last executing test programs: 1m3.409296871s ago: executing program 2 (id=47): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000001500009e000040"]) 1m3.190366282s ago: executing program 2 (id=49): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x4, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc08c5335, &(0x7f0000000180)={0x0, 0x80, 0xfffffffd}) 1m3.115060233s ago: executing program 2 (id=50): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x48858}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1m2.842592777s ago: executing program 2 (id=53): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m2.664741094s ago: executing program 2 (id=55): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c0) 1m2.322595939s ago: executing program 2 (id=57): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700034e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1m2.066673333s ago: executing program 32 (id=57): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700034e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 50.436886218s ago: executing program 4 (id=147): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000000)=0xe1) 50.139740623s ago: executing program 4 (id=149): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fcff7f00000000e12100000009001f0070687931000000000a0001007770616e300000000a0001"], 0x38}, 0x1, 0x0, 0x0, 0x2000c813}, 0x0) 49.994583731s ago: executing program 4 (id=151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000000000007b01"]) 49.584427284s ago: executing program 4 (id=157): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) 49.309299959s ago: executing program 4 (id=160): ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x5, 0x4, 0x3eac, 0x7, 0x3}) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000100001000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10) 48.790840872s ago: executing program 4 (id=164): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "7bdb7495"}]}}, 0x0}, 0x0) syz_pidfd_open(0x0, 0x0) 48.245934589s ago: executing program 33 (id=164): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "7bdb7495"}]}}, 0x0}, 0x0) syz_pidfd_open(0x0, 0x0) 2.219305334s ago: executing program 3 (id=772): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.107191944s ago: executing program 6 (id=774): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}]}, 0x30}}, 0x0) 2.103337682s ago: executing program 3 (id=775): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xb700, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.902924033s ago: executing program 6 (id=777): syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000108000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) 1.902778788s ago: executing program 0 (id=778): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x100, &(0x7f0000000240)="7b6ddd951ce4eef691063a401d46950323b282b366840621dd0feb4a3a49913e913767c07fa1627a39fab8cfc1cfd7c48cf6187a56d6c1425120a9e886025d2e3c94e22aeeb81136b97e9c326addb7a9a01ea1ae659247b4bfc52a85ddf68ad50151d631405a6f8d10ad7222acd04dff6cdb537ad1046f822def639e66d0f52815f5c7cb5f3bde9adff0804f0835919e4fadbf4400849be49e48a5be144a1aef0b") 1.785689777s ago: executing program 0 (id=779): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000ff7f0000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, 0x0, 0x0) 1.663120012s ago: executing program 0 (id=780): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_queued\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x1, 0x3, 0x40000000001}) fcntl$lock(r0, 0x25, &(0x7f0000000240)={0x1, 0x2, 0x6, 0x7}) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x2, 0x0, 0x8, 0x5}) 1.534778257s ago: executing program 0 (id=781): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x404c894}, 0x8004) 1.503524367s ago: executing program 0 (id=782): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000002380)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x2808000, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, 0x0) 1.400507342s ago: executing program 0 (id=783): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.299295558s ago: executing program 6 (id=785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x8000000000000, 0x314000}) 1.210769275s ago: executing program 3 (id=786): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x20c02) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x6181, 0x10000}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 1.177594593s ago: executing program 1 (id=787): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x1a3902, 0x0) ptrace(0x10, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) sendfile(r0, r0, 0x0, 0x545) 1.0828577s ago: executing program 6 (id=788): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000680)='GPL\x00', 0x5, 0x2a, &(0x7f0000000780)=""/42, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) 1.082648157s ago: executing program 3 (id=789): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7d, &(0x7f0000000040)={r1, @in={{0xa, 0x4e21, @empty}}, 0xffff, 0x40}, 0x88) 1.056156944s ago: executing program 1 (id=790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000020000040"]) 1.024079702s ago: executing program 3 (id=791): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00000000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000009c0)='mem_connect\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 946.810185ms ago: executing program 6 (id=792): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 809.826577ms ago: executing program 1 (id=794): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000000c0)={0x5, 0xc, 0x3, 0xfffffffffffffff8, 0x7ff}) 779.997877ms ago: executing program 3 (id=795): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) read(r0, &(0x7f0000000740)=""/202, 0xca) 594.917654ms ago: executing program 1 (id=797): r0 = socket$igmp6(0xa, 0x3, 0x2) setuid(0xee01) tkill(0x0, 0x13) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hopopts={{0x18}}], 0x18}, 0x800) 594.613054ms ago: executing program 6 (id=798): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="40001a00000084eb40b0bbb7e7ea0cb22df5c0992c98829af303b6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 488.389451ms ago: executing program 1 (id=799): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc9}]}}}, 0x8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 416.070474ms ago: executing program 5 (id=800): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 412.007091ms ago: executing program 1 (id=801): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000400)=ANY=[@ANYBLOB="12011003000000106b1d010140000102030109029300030103f0070904000000010100000a24014000920201020d2406050603050005000700ff0c2407060300004917fcff0f0c240205ff010100010000060924030906030301f706240501"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 338.958113ms ago: executing program 5 (id=802): pipe2$9p(&(0x7f0000000240), 0x80000) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 222.795561ms ago: executing program 5 (id=803): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x4, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) 206.551115ms ago: executing program 5 (id=804): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x36c4, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0, 0x80002101}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x7, {0xfffffffffffffffe, 0x1, 0x0, {0x3, 0x69ec2dea, 0x1, 0x201, 0x6dc6, 0x7651, 0x5, 0x7, 0xe000, 0x601d824b499141fd, 0xcd35, 0xee01, 0xffffffffffffffff, 0x1008, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) 106.39765ms ago: executing program 5 (id=805): r0 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) read(r0, &(0x7f0000000000)=""/269, 0xfffffdef) 0s ago: executing program 5 (id=806): r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000001640)={{}, {0x77359400}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. [ 81.710571][ T5812] cgroup: Unknown subsys name 'net' [ 81.821127][ T5812] cgroup: Unknown subsys name 'cpuset' [ 81.830216][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.473016][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.143388][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.154177][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.166310][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.199046][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.207141][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.215559][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.224325][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.232123][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.239704][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.258080][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.265754][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.265897][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.281729][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.290504][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.290521][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.324263][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.335114][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.343154][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.356655][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.365129][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.416936][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.431461][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.452011][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.460573][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.469896][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.126336][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 87.146376][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 87.324645][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 87.383571][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 87.421183][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 87.521180][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.528681][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.536401][ T5827] bridge_slave_0: entered allmulticast mode [ 87.544634][ T5827] bridge_slave_0: entered promiscuous mode [ 87.603389][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.610777][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.618446][ T5827] bridge_slave_1: entered allmulticast mode [ 87.625513][ T5827] bridge_slave_1: entered promiscuous mode [ 87.633001][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.640218][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.647808][ T5833] bridge_slave_0: entered allmulticast mode [ 87.654952][ T5833] bridge_slave_0: entered promiscuous mode [ 87.664909][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.672177][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.679651][ T5833] bridge_slave_1: entered allmulticast mode [ 87.686872][ T5833] bridge_slave_1: entered promiscuous mode [ 87.765927][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.773825][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.781348][ T5840] bridge_slave_0: entered allmulticast mode [ 87.789697][ T5840] bridge_slave_0: entered promiscuous mode [ 87.845915][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.857678][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.864865][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.872975][ T5840] bridge_slave_1: entered allmulticast mode [ 87.880513][ T5840] bridge_slave_1: entered promiscuous mode [ 87.902310][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.915645][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.939986][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.964570][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.974492][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.981848][ T5828] bridge_slave_0: entered allmulticast mode [ 87.991759][ T5828] bridge_slave_0: entered promiscuous mode [ 88.052475][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.059835][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.067000][ T5828] bridge_slave_1: entered allmulticast mode [ 88.075726][ T5828] bridge_slave_1: entered promiscuous mode [ 88.096935][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.104158][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.112134][ T5822] bridge_slave_0: entered allmulticast mode [ 88.119316][ T5822] bridge_slave_0: entered promiscuous mode [ 88.145084][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.184876][ T5827] team0: Port device team_slave_0 added [ 88.195623][ T5827] team0: Port device team_slave_1 added [ 88.201948][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.209682][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.216905][ T5822] bridge_slave_1: entered allmulticast mode [ 88.225280][ T5822] bridge_slave_1: entered promiscuous mode [ 88.234630][ T5833] team0: Port device team_slave_0 added [ 88.243190][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.257827][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.268265][ T51] Bluetooth: hci1: command tx timeout [ 88.312275][ T5833] team0: Port device team_slave_1 added [ 88.334467][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.354789][ T51] Bluetooth: hci3: command tx timeout [ 88.378229][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.432496][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.440059][ T5145] Bluetooth: hci0: command tx timeout [ 88.445725][ T51] Bluetooth: hci2: command tx timeout [ 88.451904][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.479196][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.493813][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.518003][ T51] Bluetooth: hci4: command tx timeout [ 88.523840][ T5840] team0: Port device team_slave_0 added [ 88.532719][ T5828] team0: Port device team_slave_0 added [ 88.540370][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.547422][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.573813][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.614894][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.621968][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.648034][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.662263][ T5840] team0: Port device team_slave_1 added [ 88.671146][ T5828] team0: Port device team_slave_1 added [ 88.702294][ T5822] team0: Port device team_slave_0 added [ 88.710905][ T5822] team0: Port device team_slave_1 added [ 88.717657][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.724622][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.750616][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.790551][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.797714][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.823823][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.869195][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.876284][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.902304][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.943621][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.950890][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.977548][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.010022][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.016999][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.043263][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.055445][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.062541][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.088501][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.101198][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.108244][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.134222][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.224747][ T5827] hsr_slave_0: entered promiscuous mode [ 89.231591][ T5827] hsr_slave_1: entered promiscuous mode [ 89.258689][ T5833] hsr_slave_0: entered promiscuous mode [ 89.265073][ T5833] hsr_slave_1: entered promiscuous mode [ 89.272319][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.280129][ T5833] Cannot create hsr debugfs directory [ 89.320019][ T5822] hsr_slave_0: entered promiscuous mode [ 89.326408][ T5822] hsr_slave_1: entered promiscuous mode [ 89.333123][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.340816][ T5822] Cannot create hsr debugfs directory [ 89.417872][ T5840] hsr_slave_0: entered promiscuous mode [ 89.424226][ T5840] hsr_slave_1: entered promiscuous mode [ 89.431057][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.438685][ T5840] Cannot create hsr debugfs directory [ 89.451911][ T5828] hsr_slave_0: entered promiscuous mode [ 89.458483][ T5828] hsr_slave_1: entered promiscuous mode [ 89.464656][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.472883][ T5828] Cannot create hsr debugfs directory [ 90.095764][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.125200][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.136302][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.156437][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.206911][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.221150][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.249830][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.260988][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.347519][ T51] Bluetooth: hci1: command tx timeout [ 90.363648][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.392958][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.412053][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.426379][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.441362][ T51] Bluetooth: hci3: command tx timeout [ 90.507529][ T51] Bluetooth: hci2: command tx timeout [ 90.513459][ T51] Bluetooth: hci0: command tx timeout [ 90.520612][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.550611][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.567034][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.588828][ T51] Bluetooth: hci4: command tx timeout [ 90.600004][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.611402][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.722215][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.732791][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.763005][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.770299][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.782035][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.823770][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.831091][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.857728][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.890847][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.898068][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.959181][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.988502][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.995626][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.067968][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.075100][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.118226][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.196531][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.212844][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.240022][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.300693][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.308399][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.355326][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.373295][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.388749][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.396032][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.442239][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.449481][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.471056][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.478309][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.515417][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.522621][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.586368][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.593621][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.723535][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.743704][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.871564][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.969397][ T10] cfg80211: failed to load regulatory.db [ 92.009109][ T5822] veth0_vlan: entered promiscuous mode [ 92.099154][ T5822] veth1_vlan: entered promiscuous mode [ 92.206407][ T5822] veth0_macvtap: entered promiscuous mode [ 92.246667][ T5822] veth1_macvtap: entered promiscuous mode [ 92.375073][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.405217][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.430955][ T51] Bluetooth: hci1: command tx timeout [ 92.434537][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.494184][ T5822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.510355][ T5822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.510647][ T51] Bluetooth: hci3: command tx timeout [ 92.532822][ T5822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.543637][ T5822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.588978][ T51] Bluetooth: hci0: command tx timeout [ 92.594466][ T51] Bluetooth: hci2: command tx timeout [ 92.643930][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.664649][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.668324][ T51] Bluetooth: hci4: command tx timeout [ 92.793532][ T5827] veth0_vlan: entered promiscuous mode [ 92.850279][ T5827] veth1_vlan: entered promiscuous mode [ 92.859117][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.861438][ T5828] veth0_vlan: entered promiscuous mode [ 92.867099][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.886560][ T5828] veth1_vlan: entered promiscuous mode [ 92.911713][ T5840] veth0_vlan: entered promiscuous mode [ 92.971370][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.980531][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.001222][ T5840] veth1_vlan: entered promiscuous mode [ 93.022423][ T5833] veth0_vlan: entered promiscuous mode [ 93.034204][ T5827] veth0_macvtap: entered promiscuous mode [ 93.055683][ T5827] veth1_macvtap: entered promiscuous mode [ 93.090408][ T5828] veth0_macvtap: entered promiscuous mode [ 93.105247][ T5833] veth1_vlan: entered promiscuous mode [ 93.131016][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.148750][ T5828] veth1_macvtap: entered promiscuous mode [ 93.190527][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.221989][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.245330][ T5840] veth0_macvtap: entered promiscuous mode [ 93.262011][ T5944] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 93.269564][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.283510][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.319604][ T5840] veth1_macvtap: entered promiscuous mode [ 93.334477][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.344331][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.370867][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.380502][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.402308][ T5833] veth0_macvtap: entered promiscuous mode [ 93.412335][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.423779][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.430131][ T5946] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.435454][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.459501][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.493109][ T5833] veth1_macvtap: entered promiscuous mode [ 93.544490][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.573059][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.617229][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.633576][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.667988][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.687371][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.696135][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.735410][ T5949] loop6: detected capacity change from 0 to 524287999 [ 93.757511][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.811412][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.820054][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.857171][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.880658][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.893358][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.910022][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.100388][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.127087][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.185387][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.217378][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.284514][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.301575][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.395695][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.425442][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.480852][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.507643][ T51] Bluetooth: hci1: command tx timeout [ 94.513325][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.593584][ T51] Bluetooth: hci3: command tx timeout [ 94.671202][ T51] Bluetooth: hci2: command tx timeout [ 94.676688][ T51] Bluetooth: hci0: command tx timeout [ 94.694935][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.749123][ T51] Bluetooth: hci4: command tx timeout [ 94.752502][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.916673][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.953041][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.051183][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 96.301268][ T6008] Zero length message leads to an empty skb [ 96.375185][ T6010] warning: `syz.3.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.977631][ T5947] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.009169][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.162568][ T5947] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.177476][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 97.182301][ T5947] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 97.203909][ T43] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 97.214776][ T5947] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.221268][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.231424][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.256376][ T43] usb 2-1: config 0 has no interface number 0 [ 97.297882][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 97.299750][ T6020] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.333834][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.353672][ T43] usb 2-1: Product: syz [ 97.359100][ T43] usb 2-1: Manufacturer: syz [ 97.374029][ T43] usb 2-1: SerialNumber: syz [ 97.396721][ T43] usb 2-1: config 0 descriptor?? [ 97.405301][ T5947] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.460249][ T43] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 97.500089][ T43] usb 2-1: No valid video chain found. [ 97.577856][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.647594][ T5947] usb 2-1: USB disconnect, device number 2 [ 97.728610][ T43] usb 1-1: USB disconnect, device number 2 [ 97.746498][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.779119][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.816559][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 97.841623][ T6045] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.857523][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.879136][ T9] usb 4-1: config 0 descriptor?? [ 98.190414][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 98.306471][ T9] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 98.317001][ T9] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 98.345819][ T9] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 98.602022][ T6064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.54'. [ 98.611313][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.621372][ T6064] batadv_slave_1: entered promiscuous mode [ 98.705068][ T9] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 98.730752][ T9] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 98.741766][ T9] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -71 [ 98.767072][ T9] usb 4-1: USB disconnect, device number 2 [ 98.895473][ T3465] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.983998][ T3465] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.118401][ T3465] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.298238][ T3465] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.334860][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.60'. [ 99.547883][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.748816][ T3465] bridge_slave_1: left allmulticast mode [ 99.761671][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 99.777438][ T3465] bridge_slave_1: left promiscuous mode [ 99.784019][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.796976][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 99.819369][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 99.831828][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 99.855678][ T43] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 99.895597][ T3465] bridge_slave_0: left allmulticast mode [ 99.907337][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.917325][ T3465] bridge_slave_0: left promiscuous mode [ 99.923123][ T3465] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.938742][ T5889] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.946438][ T43] usb 2-1: Product: syz [ 99.979258][ T43] usb 2-1: Manufacturer: syz [ 99.984319][ T43] usb 2-1: SerialNumber: syz [ 100.008437][ T43] usb 2-1: config 0 descriptor?? [ 100.033209][ T43] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 100.093823][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.103698][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.124336][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.133534][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.141362][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.147451][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 100.184105][ T5889] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.197625][ T6095] netlink: 'syz.0.69': attribute type 1 has an invalid length. [ 100.197733][ T6095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.292493][ T43] scsi host1: usb-storage 2-1:0.0 [ 100.319943][ T5889] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.352574][ T5889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.369721][ T5889] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 100.405233][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.431490][ T5889] usb 4-1: config 0 descriptor?? [ 100.513818][ T5942] usb 2-1: USB disconnect, device number 3 [ 100.820625][ T3465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.835812][ T3465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.848239][ T3465] bond0 (unregistering): Released all slaves [ 100.881540][ T5889] hid (null): report_id 989525964 is invalid [ 100.906507][ T5889] hid (null): bogus close delimiter [ 100.932003][ T5889] hid (null): report_id 0 is invalid [ 100.961085][ T5889] hid (null): nested delimiters [ 100.993313][ T5889] hid (null): report_id 24797 is invalid [ 101.036156][ T5889] hid (null): bogus close delimiter [ 101.059295][ T5889] hid (null): report_id 35037 is invalid [ 101.078935][ T5889] hid (null): bogus close delimiter [ 101.158962][ T5889] usb 4-1: USB disconnect, device number 3 [ 101.299198][ T5825] IPVS: starting estimator thread 0... [ 101.439188][ T6116] IPVS: using max 25 ests per chain, 60000 per kthread [ 101.713521][ T3465] hsr_slave_0: left promiscuous mode [ 101.739296][ T3465] hsr_slave_1: left promiscuous mode [ 101.752380][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.779412][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.825752][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.845791][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.899128][ T3465] veth1_macvtap: left promiscuous mode [ 101.905128][ T3465] veth0_macvtap: left promiscuous mode [ 101.913512][ T3465] veth1_vlan: left promiscuous mode [ 101.919313][ T3465] veth0_vlan: left promiscuous mode [ 102.203179][ T5145] Bluetooth: hci4: command tx timeout [ 102.815651][ T3465] team0 (unregistering): Port device team_slave_1 removed [ 102.871159][ T3465] team0 (unregistering): Port device team_slave_0 removed [ 102.901278][ T5889] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.080555][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 103.096270][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.110843][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.121086][ T5889] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 103.130249][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.149694][ T5889] usb 1-1: config 0 descriptor?? [ 103.432778][ T6134] netlink: 92 bytes leftover after parsing attributes in process `syz.3.78'. [ 103.443120][ T6134] netem: unknown loss type 0 [ 103.451889][ T6134] netem: change failed [ 103.502917][ T6090] chnl_net:caif_netlink_parms(): no params data found [ 103.576905][ T5889] hid (null): report_id 54409 is invalid [ 103.623970][ T5889] hid (null): report_id 1880715515 is invalid [ 103.648964][ T5889] hid (null): unknown global tag 0xd [ 103.674577][ T5889] hid (null): global environment stack overflow [ 103.822033][ T5889] usb 1-1: string descriptor 0 read error: -71 [ 103.912239][ T5889] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 103.996859][ T6173] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 104.005822][ T5889] letsketch 0003:6161:4D15.0003: probe with driver letsketch failed with error -32 [ 104.063170][ T5889] usb 1-1: USB disconnect, device number 3 [ 104.135896][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 104.232343][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.264919][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.272101][ T5145] Bluetooth: hci4: command tx timeout [ 104.321774][ T6090] bridge_slave_0: entered allmulticast mode [ 104.373387][ T6090] bridge_slave_0: entered promiscuous mode [ 104.431458][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.460511][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.492464][ T6090] bridge_slave_1: entered allmulticast mode [ 104.513112][ T6090] bridge_slave_1: entered promiscuous mode [ 104.584125][ T6192] syz.1.98: attempt to access beyond end of device [ 104.584125][ T6192] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 104.620676][ T6192] syz.1.98: attempt to access beyond end of device [ 104.620676][ T6192] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 104.735141][ T6090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.782456][ T6090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.064177][ T6090] team0: Port device team_slave_0 added [ 105.093905][ T6090] team0: Port device team_slave_1 added [ 105.373199][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.397947][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.426861][ T6090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.440568][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.447693][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.473587][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.482042][ T6090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.799087][ T6090] hsr_slave_0: entered promiscuous mode [ 105.806960][ T6090] hsr_slave_1: entered promiscuous mode [ 105.819743][ T6090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.846248][ T6090] Cannot create hsr debugfs directory [ 106.353790][ T5145] Bluetooth: hci4: command tx timeout [ 106.654560][ T6253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.960221][ T6260] bridge0: entered promiscuous mode [ 106.986480][ T6260] macvlan2: entered promiscuous mode [ 106.994450][ T6090] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 107.051434][ T6090] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 107.120348][ T6090] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 107.172624][ T6090] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 107.573711][ T6090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.690124][ T6090] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.736743][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.743983][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.771688][ T5942] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.779722][ T6292] mmap: syz.0.121 (6292) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.835815][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.843151][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.976972][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 107.984339][ T5942] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 107.994715][ T5942] usb 2-1: config 0 has no interface number 0 [ 108.018655][ T5942] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 108.056751][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.072901][ T5942] usb 2-1: Product: syz [ 108.077129][ T5942] usb 2-1: Manufacturer: syz [ 108.124182][ T5942] usb 2-1: SerialNumber: syz [ 108.148011][ T5942] usb 2-1: config 0 descriptor?? [ 108.180025][ T5942] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 108.369636][ T5942] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 108.427616][ T51] Bluetooth: hci4: command tx timeout [ 108.467934][ T5942] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 108.814304][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 108.816990][ T5825] usb 2-1: USB disconnect, device number 4 [ 108.834740][ T6090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.868009][ T5825] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 108.930764][ T5825] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 108.976335][ T5825] quatech2 2-1:0.51: device disconnected [ 109.386002][ T43] IPVS: starting estimator thread 0... [ 109.497461][ T6325] IPVS: using max 27 ests per chain, 64800 per kthread [ 109.570359][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'. [ 109.655114][ T6332] block device autoloading is deprecated and will be removed. [ 109.698506][ T6332] syz.1.135: attempt to access beyond end of device [ 109.698506][ T6332] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 109.713606][ T6336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.137'. [ 109.935896][ T6090] veth0_vlan: entered promiscuous mode [ 109.964873][ T6090] veth1_vlan: entered promiscuous mode [ 110.108363][ T6090] veth0_macvtap: entered promiscuous mode [ 110.183112][ T6090] veth1_macvtap: entered promiscuous mode [ 110.295507][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.420649][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.483237][ T6090] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.502507][ T6090] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.513031][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 110.521054][ T6090] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.530857][ T6090] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.750852][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.824182][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.990745][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.003650][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.055135][ T6407] loop9: detected capacity change from 0 to 8 [ 112.082996][ T6407] Dev loop9: unable to read RDB block 8 [ 112.093867][ T6407] loop9: unable to read partition table [ 112.101498][ T6407] loop9: partition table beyond EOD, truncated [ 112.111874][ T6407] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 112.601116][ T1091] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.783803][ T1091] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.930144][ T1091] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.109342][ T1091] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.471130][ T6432] sctp: [Deprecated]: syz.0.170 (pid 6432) Use of int in max_burst socket option. [ 113.471130][ T6432] Use struct sctp_assoc_value instead [ 113.564701][ T1091] bridge_slave_1: left allmulticast mode [ 113.591303][ T1091] bridge_slave_1: left promiscuous mode [ 113.612533][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.690930][ T1091] bridge_slave_0: left allmulticast mode [ 113.727549][ T1091] bridge_slave_0: left promiscuous mode [ 113.733482][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.025690][ T30] audit: type=1326 audit(1749548097.328:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6452 comm="syz.0.174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b8778e929 code=0x0 [ 114.322182][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.332192][ T5145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.340780][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.352744][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.375526][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.955121][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.966827][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.980199][ T1091] bond0 (unregistering): Released all slaves [ 115.017503][ T6480] tap0: tun_chr_ioctl cmd 1074025675 [ 115.043259][ T6480] tap0: persist disabled [ 116.211220][ T1091] hsr_slave_0: left promiscuous mode [ 116.275260][ T1091] hsr_slave_1: left promiscuous mode [ 116.285964][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.309035][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.321743][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.347826][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.408182][ T1091] veth1_macvtap: left promiscuous mode [ 116.428321][ T5145] Bluetooth: hci3: command tx timeout [ 116.435534][ T1091] veth0_macvtap: left promiscuous mode [ 116.452358][ T1091] veth1_vlan: left promiscuous mode [ 116.467749][ T1091] veth0_vlan: left promiscuous mode [ 117.450954][ T1091] team0 (unregistering): Port device team_slave_1 removed [ 117.505791][ T1091] team0 (unregistering): Port device team_slave_0 removed [ 118.045604][ T6466] chnl_net:caif_netlink_parms(): no params data found [ 118.407104][ T6466] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.437302][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.455238][ T6466] bridge_slave_0: entered allmulticast mode [ 118.464347][ T6466] bridge_slave_0: entered promiscuous mode [ 118.484956][ T6466] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.514546][ T5145] Bluetooth: hci3: command tx timeout [ 118.517902][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.520531][ T5825] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.541133][ T6466] bridge_slave_1: entered allmulticast mode [ 118.549611][ T6466] bridge_slave_1: entered promiscuous mode [ 118.680110][ T6466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.701387][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 118.716280][ T6466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.749722][ T5825] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 118.765545][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.796911][ T5825] usb 4-1: Product: syz [ 118.807399][ T5825] usb 4-1: Manufacturer: syz [ 118.812081][ T5825] usb 4-1: SerialNumber: syz [ 118.848853][ T5825] usb 4-1: config 0 descriptor?? [ 118.901587][ T6466] team0: Port device team_slave_0 added [ 118.933938][ T6466] team0: Port device team_slave_1 added [ 118.957389][ T6584] netlink: 96 bytes leftover after parsing attributes in process `syz.0.216'. [ 119.166633][ T6466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.207702][ T6466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.237938][ T6466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.281093][ T6466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.317338][ T6466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.378805][ T5941] usb 4-1: USB disconnect, device number 4 [ 119.417589][ T6466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.473186][ T6601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.635089][ T6466] hsr_slave_0: entered promiscuous mode [ 119.668536][ T6466] hsr_slave_1: entered promiscuous mode [ 119.694436][ T6466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.715768][ T6466] Cannot create hsr debugfs directory [ 120.515563][ T6466] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 120.594959][ T5145] Bluetooth: hci3: command tx timeout [ 120.599346][ T6466] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 120.675915][ T6466] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 120.711640][ T6466] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 121.239409][ T6466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.297835][ T6466] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.423802][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.431088][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.479602][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.486826][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.747421][ T5881] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.908543][ T30] audit: type=1326 audit(1749552200.231:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6683 comm="syz.1.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a4f8e929 code=0x7ffc0000 [ 121.935023][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 121.970560][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 121.987457][ T30] audit: type=1326 audit(1749552200.231:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6683 comm="syz.1.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a4f8e929 code=0x7ffc0000 [ 122.016583][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 122.040915][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 122.071626][ T30] audit: type=1326 audit(1749552200.251:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6683 comm="syz.1.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fa9a4f8e929 code=0x7ffc0000 [ 122.093332][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 122.120253][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 122.137585][ T30] audit: type=1326 audit(1749552200.251:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6683 comm="syz.1.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a4f8e929 code=0x7ffc0000 [ 122.189527][ T5881] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 122.228182][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.236393][ T30] audit: type=1326 audit(1749552200.251:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6683 comm="syz.1.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a4f8e929 code=0x7ffc0000 [ 122.259589][ T6466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.274926][ T5881] usb 1-1: Product: syz [ 122.288169][ T5881] usb 1-1: Manufacturer: syz [ 122.293294][ T5881] usb 1-1: SerialNumber: syz [ 122.339031][ T5881] usb 1-1: config 0 descriptor?? [ 122.637367][ T5825] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.670212][ T5145] Bluetooth: hci3: command tx timeout [ 122.761977][ T5881] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 122.777381][ T5881] input input8: Device does not respond to id packet M [ 122.795334][ T5881] input input8: Device does not respond to id packet P [ 122.815735][ T5825] usb 2-1: Using ep0 maxpacket: 32 [ 122.823525][ T5825] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.838129][ T5825] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 122.862419][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.880841][ T5825] usb 2-1: Product: syz [ 122.885104][ T5825] usb 2-1: Manufacturer: syz [ 122.926335][ T5825] usb 2-1: SerialNumber: syz [ 122.934731][ T5825] usb 2-1: config 0 descriptor?? [ 122.996127][ T5881] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 123.029307][ T5881] input input8: Device does not respond to id packet B [ 123.049014][ T5881] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 123.055308][ T5881] input input8: Device does not respond to id packet N [ 123.083202][ T5881] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 123.105941][ T5881] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 123.122466][ T5881] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 123.131186][ T6466] veth0_vlan: entered promiscuous mode [ 123.142419][ T5881] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 123.165474][ T6466] veth1_vlan: entered promiscuous mode [ 123.176691][ T5942] IPVS: starting estimator thread 0... [ 123.210296][ T5881] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 123.255425][ T6466] veth0_macvtap: entered promiscuous mode [ 123.273566][ T5881] usb 1-1: USB disconnect, device number 4 [ 123.288087][ T6719] IPVS: using max 28 ests per chain, 67200 per kthread [ 123.312648][ T6466] veth1_macvtap: entered promiscuous mode [ 123.376961][ T6466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.409683][ T5825] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 123.412396][ T6466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.480445][ T6466] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.510575][ T6466] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.528723][ T6466] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.553145][ T6466] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.817014][ T6726] netlink: 24 bytes leftover after parsing attributes in process `syz.5.257'. [ 123.829978][ T5825] usb 2-1: USB disconnect, device number 5 [ 123.863406][ T6732] netlink: 'syz.3.259': attribute type 1 has an invalid length. [ 123.873598][ T6732] netlink: 224 bytes leftover after parsing attributes in process `syz.3.259'. [ 124.179559][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.203872][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.255178][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.266047][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.342308][ T6743] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 124.724577][ T6764] serio: Serial port ttynull [ 124.937486][ T5941] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.122886][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 125.135106][ T5941] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 125.152186][ T5941] usb 1-1: config 0 has no interface number 0 [ 125.170114][ T5941] usb 1-1: config 0 interface 184 has no altsetting 0 [ 125.195517][ T5941] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 125.217428][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.252442][ T5941] usb 1-1: Product: syz [ 125.262550][ T5941] usb 1-1: Manufacturer: syz [ 125.287381][ T5941] usb 1-1: SerialNumber: syz [ 125.303295][ T5941] usb 1-1: config 0 descriptor?? [ 125.324993][ T5941] smsc75xx v1.0.0 [ 125.331374][ T6789] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 125.335073][ T5941] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 125.420407][ T5941] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 125.533823][ T5941] usb 1-1: USB disconnect, device number 5 [ 125.952251][ C1] Illegal XDP return value 16128 on prog (id 25) dev lo, expect packet loss! [ 126.311329][ T6832] input: syz1 as /devices/virtual/input/input9 [ 127.297667][ T43] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 127.394100][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 127.417653][ T6879] team0: No ports can be present during mode change [ 127.431022][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 127.488458][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 127.504496][ T43] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 127.532784][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 127.575319][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 127.605671][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 127.650188][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 127.700036][ T43] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 127.710492][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.743852][ T43] usb 7-1: Product: syz [ 127.760891][ T43] usb 7-1: Manufacturer: syz [ 127.765587][ T43] usb 7-1: SerialNumber: syz [ 127.776444][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 127.796550][ T43] usb 7-1: config 0 descriptor?? [ 127.859116][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.974603][ T6890] bridge_slave_1 (unregistering): left allmulticast mode [ 127.988787][ T6890] bridge_slave_1 (unregistering): left promiscuous mode [ 127.996252][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.243735][ T43] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 128.266048][ T43] input input10: Device does not respond to id packet M [ 128.289130][ T6908] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 128.308847][ T43] input input10: Device does not respond to id packet P [ 128.328601][ T1091] Bluetooth: hci5: Frame reassembly failed (-84) [ 128.510382][ T43] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 128.530734][ T43] input input10: Device does not respond to id packet B [ 128.554058][ T43] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 128.577415][ T43] input input10: Device does not respond to id packet N [ 128.602820][ T43] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 128.614046][ T43] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 128.624127][ T43] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 128.650835][ T43] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 128.669751][ T43] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input10 [ 128.718497][ T43] usb 7-1: USB disconnect, device number 2 [ 129.467598][ T5825] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 129.592240][ T6955] vivid-006: disconnect [ 129.601124][ T6954] vivid-006: reconnect [ 129.638407][ T5825] usb 6-1: Using ep0 maxpacket: 32 [ 129.657097][ T5825] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.683168][ T5825] usb 6-1: config 0 has no interface number 0 [ 129.700090][ T5825] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 129.717325][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.725390][ T5825] usb 6-1: Product: syz [ 129.742402][ T5825] usb 6-1: Manufacturer: syz [ 129.752837][ T5825] usb 6-1: SerialNumber: syz [ 129.769689][ T5825] usb 6-1: config 0 descriptor?? [ 129.784466][ T5825] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 129.806455][ T5825] usb 6-1: selecting invalid altsetting 1 [ 129.813229][ T5825] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 129.826946][ T5825] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 129.838529][ T5825] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 129.846997][ T5825] usb 6-1: media controller created [ 129.889105][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.056984][ T6972] netlink: 48 bytes leftover after parsing attributes in process `syz.6.346'. [ 130.057181][ T5825] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 130.105047][ T5825] zl10353_read_register: readreg error (reg=127, ret==-32) [ 130.159395][ T43] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 130.326565][ T6983] loop6: detected capacity change from 0 to 524287999 [ 130.334782][ T43] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 130.347367][ T5145] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 130.347614][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 130.353872][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.403949][ T43] usb 4-1: config 0 descriptor?? [ 130.421218][ T43] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 130.586270][ T6991] macsec1: entered promiscuous mode [ 130.607429][ T6991] macvlan1: entered promiscuous mode [ 130.636711][ T43] gspca_sn9c2028: read1 error -32 [ 130.643813][ T6991] macvlan1: left promiscuous mode [ 130.853666][ T43] gspca_sn9c2028: read1 error -71 [ 130.862190][ T43] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 130.885228][ T43] usb 4-1: USB disconnect, device number 5 [ 130.943829][ T7002] mac80211_hwsim hwsim14 wlan0: vlans aren't supported yet for dev_uc|mc_add() [ 131.148491][ T6940] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 131.168603][ T5825] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 131.278110][ T5825] usb 6-1: USB disconnect, device number 2 [ 131.728651][ T7023] Falling back ldisc for ttyS3. [ 131.952246][ T7039] netlink: 16 bytes leftover after parsing attributes in process `syz.6.374'. [ 131.980576][ T7039] netlink: 16 bytes leftover after parsing attributes in process `syz.6.374'. [ 132.757514][ T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 132.911340][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.954373][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 132.974806][ T43] usb 6-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 133.003147][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.042408][ T43] usb 6-1: config 0 descriptor?? [ 133.058200][ T43] smsusb:smsusb_probe: board id=8, interface number 0 [ 133.089662][ T43] smsusb:smsusb_probe: Device initialized with return code -19 [ 133.282069][ T43] usb 6-1: USB disconnect, device number 3 [ 133.577189][ T7089] openvswitch: netlink: Multiple metadata blocks provided [ 133.707781][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.398'. [ 133.724213][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.398'. [ 134.457473][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 134.545391][ T7122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.571420][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'. [ 134.617768][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 134.633367][ T9] usb 7-1: config 0 has no interfaces? [ 134.648689][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.662676][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.676240][ T9] usb 7-1: Product: syz [ 134.684753][ T9] usb 7-1: Manufacturer: syz [ 134.694414][ T9] usb 7-1: SerialNumber: syz [ 134.706556][ T9] usb 7-1: config 0 descriptor?? [ 134.989672][ T5942] usb 7-1: USB disconnect, device number 3 [ 135.493605][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 135.722224][ T7168] netlink: 'syz.5.425': attribute type 1 has an invalid length. [ 135.730670][ T7168] netlink: 152 bytes leftover after parsing attributes in process `syz.5.425'. [ 135.740846][ T7168] netlink: 20 bytes leftover after parsing attributes in process `syz.5.425'. [ 136.649467][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.443'. [ 137.240894][ T7235] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 137.379685][ T30] audit: type=1800 audit(1749552215.701:8): pid=7237 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.454" name="[kvm-gmem]" dev="anon_inodefs" ino=14351 res=0 errno=0 [ 137.488497][ T7241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.456'. [ 137.752825][ T7252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.460'. [ 138.019375][ T7254] xt_CT: No such helper "snmp" [ 138.440124][ T7269] netlink: 180 bytes leftover after parsing attributes in process `syz.0.467'. [ 138.896344][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 139.173780][ T7296] tipc: Started in network mode [ 139.180090][ T7296] tipc: Node identity 00000000000000400000000000000001, cluster identity 4711 [ 139.212355][ T7296] tipc: Enabling of bearer rejected, failed to enable media [ 139.850735][ T7318] netlink: 32 bytes leftover after parsing attributes in process `syz.0.484'. [ 140.010542][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 140.303059][ T7333] Bluetooth: MGMT ver 1.23 [ 141.022598][ T30] audit: type=1326 audit(1749552219.341:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7364 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83778e929 code=0x7ffc0000 [ 141.101213][ T30] audit: type=1326 audit(1749552219.371:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7364 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83778e929 code=0x7ffc0000 [ 141.178389][ T30] audit: type=1326 audit(1749552219.381:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7364 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb83778e929 code=0x7ffc0000 [ 141.233559][ T7371] Attempt to restore checkpoint with obsolete wellknown handles [ 141.272431][ T30] audit: type=1326 audit(1749552219.381:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7364 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83778e929 code=0x7ffc0000 [ 141.359819][ T30] audit: type=1326 audit(1749552219.381:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7364 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83778e929 code=0x7ffc0000 [ 141.411691][ T7374] IPVS: Scheduler module ip_vs_ not found [ 141.467799][ T30] audit: type=1326 audit(1749552219.381:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7364 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb83778e929 code=0x7ffc0000 [ 141.554929][ T30] audit: type=1326 audit(1749552219.381:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7364 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83778e929 code=0x7ffc0000 [ 141.585271][ T7382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.507'. [ 141.640961][ T30] audit: type=1326 audit(1749552219.381:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7364 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83778e929 code=0x7ffc0000 [ 141.733384][ T30] audit: type=1326 audit(1749552219.381:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7364 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fb83778e929 code=0x7ffc0000 [ 144.268415][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 144.399409][ T7503] process 'syz.6.551' launched './file2' with NULL argv: empty string added [ 144.409746][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.548'. [ 144.422586][ T7499] netlink: 165 bytes leftover after parsing attributes in process `syz.1.549'. [ 144.906212][ T7527] CIFS: VFS: Malformed UNC in devname [ 145.031984][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 145.057445][ T5947] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 145.116933][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.564'. [ 145.147704][ T5825] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 145.221890][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.239784][ T5947] usb 7-1: Using ep0 maxpacket: 32 [ 145.252494][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.269603][ T5947] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 145.277828][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 145.277844][ T30] audit: type=1326 audit(1749552223.591:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.5.565" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd6b9d8e929 code=0x0 [ 145.307723][ T5947] usb 7-1: config 0 has no interface number 0 [ 145.316665][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 145.326895][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 145.342755][ T5825] usb 2-1: config 0 has no interfaces? [ 145.349548][ T5947] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 145.360608][ T9] usb 4-1: SerialNumber: syz [ 145.368049][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.376716][ T5825] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 145.388602][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=234, SerialNumber=2 [ 145.398520][ T5947] usb 7-1: Product: syz [ 145.405674][ T5947] usb 7-1: Manufacturer: syz [ 145.410741][ T5825] usb 2-1: Product: syz [ 145.414963][ T5825] usb 2-1: Manufacturer: syz [ 145.420764][ T5947] usb 7-1: SerialNumber: syz [ 145.427638][ T5825] usb 2-1: SerialNumber: syz [ 145.433671][ T5947] usb 7-1: config 0 descriptor?? [ 145.452601][ T5825] usb 2-1: config 0 descriptor?? [ 145.461224][ T5947] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 145.613274][ T9] usb 4-1: 0:2 : does not exist [ 145.640622][ T9] usb 4-1: USB disconnect, device number 6 [ 145.699912][ T5947] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 145.718171][ T5825] usb 2-1: USB disconnect, device number 6 [ 145.756217][ T5947] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 145.910491][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 32 [ 146.128606][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 146.130886][ T5942] usb 7-1: USB disconnect, device number 4 [ 146.187679][ T5942] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 146.216018][ T5942] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 146.273037][ T5942] quatech2 7-1:0.51: device disconnected [ 147.431722][ T7631] tun0: tun_chr_ioctl cmd 1074812118 [ 148.086361][ T7661] input: syz1 as /devices/virtual/input/input11 [ 148.090453][ T30] audit: type=1326 audit(1749552226.411:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7658 comm="syz.5.604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6b9d8e929 code=0x0 [ 150.107651][ T7732] netlink: 16 bytes leftover after parsing attributes in process `syz.6.629'. [ 150.487747][ T30] audit: type=1326 audit(1749552228.801:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7751 comm="syz.6.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eeb8e929 code=0x7ffc0000 [ 150.577679][ T30] audit: type=1326 audit(1749552228.851:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7751 comm="syz.6.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f04eeb8e929 code=0x7ffc0000 [ 150.653867][ T30] audit: type=1326 audit(1749552228.851:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7751 comm="syz.6.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eeb8e929 code=0x7ffc0000 [ 150.733773][ T30] audit: type=1326 audit(1749552228.851:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7751 comm="syz.6.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eeb8e929 code=0x7ffc0000 [ 150.847037][ T30] audit: type=1326 audit(1749552228.851:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7751 comm="syz.6.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f04eeb8e929 code=0x7ffc0000 [ 150.904091][ T30] audit: type=1326 audit(1749552228.851:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7751 comm="syz.6.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eeb8e929 code=0x7ffc0000 [ 150.985647][ T30] audit: type=1326 audit(1749552228.851:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7751 comm="syz.6.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eeb8e929 code=0x7ffc0000 [ 151.097442][ T30] audit: type=1326 audit(1749552228.851:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7751 comm="syz.6.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f04eeb8e929 code=0x7ffc0000 [ 151.187317][ T30] audit: type=1326 audit(1749552228.851:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7751 comm="syz.6.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eeb8e929 code=0x7ffc0000 [ 151.249646][ T30] audit: type=1326 audit(1749552228.851:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7751 comm="syz.6.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eeb8e929 code=0x7ffc0000 [ 151.411469][ T7795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.654'. [ 151.518696][ T7804] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 152.003231][ T7824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.664'. [ 152.108892][ T7824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.664'. [ 152.225956][ T7830] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 153.268060][ T7879] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 153.274908][ T7879] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.337988][ T7879] vhci_hcd vhci_hcd.0: Device attached [ 153.557345][ T5947] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 153.567391][ T5825] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 153.730568][ T5947] usb 6-1: config 0 has no interfaces? [ 153.749203][ T5947] usb 6-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 153.765017][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.781471][ T5947] usb 6-1: config 0 descriptor?? [ 154.025494][ T5947] usb 6-1: USB disconnect, device number 4 [ 154.046178][ T7881] vhci_hcd: connection closed [ 154.076038][ T1091] vhci_hcd: stop threads [ 154.098957][ T1091] vhci_hcd: release socket [ 154.121656][ T1091] vhci_hcd: disconnect device [ 154.148633][ T5825] usb 43-1: device descriptor read/64, error -71 [ 154.363739][ T5825] vhci_hcd: vhci_device speed not set [ 154.698278][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'. [ 155.027741][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.712'. [ 155.038649][ T7963] netlink: 'syz.1.711': attribute type 10 has an invalid length. [ 155.062775][ T7963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.711'. [ 155.145944][ T7970] netlink: 56 bytes leftover after parsing attributes in process `syz.0.714'. [ 155.175340][ T7963] team0: Port device geneve0 added [ 155.227555][ T43] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 155.407301][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 155.440196][ T43] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.472669][ T43] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.513576][ T43] usb 7-1: config 0 interface 0 has no altsetting 0 [ 155.543202][ T43] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 155.570793][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.598304][ T43] usb 7-1: config 0 descriptor?? [ 155.603926][ T7987] kvm: kvm [7986]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x40600 [ 156.041480][ T43] hid (null): unknown global tag 0xc [ 156.075078][ T43] hid (null): report_id 0 is invalid [ 156.094462][ T43] hid (null): unknown global tag 0xe [ 156.252827][ T5941] usb 7-1: USB disconnect, device number 5 [ 156.577340][ T5947] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 156.727492][ T5947] usb 4-1: Using ep0 maxpacket: 8 [ 156.734241][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.747045][ T5947] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 156.762385][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.775437][ T5947] usb 4-1: config 0 descriptor?? [ 157.203799][ T5947] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 157.264849][ T5947] hid-multitouch 0003:0EEF:72C4.0005: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 157.367746][ T5825] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 157.462382][ T5947] usb 4-1: USB disconnect, device number 7 [ 157.564757][ T5825] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 157.584220][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.599411][ T5825] usb 2-1: Product: syz [ 157.603666][ T5825] usb 2-1: Manufacturer: syz [ 157.625726][ T5825] usb 2-1: SerialNumber: syz [ 157.643810][ T5825] usb 2-1: config 0 descriptor?? [ 157.660535][ T5825] ch341 2-1:0.0: ch341-uart converter detected [ 158.056350][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.754'. [ 158.311644][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 158.479268][ T5825] usb 2-1: failed to send control message: -71 [ 158.485720][ T5825] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 158.518584][ T5825] usb 2-1: USB disconnect, device number 7 [ 158.526001][ T5825] ch341 2-1:0.0: device disconnected [ 158.838555][ T8100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 158.850852][ T8100] netlink: 16 bytes leftover after parsing attributes in process `syz.3.768'. [ 158.868552][ T978] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 159.032644][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.056147][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.068227][ T978] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 159.080038][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.096327][ T978] usb 6-1: config 0 descriptor?? [ 159.537000][ T978] itetech 0003:06CB:73F6.0006: unknown main item tag 0x0 [ 159.558833][ T978] itetech 0003:06CB:73F6.0006: unbalanced collection at end of report description [ 159.588187][ T978] itetech 0003:06CB:73F6.0006: probe with driver itetech failed with error -22 [ 159.725666][ T5947] usb 6-1: USB disconnect, device number 5 [ 159.986079][ T8135] cifs: Unknown parameter 'mode' [ 160.087525][ T978] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 160.257917][ T978] usb 1-1: Using ep0 maxpacket: 32 [ 160.283930][ T978] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 160.295985][ T978] usb 1-1: config 0 has no interface number 0 [ 160.307570][ T978] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.318983][ T978] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.329414][ T978] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 160.353988][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.383504][ T978] usb 1-1: config 0 descriptor?? [ 160.903451][ T5825] kernel write not supported for file /input/event2 (pid: 5825 comm: kworker/0:3) [ 160.917754][ T5947] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 161.044179][ T978] uclogic 0003:28BD:0094.0007: pen parameters not found [ 161.051695][ T978] uclogic 0003:28BD:0094.0007: interface is invalid, ignoring [ 161.065807][ T978] usb 1-1: USB disconnect, device number 6 [ 161.082339][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 161.096439][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 161.104904][ T5947] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 161.119004][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 161.134705][ T5947] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 161.144324][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.158796][ T5947] usb 7-1: Product: syz [ 161.163144][ T5947] usb 7-1: Manufacturer: syz [ 161.167963][ T5947] usb 7-1: SerialNumber: syz [ 161.176277][ T5947] usb 7-1: config 0 descriptor?? [ 161.182601][ T8162] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 161.191430][ T8162] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 161.200994][ T5947] usb 7-1: ucan: probing device on interface #0 [ 266.247226][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 266.254335][ C1] rcu: 0-...!: (0 ticks this GP) idle=4e9c/0/0x1 softirq=30913/30913 fqs=123 [ 266.263956][ C1] rcu: (detected by 1, t=10502 jiffies, g=23113, q=439 ncpus=2) [ 266.271746][ C1] Sending NMI from CPU 1 to CPUs 0: [ 266.271784][ C0] NMI backtrace for cpu 0 [ 266.271817][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 266.271837][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.271852][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 266.271907][ C0] Code: 8b 3d 44 d6 f8 0b 48 89 de 5b e9 33 86 56 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 a0 99 92 65 8b 15 28 52 d9 10 81 e2 00 01 ff 00 [ 266.271923][ C0] RSP: 0018:ffffc90000007d00 EFLAGS: 00000002 [ 266.271942][ C0] RAX: ffffffff81ae92f6 RBX: ffff888056918340 RCX: 8c47bf1312db6f00 [ 266.271955][ C0] RDX: ffffffff8de95280 RSI: ffffffff8be1af60 RDI: ffffffff8be1af20 [ 266.271968][ C0] RBP: 0000000000000001 R08: ffffffff8f9fdef7 R09: 1ffffffff1f3fbde [ 266.271980][ C0] R10: dffffc0000000000 R11: fffffbfff1f3fbdf R12: dffffc0000000000 [ 266.271993][ C0] R13: 0000000000000000 R14: ffff8880b8627bc0 R15: 0000000000000000 [ 266.272004][ C0] FS: 0000000000000000(0000) GS:ffff888125c86000(0000) knlGS:0000000000000000 [ 266.272017][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.272029][ C0] CR2: 00007fd6bac95f98 CR3: 0000000033320000 CR4: 00000000003526f0 [ 266.272044][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 266.272054][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 266.272064][ C0] Call Trace: [ 266.272075][ C0] [ 266.272082][ C0] enqueue_hrtimer+0xa6/0x3a0 [ 266.272114][ C0] __hrtimer_run_queues+0x656/0xc60 [ 266.272156][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 266.272180][ C0] ? read_tsc+0x9/0x20 [ 266.272206][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 266.272248][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 266.272276][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 266.272303][ C0] [ 266.272308][ C0] [ 266.272315][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.272334][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 266.272359][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 55 29 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 266.272373][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 266.272387][ C0] RAX: 8c47bf1312db6f00 RBX: ffffffff81974f68 RCX: 8c47bf1312db6f00 [ 266.272400][ C0] RDX: 0000000000000001 RSI: ffffffff8d96d7f4 RDI: ffffffff8be1af80 [ 266.272412][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 266.272424][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8f9fdef0 [ 266.272438][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 266.272451][ C0] ? do_idle+0x1e8/0x510 [ 266.272483][ C0] default_idle+0x13/0x20 [ 266.272499][ C0] default_idle_call+0x74/0xb0 [ 266.272516][ C0] do_idle+0x1e8/0x510 [ 266.272545][ C0] ? __pfx_do_idle+0x10/0x10 [ 266.272570][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.272596][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 266.272621][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 266.272649][ C0] cpu_startup_entry+0x44/0x60 [ 266.272675][ C0] rest_init+0x2de/0x300 [ 266.272694][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 266.272714][ C0] start_kernel+0x47d/0x500 [ 266.272740][ C0] x86_64_start_reservations+0x24/0x30 [ 266.272758][ C0] x86_64_start_kernel+0x143/0x1c0 [ 266.272775][ C0] common_startup_64+0x13e/0x147 [ 266.272802][ C0] [ 266.273772][ C1] rcu: rcu_preempt kthread starved for 9885 jiffies! g23113 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 266.630020][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 266.640014][ C1] rcu: RCU grace-period kthread stack dump: [ 266.645929][ C1] task:rcu_preempt state:R running task stack:27192 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 266.659465][ C1] Call Trace: [ 266.662768][ C1] [ 266.665735][ C1] __schedule+0x16a2/0x4cb0 [ 266.670290][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 266.675521][ C1] ? schedule+0x165/0x360 [ 266.679892][ C1] ? __lock_acquire+0xab9/0xd20 [ 266.684776][ C1] ? __pfx___schedule+0x10/0x10 [ 266.689681][ C1] ? schedule+0x91/0x360 [ 266.693962][ C1] schedule+0x165/0x360 [ 266.698170][ C1] schedule_timeout+0x12b/0x270 [ 266.703051][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 266.708458][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 266.714387][ C1] ? __pfx_process_timeout+0x10/0x10 [ 266.719718][ C1] ? prepare_to_swait_event+0x341/0x380 [ 266.725299][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 266.730214][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 266.736405][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 266.741722][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 266.746960][ C1] ? finish_swait+0xcd/0x1f0 [ 266.751580][ C1] rcu_gp_kthread+0x99/0x390 [ 266.756216][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 266.761450][ C1] ? __kthread_parkme+0x7b/0x200 [ 266.766427][ C1] ? __kthread_parkme+0x1a1/0x200 [ 266.771505][ C1] kthread+0x70e/0x8a0 [ 266.775610][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 266.780844][ C1] ? __pfx_kthread+0x10/0x10 [ 266.785470][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 266.790704][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.795932][ C1] ? __pfx_kthread+0x10/0x10 [ 266.800550][ C1] ret_from_fork+0x3fc/0x770 [ 266.805177][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 266.810336][ C1] ? __switch_to_asm+0x39/0x70 [ 266.815128][ C1] ? __switch_to_asm+0x33/0x70 [ 266.819917][ C1] ? __pfx_kthread+0x10/0x10 [ 266.824542][ C1] ret_from_fork_asm+0x1a/0x30 [ 266.829349][ C1] [ 266.832844][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 266.839222][ C1] CPU: 1 UID: 0 PID: 8168 Comm: syz.1.801 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 266.851224][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.861305][ C1] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 266.868025][ C1] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 50 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 fb 73 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 e0 73 0b [ 266.887655][ C1] RSP: 0018:ffffc90017187360 EFLAGS: 00000293 [ 266.893749][ C1] RAX: ffffffff81b4da10 RBX: ffff8880b873c9c0 RCX: ffff8880266e3c00 [ 266.901747][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 266.909739][ C1] RBP: ffffc900171874c0 R08: ffffffff8f9fdef7 R09: 1ffffffff1f3fbde [ 266.917739][ C1] R10: dffffc0000000000 R11: fffffbfff1f3fbdf R12: 1ffff110170c868d [ 266.925740][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8643468 [ 266.933736][ C1] FS: 0000000000000000(0000) GS:ffff888125d86000(0000) knlGS:0000000000000000 [ 266.942689][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.949293][ C1] CR2: 0000001b2fc1cff8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 266.957296][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 266.965290][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 266.973288][ C1] Call Trace: [ 266.976595][ C1] [ 266.979567][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 266.985960][ C1] ? rcu_is_watching+0x15/0xb0 [ 266.990776][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 266.996061][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 267.001221][ C1] flush_tlb_mm_range+0x6b1/0x12c0 [ 267.006369][ C1] ? free_pgd_range+0x144b/0x14c0 [ 267.011453][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 267.017057][ C1] tlb_flush_mmu+0x1a7/0x680 [ 267.021717][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 267.026359][ C1] ? free_pgd_range+0x144b/0x14c0 [ 267.031427][ C1] free_ldt_pgtables+0x17b/0x320 [ 267.036415][ C1] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 267.041936][ C1] ? down_read+0x1ad/0x2e0 [ 267.046384][ C1] exit_mmap+0x17c/0xb50 [ 267.050657][ C1] ? uprobe_clear_state+0x20f/0x290 [ 267.055891][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 267.060689][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 267.066395][ C1] ? __pfx_exit_aio+0x10/0x10 [ 267.071120][ C1] ? uprobe_clear_state+0x274/0x290 [ 267.076349][ C1] ? mm_update_next_owner+0xa7/0x870 [ 267.081668][ C1] __mmput+0x118/0x420 [ 267.085781][ C1] exit_mm+0x1da/0x2c0 [ 267.089893][ C1] ? __pfx_exit_mm+0x10/0x10 [ 267.094513][ C1] ? rcu_is_watching+0x15/0xb0 [ 267.099322][ C1] do_exit+0x640/0x22e0 [ 267.103520][ C1] ? do_raw_spin_lock+0x121/0x290 [ 267.108575][ C1] ? __pfx_do_exit+0x10/0x10 [ 267.113221][ C1] do_group_exit+0x21c/0x2d0 [ 267.117922][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.123161][ C1] get_signal+0x125e/0x1310 [ 267.127727][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 267.133309][ C1] ? __pfx_task_work_add+0x10/0x10 [ 267.138452][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 267.144638][ C1] ? __pfx_raw_ioctl+0x10/0x10 [ 267.149440][ C1] ? __fget_files+0x2a/0x420 [ 267.154074][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 267.159569][ C1] exit_to_user_mode_loop+0x75/0x110 [ 267.164897][ C1] do_syscall_64+0x2bd/0x3b0 [ 267.169514][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.175605][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 267.181789][ C1] ? clear_bhb_loop+0x60/0xb0 [ 267.186504][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.192429][ C1] RIP: 0033:0x7fa9a4f8e52b [ 267.196882][ C1] Code: Unable to access opcode bytes at 0x7fa9a4f8e501. [ 267.204095][ C1] RSP: 002b:00007fa9a5e90f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.212626][ C1] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007fa9a4f8e52b [ 267.220628][ C1] RDX: 00007fa9a5e91fe0 RSI: 0000000080085502 RDI: 0000000000000003 [ 267.228623][ C1] RBP: 00007fa9a5e91fe0 R08: 0000000000000080 R09: 00007fa9a5e90fd8 [ 267.236618][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 267.244610][ C1] R13: 0000000800000000 R14: 0000000000000012 R15: 00007fa9a501ba88 [ 267.252630][ C1]