: 1 PID: 8820 at kernel/bpf/verifier.c:11729 check_map_prog_compatibility+0x720/0x8c0 [ 407.004131][ T8820] Modules linked in: [ 407.008261][ T4214] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 407.010048][ T8820] CPU: 1 PID: 8820 Comm: syz.5.1235 Not tainted 5.15.177-syzkaller #0 [ 407.046462][ T4214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.073367][ T8820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 407.082101][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.250293][ T8820] RIP: 0010:check_map_prog_compatibility+0x720/0x8c0 [ 407.299457][ T4214] snd-usb-audio: probe of 1-1:27.0 failed with error -12 [ 407.311951][ T8820] Code: ed e9 ec fc ff ff e8 3f b8 ee ff 31 ed e9 e0 fc ff ff e8 33 b8 ee ff c6 05 36 1f 65 0c 01 48 c7 c7 a0 3a b1 8a e8 c0 51 ba ff <0f> 0b e9 4a fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4f f9 ff [ 407.426019][ T8820] RSP: 0018:ffffc900030ef348 EFLAGS: 00010246 [ 407.430917][ T4333] udevd[4333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.495330][ T8820] RAX: eb00bf0fc420ea00 RBX: 0000000000000011 RCX: 0000000000080000 [ 407.496187][ T4214] usb 1-1: USB disconnect, device number 22 [ 407.510445][ T8820] RDX: ffffc90015d91000 RSI: 0000000000003afd RDI: 0000000000003afe [ 407.603262][ T8820] RBP: ffff888025132028 R08: ffffffff8166aa8c R09: ffffed10171e67a8 [ 407.682593][ T8820] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900011af038 [ 407.691051][ T8820] R13: ffff888025132000 R14: ffff88807b35c000 R15: dffffc0000000000 [ 407.700388][ T8820] FS: 00007f524fdd26c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 407.713311][ T8820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.722671][ T8820] CR2: 000000110c380dd4 CR3: 0000000058c81000 CR4: 00000000003506e0 [ 407.731283][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.743334][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.750496][ T8820] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 407.755744][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.769891][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.783977][ T8820] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 407.825188][ T8820] Call Trace: [ 407.843559][ T8820] [ 407.857698][ T8820] ? __warn+0x15b/0x300 [ 407.917853][ T8820] ? check_map_prog_compatibility+0x720/0x8c0 [ 407.924247][ T8820] ? report_bug+0x1b7/0x2e0 [ 407.959447][ T8820] ? handle_bug+0x3d/0x70 [ 408.060876][ T8820] ? exc_invalid_op+0x16/0x40 [ 408.071802][ T8820] ? asm_exc_invalid_op+0x16/0x20 [ 408.076972][ T8820] ? __wake_up_klogd+0xcc/0x100 [ 408.115878][ T8820] ? check_map_prog_compatibility+0x720/0x8c0 [ 408.123164][ T8820] ? check_map_prog_compatibility+0x720/0x8c0 [ 408.129410][ T8820] resolve_pseudo_ldimm64+0x682/0x1240 [ 408.144779][ T8820] ? check_attach_btf_id+0xf20/0xf20 [ 408.150270][ T8820] ? __mark_reg_known+0x1a0/0x1a0 [ 408.156444][ T8820] bpf_check+0x433a/0x12d40 [ 408.161240][ T8820] ? validate_chain+0x112/0x5930 [ 408.168632][ T8820] ? unwind_next_frame+0x1437/0x1fa0 [ 408.174105][ T8820] ? reacquire_held_locks+0x660/0x660 [ 408.179905][ T8820] ? reacquire_held_locks+0x660/0x660 [ 408.192430][ T8820] ? bpf_get_btf_vmlinux+0x10/0x10 [ 408.200362][ T8820] ? mark_lock+0x98/0x340 [ 408.205257][ T8820] ? __lock_acquire+0x1295/0x1ff0 [ 408.210778][ T8820] ? mark_lock+0x98/0x340 [ 408.215334][ T8820] ? __lock_acquire+0x1295/0x1ff0 [ 408.226743][ T8820] ? ktime_get_with_offset+0x101/0x320 [ 408.232506][ T8820] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 408.238713][ T8820] ? print_irqtrace_events+0x210/0x210 [ 408.247115][ T8820] ? ktime_get_with_offset+0x101/0x320 [ 408.252796][ T8820] ? seqcount_lockdep_reader_access+0x153/0x220 [ 408.259334][ T8820] ? lockdep_hardirqs_on+0x94/0x130 [ 408.264657][ T8820] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 408.271189][ T8820] ? ktime_get_real_ts64+0x460/0x460 [ 408.278329][ T8820] ? __might_fault+0xb4/0x110 [ 408.283649][ T8820] ? memset+0x1f/0x40 [ 408.287997][ T8820] ? bpf_obj_name_cpy+0x186/0x1d0 [ 408.293590][ T8820] bpf_prog_load+0x12b3/0x1b60 [ 408.298443][ T8820] ? map_freeze+0x360/0x360 [ 408.309973][ T8820] ? __might_fault+0xb8/0x110 [ 408.314925][ T8820] ? __might_fault+0xb4/0x110 [ 408.319847][ T8820] ? bpf_lsm_bpf+0x5/0x10 [ 408.324825][ T8820] ? security_bpf+0x7d/0xa0 [ 408.329380][ T8820] __sys_bpf+0x343/0x670 [ 408.333729][ T8820] ? bpf_link_show_fdinfo+0x300/0x300 [ 408.339350][ T8820] __x64_sys_bpf+0x78/0x90 [ 408.343832][ T8820] do_syscall_64+0x3b/0xb0 [ 408.348427][ T8820] ? clear_bhb_loop+0x15/0x70 [ 408.354590][ T8820] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 408.360713][ T8820] RIP: 0033:0x7f5251f68d29 [ 408.365176][ T8820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.385067][ T8820] RSP: 002b:00007f524fdd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.394733][ T8820] RAX: ffffffffffffffda RBX: 00007f5252181fa0 RCX: 00007f5251f68d29 [ 408.402920][ T8820] RDX: 0000000000000094 RSI: 0000000020000300 RDI: 0000000000000005 [ 408.411347][ T8820] RBP: 00007f5251fea2a0 R08: 0000000000000000 R09: 0000000000000000 [ 408.419519][ T8820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.428059][ T8820] R13: 0000000000000000 R14: 00007f5252181fa0 R15: 00007ffec903c628 [ 408.437243][ T8820] [ 408.440454][ T8820] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 408.447741][ T8820] CPU: 1 PID: 8820 Comm: syz.5.1235 Not tainted 5.15.177-syzkaller #0 [ 408.455918][ T8820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 408.465988][ T8820] Call Trace: [ 408.469274][ T8820] [ 408.472200][ T8820] dump_stack_lvl+0x1e3/0x2d0 [ 408.476883][ T8820] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 408.482527][ T8820] ? panic+0x860/0x860 [ 408.486595][ T8820] ? lockdep_hardirqs_off+0x70/0x100 [ 408.491920][ T8820] ? check_map_prog_compatibility+0x6b0/0x8c0 [ 408.498179][ T8820] ? check_map_prog_compatibility+0x6b0/0x8c0 [ 408.504290][ T8820] panic+0x318/0x860 [ 408.508202][ T8820] ? __warn+0x16a/0x300 [ 408.512397][ T8820] ? fb_is_primary_device+0xd0/0xd0 [ 408.517607][ T8820] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 408.523270][ T8820] ? __warn+0x16a/0x300 [ 408.527451][ T8820] ? __warn+0x29a/0x300 [ 408.531639][ T8820] ? check_map_prog_compatibility+0x720/0x8c0 [ 408.537715][ T8820] __warn+0x2b2/0x300 [ 408.541724][ T8820] ? check_map_prog_compatibility+0x720/0x8c0 [ 408.547813][ T8820] report_bug+0x1b7/0x2e0 [ 408.552163][ T8820] handle_bug+0x3d/0x70 [ 408.556341][ T8820] exc_invalid_op+0x16/0x40 [ 408.560850][ T8820] asm_exc_invalid_op+0x16/0x20 [ 408.565734][ T8820] RIP: 0010:check_map_prog_compatibility+0x720/0x8c0 [ 408.572438][ T8820] Code: ed e9 ec fc ff ff e8 3f b8 ee ff 31 ed e9 e0 fc ff ff e8 33 b8 ee ff c6 05 36 1f 65 0c 01 48 c7 c7 a0 3a b1 8a e8 c0 51 ba ff <0f> 0b e9 4a fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4f f9 ff [ 408.592084][ T8820] RSP: 0018:ffffc900030ef348 EFLAGS: 00010246 [ 408.598173][ T8820] RAX: eb00bf0fc420ea00 RBX: 0000000000000011 RCX: 0000000000080000 [ 408.606148][ T8820] RDX: ffffc90015d91000 RSI: 0000000000003afd RDI: 0000000000003afe [ 408.614145][ T8820] RBP: ffff888025132028 R08: ffffffff8166aa8c R09: ffffed10171e67a8 [ 408.622151][ T8820] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900011af038 [ 408.630141][ T8820] R13: ffff888025132000 R14: ffff88807b35c000 R15: dffffc0000000000 [ 408.638118][ T8820] ? __wake_up_klogd+0xcc/0x100 [ 408.642986][ T8820] ? check_map_prog_compatibility+0x720/0x8c0 [ 408.649061][ T8820] resolve_pseudo_ldimm64+0x682/0x1240 [ 408.654543][ T8820] ? check_attach_btf_id+0xf20/0xf20 [ 408.659836][ T8820] ? __mark_reg_known+0x1a0/0x1a0 [ 408.664889][ T8820] bpf_check+0x433a/0x12d40 [ 408.669435][ T8820] ? validate_chain+0x112/0x5930 [ 408.674389][ T8820] ? unwind_next_frame+0x1437/0x1fa0 [ 408.679678][ T8820] ? reacquire_held_locks+0x660/0x660 [ 408.685056][ T8820] ? reacquire_held_locks+0x660/0x660 [ 408.690467][ T8820] ? bpf_get_btf_vmlinux+0x10/0x10 [ 408.695714][ T8820] ? mark_lock+0x98/0x340 [ 408.700045][ T8820] ? __lock_acquire+0x1295/0x1ff0 [ 408.705093][ T8820] ? mark_lock+0x98/0x340 [ 408.709424][ T8820] ? __lock_acquire+0x1295/0x1ff0 [ 408.714475][ T8820] ? ktime_get_with_offset+0x101/0x320 [ 408.719936][ T8820] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 408.725931][ T8820] ? print_irqtrace_events+0x210/0x210 [ 408.731395][ T8820] ? ktime_get_with_offset+0x101/0x320 [ 408.736955][ T8820] ? seqcount_lockdep_reader_access+0x153/0x220 [ 408.743209][ T8820] ? lockdep_hardirqs_on+0x94/0x130 [ 408.748539][ T8820] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 408.754785][ T8820] ? ktime_get_real_ts64+0x460/0x460 [ 408.760095][ T8820] ? __might_fault+0xb4/0x110 [ 408.764781][ T8820] ? memset+0x1f/0x40 [ 408.768773][ T8820] ? bpf_obj_name_cpy+0x186/0x1d0 [ 408.773800][ T8820] bpf_prog_load+0x12b3/0x1b60 [ 408.778588][ T8820] ? map_freeze+0x360/0x360 [ 408.783099][ T8820] ? __might_fault+0xb8/0x110 [ 408.787781][ T8820] ? __might_fault+0xb4/0x110 [ 408.792452][ T8820] ? bpf_lsm_bpf+0x5/0x10 [ 408.796779][ T8820] ? security_bpf+0x7d/0xa0 [ 408.801298][ T8820] __sys_bpf+0x343/0x670 [ 408.805574][ T8820] ? bpf_link_show_fdinfo+0x300/0x300 [ 408.810973][ T8820] __x64_sys_bpf+0x78/0x90 [ 408.815387][ T8820] do_syscall_64+0x3b/0xb0 [ 408.819799][ T8820] ? clear_bhb_loop+0x15/0x70 [ 408.824475][ T8820] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 408.830372][ T8820] RIP: 0033:0x7f5251f68d29 [ 408.834881][ T8820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.854564][ T8820] RSP: 002b:00007f524fdd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.862984][ T8820] RAX: ffffffffffffffda RBX: 00007f5252181fa0 RCX: 00007f5251f68d29 [ 408.871158][ T8820] RDX: 0000000000000094 RSI: 0000000020000300 RDI: 0000000000000005 [ 408.879227][ T8820] RBP: 00007f5251fea2a0 R08: 0000000000000000 R09: 0000000000000000 [ 408.887191][ T8820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.895177][ T8820] R13: 0000000000000000 R14: 00007f5252181fa0 R15: 00007ffec903c628 [ 408.903179][ T8820] [ 408.906511][ T8820] Kernel Offset: disabled [ 408.910857][ T8820] Rebooting in 86400 seconds..