last executing test programs: 15m40.264616589s ago: executing program 32 (id=724): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x10010, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) 10m19.077897014s ago: executing program 33 (id=6836): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x71cf8, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000380)={0x800080, 0x3, 0x5, 0x9, 0x0, 0x4000055a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000bc0)={0x800080, 0x858, 0x8, 0x7, 0x43, 0x558}) 10m18.174714562s ago: executing program 34 (id=6841): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000001c0)={0x0, 0x3}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2) 7m44.167893905s ago: executing program 0 (id=9102): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) 7m42.685044847s ago: executing program 0 (id=9115): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@host}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, 0x0) 7m42.378356058s ago: executing program 0 (id=9120): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 7m41.641236001s ago: executing program 0 (id=9126): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 7m41.542845591s ago: executing program 0 (id=9128): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) close(r0) 7m41.097184887s ago: executing program 0 (id=9135): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) 7m40.750365143s ago: executing program 35 (id=9135): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) 6m2.206232366s ago: executing program 8 (id=10562): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 6m2.105542549s ago: executing program 8 (id=10563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0, 0x0, 0xbe}, 0x18) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) 6m2.004148098s ago: executing program 8 (id=10565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x5}]}]}, 0x80}}, 0x0) 6m1.798972474s ago: executing program 8 (id=10570): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 6m1.692307777s ago: executing program 8 (id=10572): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 6m1.632123253s ago: executing program 8 (id=10573): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r0, 0x25, &(0x7f0000000140)={0x2, 0x2, 0x5, 0x80000000}) 5m46.557167817s ago: executing program 36 (id=10573): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r0, 0x25, &(0x7f0000000140)={0x2, 0x2, 0x5, 0x80000000}) 3m46.363297413s ago: executing program 7 (id=12539): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8050}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x5, 0x3f, 0x1a, "3eccd25569e20900"}) 3m46.136028958s ago: executing program 7 (id=12544): sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffd}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x457) 3m45.918098682s ago: executing program 7 (id=12547): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) 3m44.80082735s ago: executing program 7 (id=12560): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m44.728118047s ago: executing program 7 (id=12562): write(0xffffffffffffffff, &(0x7f0000000300)="1c0000001a", 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x406, 0x3ff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000340)="a9", 0x0}, 0x20) 3m44.377102684s ago: executing program 7 (id=12567): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x810) 3m43.943242254s ago: executing program 37 (id=12567): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x810) 1m20.064618855s ago: executing program 4 (id=14393): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r1, r1, 0x2f, 0x2028, 0x4, @void, @void, @value=r2}, 0x20) 1m19.488071949s ago: executing program 4 (id=14402): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="74d254b0a89b9e0ad83bf65e9231313e1216e126afc1e2362017d306f8572efbceaec5c9f50b998582b9df4aab3a7a5c21cdc3d31e4630a092edd2ee839b698f9fd0f3d63309e35e740ce9627b75d32c88af78f6bfb1fd16809f53ba97559fd8a2406e3aeae1148d1e5bbfcb75d4c0076d9b60e207a936333bfcf7662ffe03489b30cfecee5478383bcf0cec712746a7829a32f30a7eaeba579193133102c869d0dd18508cb19d730fee7de917eef6bcd40065e1e490f5ef46fbf7f6b9e121eca5fd47a893389a571d7959469cb0ca51278afcc28a71a2f74af7c85f99065a8af7751a7a", 0xe4}, {&(0x7f0000000180)="f768ea36331e3aa4931f9fb23233c7d5f49f4f7c9c0ca560fffec71fe18ea4e0cc4171986fdd53c82b38e83d3c4daf3044f567881e07c762a35243aa5f12d0a7f2dcc02367a328ec6d714b77da9e98bbdea3925122711001a76bbfa8453b9e46328c1b337c5333f4b0a12f3b284bb5207ec675fd53b63f4352d844293360ce06a81c9816f36168cf6878b7ff5188be79e1d4915d90fc53710877a7826465eb263f3b0eda74c99fd0d153a47e36792b2295a348aedad54da31566050806418c46c8fe990b8448cb8c6712b89cf0cba654ca0ddb0bf8855a408ae9a579419bc372b9778f57baba5f3f068b5ff14169bd83", 0xf0}, {&(0x7f0000000280)="d433c1e862654ca56fc551afea0cbd5f02ffada48131ea37778c957573b89deee1369b3abd28e1508bfa47dfeb824f430ec2c43b8f3895a8be7b194b4144a92740729d815c90e6347b3fbd58eba9ddf2c09e2e7ee5b286ec8eb80a1002f1f0e4ac3948afa64c5f185d9b6c9e40f6b2d4e0e62a5082a7f17d478b6dab0558923ef3176982f6dfe3c3e9c0f8b9bdd39085e87e5569b96ad9", 0x97}, {&(0x7f0000000380)="27bfef9e0f", 0x5}, {&(0x7f00000003c0)="9e163e81f45c2244fc9ab3dc09cb76af92d53a7aa0ab958cb92c0efc5e10332e6fa2477bb1405d8997a18daa294fa97a2cc4defbc7b73fa3c7675154a3dae8a32ea780f386d2e0337326cda680cc4662ad25498880ead1f7aeb56ff587b9bda7da375a", 0x63}, {&(0x7f0000000440)="e2f6bfb4516340a8de7cb55b1b5670ca53291ce242fd3dbf286bcf8bbdd1be9cd4eb9c83f35dcf8ce59e0b9b9f9e", 0x2e}], 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 1m19.117257407s ago: executing program 4 (id=14408): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m18.872362832s ago: executing program 4 (id=14412): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x104e22}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m18.736939946s ago: executing program 4 (id=14414): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$bind(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x2080, 0x0) 1m17.204999837s ago: executing program 4 (id=14433): creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x11) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) 1m17.002590765s ago: executing program 38 (id=14433): creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x11) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) 48.773136599s ago: executing program 9 (id=14792): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x10) 48.675989489s ago: executing program 9 (id=14794): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000003c000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) readv(r0, &(0x7f0000003180)=[{&(0x7f0000000040)=""/32, 0x20}], 0x1) 47.070660945s ago: executing program 9 (id=14806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000c40)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc4106(gcm(aes)))\x00'}, 0x58) bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 35.706682089s ago: executing program 9 (id=14806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000c40)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc4106(gcm(aes)))\x00'}, 0x58) bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 33.957247578s ago: executing program 5 (id=14922): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 33.823784787s ago: executing program 5 (id=14925): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0xad5, &(0x7f0000000040)={0x0, 0xfffffffc}) close(r1) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 32.875142669s ago: executing program 5 (id=14938): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 32.711674565s ago: executing program 5 (id=14940): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 32.515524135s ago: executing program 5 (id=14943): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x24044880) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) 30.472419338s ago: executing program 5 (id=14954): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf253800000008000300", @ANYRES32=r3, @ANYBLOB='\f\x00X\x00@'], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008010) 30.052520258s ago: executing program 39 (id=14954): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf253800000008000300", @ANYRES32=r3, @ANYBLOB='\f\x00X\x00@'], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008010) 17.813707315s ago: executing program 9 (id=14806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000c40)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc4106(gcm(aes)))\x00'}, 0x58) bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.084038877s ago: executing program 2 (id=15162): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.742298903s ago: executing program 1 (id=15166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 3.619613078s ago: executing program 1 (id=15167): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dccc) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x11, 0xa, 0x5) r0 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES64=r0], 0x0) 3.402314772s ago: executing program 3 (id=15169): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0xebd, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0xfff1}, {0x3}, {0x4, 0x8}}}, 0x24}}, 0x0) 3.243633876s ago: executing program 3 (id=15170): unshare(0x60480) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84) mount(0x0, &(0x7f0000005880)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x18010, 0x0) syz_clone(0xc00e4000, 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000200)='./file0\x00') 3.063451842s ago: executing program 2 (id=15171): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x2, "94c492eb0165203d36bec70800890100000000000000e1100a0000005900", 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2.686040137s ago: executing program 6 (id=15172): timer_create(0x3, 0x0, &(0x7f0000000280)=0x0) timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.590350696s ago: executing program 6 (id=15173): r0 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r0], 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.218738345s ago: executing program 6 (id=15174): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_io_uring_setup(0x7025, &(0x7f0000000300)={0x0, 0x2000, 0x10100, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0xbf6b}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x5b43, 0x0, 0x20, 0x0, 0x0) 2.110060552s ago: executing program 2 (id=15175): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 2.106932739s ago: executing program 1 (id=15176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="35000e00800000000802110000010802110000005050505050500000000000000000000064000100250301040e7206030303030303000000080026006c090000080027000100000008000c006400000008000d0000"], 0x74}}, 0x20000014) 2.096859951s ago: executing program 3 (id=15177): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 1.865251313s ago: executing program 6 (id=15178): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x28) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) accept4(r0, 0x0, 0x0, 0x0) 1.771251108s ago: executing program 1 (id=15179): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f00000002c0)="7cf125c3"}, 0x20) 1.685632809s ago: executing program 6 (id=15180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x4, 0x0, {0x5, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x300, 0x3, 0x1}}, @void, @void, @val={0x76, 0x6, {0x4, 0x80, 0x7, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40025}, 0x0) 1.641114323s ago: executing program 3 (id=15181): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000002c0)="5802009400140091d491321dcea4acd70729723b478925450db4564df63e79dbf050a10004226c1aac9891343d24cfbb19f8e3e3bd94cd18075db30d89b96e770856fbaf697ca1ecb4f1fee075069e8d35b8221cb4426b265a02ff9bbbbdefd9ae03f760ddc2a3eff384b3b612e68a2ecb5c9d6924505d22532f3915c8e30b0658d841bab81c04cec0170857406ebb50f56d5837257d8c8ffd8afee808a785f248", 0xa1}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 1.637988415s ago: executing program 9 (id=14806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000c40)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc4106(gcm(aes)))\x00'}, 0x58) bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 576.026558ms ago: executing program 1 (id=15182): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x662, &(0x7f0000000540)) 574.863004ms ago: executing program 2 (id=15183): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 560.007105ms ago: executing program 3 (id=15184): timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x2}) 559.69282ms ago: executing program 6 (id=15185): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x395e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 365.234475ms ago: executing program 2 (id=15186): r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000001780)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x7, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4084, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) recvfrom$inet6(r0, 0x0, 0x0, 0x12020, 0x0, 0xfffffffffffffebe) 135.011275ms ago: executing program 2 (id=15187): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4e}, 0x28) socketpair$unix(0x1, 0x1, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) 89.857695ms ago: executing program 3 (id=15188): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 0s ago: executing program 1 (id=15189): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) kernel console output (not intermixed with test programs): speed USB device number 8 using dummy_hcd [ 916.264698][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 916.307593][ T10] usb 5-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 916.331030][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.371891][ T10] usb 5-1: config 0 descriptor?? [ 916.557665][ T30] audit: type=1326 audit(1751074027.023:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2461 comm="syz.3.13226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dfe78e929 code=0x7fc00000 [ 916.802766][ T5912] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 916.837881][ T10] nti 0003:0757:0A00.007E: unknown main item tag 0x2 [ 916.850401][ T10] nti 0003:0757:0A00.007E: unknown main item tag 0x2 [ 916.867326][ T10] nti 0003:0757:0A00.007E: unknown main item tag 0x5 [ 916.886537][ T10] nti 0003:0757:0A00.007E: unknown main item tag 0x7 [ 916.902379][ T10] nti 0003:0757:0A00.007E: unknown main item tag 0x7 [ 916.909157][ T10] nti 0003:0757:0A00.007E: unknown main item tag 0x2 [ 916.922228][ T10] nti 0003:0757:0A00.007E: invalid report_size 543453793 [ 916.929352][ T10] nti 0003:0757:0A00.007E: item 0 4 1 7 parsing failed [ 916.966019][ T10] nti 0003:0757:0A00.007E: probe with driver nti failed with error -22 [ 916.968476][ T5912] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 916.999151][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.017041][ T5912] usb 3-1: Product: syz [ 917.027314][ T5912] usb 3-1: Manufacturer: syz [ 917.038440][ T5912] usb 3-1: SerialNumber: syz [ 917.050049][ T10] usb 5-1: USB disconnect, device number 8 [ 917.062862][ T5912] usb 3-1: config 0 descriptor?? [ 917.222414][ T30] audit: type=1326 audit(1751074027.673:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2461 comm="syz.3.13226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8dfe78e929 code=0x7fc00000 [ 917.281971][ T5912] usb 3-1: ignoring: probably an ADSL modem [ 917.553159][ T30] audit: type=1326 audit(1751074028.003:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2485 comm="syz.3.13234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dfe78e929 code=0x7ffc0000 [ 917.574986][ C1] vkms_vblank_simulate: vblank timer overrun [ 917.588013][ T30] audit: type=1326 audit(1751074028.003:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2485 comm="syz.3.13234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dfe78e929 code=0x7ffc0000 [ 917.609699][ C1] vkms_vblank_simulate: vblank timer overrun [ 917.623947][ T30] audit: type=1326 audit(1751074028.003:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2485 comm="syz.3.13234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8dfe78e929 code=0x7ffc0000 [ 917.709427][ T30] audit: type=1326 audit(1751074028.003:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2485 comm="syz.3.13234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dfe78e929 code=0x7ffc0000 [ 917.749480][ T5912] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 917.782403][ T30] audit: type=1326 audit(1751074028.003:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2485 comm="syz.3.13234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dfe78e929 code=0x7ffc0000 [ 917.859690][ T30] audit: type=1326 audit(1751074028.003:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2485 comm="syz.3.13234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8dfe78e929 code=0x7ffc0000 [ 917.912424][ T30] audit: type=1326 audit(1751074028.003:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2485 comm="syz.3.13234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dfe78e929 code=0x7ffc0000 [ 918.087830][ T2499] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13238'. [ 918.127473][ T2499] netlink: 'syz.9.13238': attribute type 18 has an invalid length. [ 918.173184][ T2499] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13238'. [ 918.879130][ T2527] netlink: 'syz.4.13250': attribute type 1 has an invalid length. [ 918.919133][ T2527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13250'. [ 919.054778][ T2533] overlayfs: failed to clone upperpath [ 919.305211][ T2542] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 919.622498][ T10] usb 3-1: USB disconnect, device number 102 [ 920.962675][ T10] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 921.126470][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 921.137163][ T2595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13276'. [ 921.137226][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 921.171253][ T10] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 921.201269][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.228391][ T10] usb 4-1: Product: syz [ 921.238312][ T10] usb 4-1: Manufacturer: syz [ 921.243030][ T10] usb 4-1: SerialNumber: syz [ 921.251013][ T10] usb 4-1: config 0 descriptor?? [ 921.519803][ T2608] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 921.540853][ T2608] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 921.676046][ T10] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 921.696166][ T2612] 9pnet: p9_errstr2errno: server reported unknown error [ 922.274782][ T9] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 922.324899][ T5912] usb 4-1: USB disconnect, device number 89 [ 922.442269][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 922.451966][ T9] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 922.461540][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.469683][ T9] usb 3-1: Product: syz [ 922.474200][ T9] usb 3-1: Manufacturer: syz [ 922.478870][ T9] usb 3-1: SerialNumber: syz [ 922.487470][ T9] usb 3-1: config 0 descriptor?? [ 922.495710][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 922.902493][ T9] gspca_se401: Too many frame sizes [ 923.136106][ T9] usb 3-1: USB disconnect, device number 103 [ 924.122443][ T9] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 924.296624][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 924.305003][ T9] usb 3-1: config 0 has no interface number 0 [ 924.311151][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 924.320831][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 924.332624][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.340735][ T9] usb 3-1: Product: syz [ 924.348510][ T9] usb 3-1: Manufacturer: syz [ 924.356533][ T9] usb 3-1: SerialNumber: syz [ 924.372657][ T9] usb 3-1: config 0 descriptor?? [ 925.424515][ T9] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 925.475888][ T9] usb 3-1: USB disconnect, device number 104 [ 925.782854][ T2758] tun0: tun_chr_ioctl cmd 1074025675 [ 925.799444][ T2758] tun0: persist enabled [ 925.881631][ T2758] tun0: tun_chr_ioctl cmd 1074025675 [ 925.897168][ T2758] tun0: persist disabled [ 926.215785][ T2768] netlink: 40 bytes leftover after parsing attributes in process `syz.9.13334'. [ 927.016371][ T2795] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13345'. [ 927.046385][ T2802] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13345'. [ 927.863708][ T2787] netlink: 40 bytes leftover after parsing attributes in process `syz.9.13342'. [ 928.946591][ T2883] 9pnet: p9_errstr2errno: server reported unknown error @ [ 930.672992][ T5912] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 930.857894][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 930.899939][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 930.940902][ T5912] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 930.981819][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 930.994944][ T5912] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 931.033048][ T5912] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 931.056462][ T5912] usb 4-1: Product: syz [ 931.070920][ T5912] usb 4-1: Manufacturer: syz [ 931.091227][ T5912] usb 4-1: SerialNumber: syz [ 931.121910][ T5912] usb 4-1: config 0 descriptor?? [ 931.561566][ T5912] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 931.742659][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 931.768436][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.812762][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.968387][ T5912] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 931.987099][ T5912] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 932.178162][ T5912] usb 4-1: USB disconnect, device number 90 [ 932.382107][ T2928] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13391'. [ 934.372834][ T9] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 934.546718][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 934.582253][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 934.591193][ T9] usb 3-1: config 1 has no interface number 0 [ 934.626616][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.632775][ T5912] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 934.652378][ T9] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 934.681688][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 934.715850][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.740950][ T9] usb 3-1: Product: syz [ 934.752264][ T9] usb 3-1: Manufacturer: syz [ 934.756925][ T9] usb 3-1: SerialNumber: syz [ 934.835185][ T5912] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 934.857014][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.892738][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.926811][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 934.949108][ T5912] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 934.959259][ T5912] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 934.968156][ T5912] usb 5-1: Manufacturer: syz [ 934.980625][ T5912] usb 5-1: config 0 descriptor?? [ 935.416364][ T5912] appleir 0003:05AC:8243.007F: unknown main item tag 0x0 [ 935.449461][ T5912] appleir 0003:05AC:8243.007F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 935.599878][ T9] cdc_ncm 3-1:1.1: bind() failure [ 935.704939][ T9] usb 5-1: USB disconnect, device number 9 [ 935.836789][ T5912] usb 3-1: USB disconnect, device number 105 [ 936.774016][ T3027] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13429'. [ 937.331318][ T3064] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 937.373084][ T5912] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 937.543690][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 937.555029][ T5912] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 937.564881][ T5912] usb 5-1: config 0 has no interface number 0 [ 937.575408][ T5912] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 937.585387][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.612617][ T5912] usb 5-1: Product: syz [ 937.616847][ T5912] usb 5-1: Manufacturer: syz [ 937.621471][ T5912] usb 5-1: SerialNumber: syz [ 937.636275][ T5912] usb 5-1: config 0 descriptor?? [ 937.674250][ T5912] smsc95xx v2.0.0 [ 938.063197][ T5934] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 938.126129][ T3092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13460'. [ 938.150028][ T3094] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 938.235339][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 938.268782][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.283329][ T5934] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 938.293282][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.327058][ T5934] usb 4-1: config 0 descriptor?? [ 938.684849][ T5912] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 938.708260][ T5912] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 938.750738][ T5912] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 938.773153][ T5912] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 938.823107][ T5912] usb 5-1: USB disconnect, device number 10 [ 938.834541][ T5934] savu 0003:1E7D:2D5A.0080: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 938.955431][ T3120] syzkaller1: entered promiscuous mode [ 938.960973][ T3120] syzkaller1: entered allmulticast mode [ 939.075551][ T9] usb 4-1: USB disconnect, device number 91 [ 939.268377][ T3135] input: syz1 as /devices/virtual/input/input87 [ 940.826021][ T3147] netlink: 'syz.2.13482': attribute type 16 has an invalid length. [ 940.856927][ T3147] netlink: 'syz.2.13482': attribute type 17 has an invalid length. [ 941.025260][ T3147] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 941.322935][ T5934] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 941.511848][ T3200] program syz.2.13503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 941.535227][ T5934] usb 10-1: config 0 has no interfaces? [ 941.544914][ T5934] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 941.564984][ T5934] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.598348][ T5934] usb 10-1: config 0 descriptor?? [ 941.840722][ T5934] usb 10-1: USB disconnect, device number 15 [ 942.066058][ T3215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 942.641606][ T3241] netlink: 'syz.6.13520': attribute type 13 has an invalid length. [ 942.649776][ T3241] netlink: 24859 bytes leftover after parsing attributes in process `syz.6.13520'. [ 944.411155][ T3303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13547'. [ 944.457396][ T3303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13547'. [ 944.487841][ T3303] erspan0: entered promiscuous mode [ 944.495591][ T3303] gretap0: entered promiscuous mode [ 944.502095][ T3303] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 944.507794][ T3306] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 944.525005][ T3303] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 944.579267][ T9] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 944.745044][ T9] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 944.766085][ T9] usb 10-1: config 0 has no interface number 0 [ 944.794889][ T9] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 944.814730][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.827667][ T9] usb 10-1: Product: syz [ 944.831986][ T9] usb 10-1: Manufacturer: syz [ 944.850333][ T9] usb 10-1: SerialNumber: syz [ 944.868270][ T9] usb 10-1: config 0 descriptor?? [ 945.100903][ T9] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 945.121222][ T9] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 945.146106][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 945.152753][ T3332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13557'. [ 945.163551][ T9] usb 10-1: media controller created [ 945.221904][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 945.312821][ T5934] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 945.354980][ T9] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 945.478450][ T5934] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 945.496389][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.507663][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 945.507682][ T30] audit: type=1326 audit(1751074055.983:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3345 comm="syz.4.13565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ccb8e929 code=0x7ffc0000 [ 945.539643][ T5934] usb 4-1: Product: syz [ 945.545086][ T5934] usb 4-1: Manufacturer: syz [ 945.557866][ T5934] usb 4-1: SerialNumber: syz [ 945.570799][ T30] audit: type=1326 audit(1751074055.983:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3345 comm="syz.4.13565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f67ccb8e929 code=0x7ffc0000 [ 945.576686][ T5934] usb 4-1: config 0 descriptor?? [ 945.597791][ T30] audit: type=1326 audit(1751074055.983:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3345 comm="syz.4.13565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ccb8e929 code=0x7ffc0000 [ 945.626524][ T30] audit: type=1326 audit(1751074055.983:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3345 comm="syz.4.13565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ccb8e929 code=0x7ffc0000 [ 945.691429][ T30] audit: type=1326 audit(1751074056.133:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3350 comm="syz.4.13567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ccb8e929 code=0x7ffc0000 [ 945.719433][ T30] audit: type=1326 audit(1751074056.133:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3350 comm="syz.4.13567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ccb8e929 code=0x7ffc0000 [ 945.747266][ T30] audit: type=1326 audit(1751074056.133:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3350 comm="syz.4.13567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f67ccb8e929 code=0x7ffc0000 [ 945.778508][ T30] audit: type=1326 audit(1751074056.143:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3350 comm="syz.4.13567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ccb8e929 code=0x7ffc0000 [ 945.836936][ T30] audit: type=1326 audit(1751074056.143:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3350 comm="syz.4.13567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ccb8e929 code=0x7ffc0000 [ 945.898167][ T30] audit: type=1326 audit(1751074056.143:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3350 comm="syz.4.13567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67ccb8e929 code=0x7ffc0000 [ 946.073105][ T5934] usb 4-1: Firmware: major: 0, minor: 0, hardware type: UNKNOWN (17) [ 946.081588][ T5934] usb 4-1: Firmware version (0.0) predates our first public release. [ 946.089409][ T3364] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 946.094894][ T5934] usb 4-1: Please update to version 0.2 or newer [ 946.105108][ T3364] mac80211_hwsim hwsim34 wlan0: left promiscuous mode [ 946.153074][ T3365] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 946.169546][ T3365] mac80211_hwsim hwsim34 wlan0: left promiscuous mode [ 946.283402][ T5934] usb 4-1: atusb_probe: initialization failed, error = -524 [ 946.309473][ T5934] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 946.329233][ T5934] usb 4-1: USB disconnect, device number 92 [ 946.401145][ T9] usb 10-1: USB disconnect, device number 16 [ 947.978013][ T3425] syz_tun: entered promiscuous mode [ 947.999575][ T3425] batadv_slave_0: entered promiscuous mode [ 948.022848][ T3425] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 948.045296][ T3425] Cannot create hsr debugfs directory [ 948.059797][ T3425] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 948.098309][ T3425] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 948.132831][ T3425] hsr1: entered allmulticast mode [ 948.142412][ T3425] syz_tun: entered allmulticast mode [ 948.162435][ T3425] batadv_slave_0: entered allmulticast mode [ 948.583319][ T3426] netlink: 'syz.4.13592': attribute type 16 has an invalid length. [ 948.601671][ T3426] netlink: 'syz.4.13592': attribute type 17 has an invalid length. [ 948.830993][ T3426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.864024][ T3426] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.907941][ T3426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 949.384891][ T3462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13609'. [ 949.419325][ T3466] binder: 3464:3466 ioctl c0306201 2000000003c0 returned -22 [ 949.789853][ T3483] kernel read not supported for file /file1 (pid: 3483 comm: syz.6.13617) [ 950.427729][ T51] Bluetooth: hci4: link tx timeout [ 950.434910][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 951.360470][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 951.360492][ T30] audit: type=1326 audit(1751074061.823:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3529 comm="syz.2.13637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14eb8e929 code=0x7ffc0000 [ 951.389062][ C1] vkms_vblank_simulate: vblank timer overrun [ 951.462729][ T30] audit: type=1326 audit(1751074061.873:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3529 comm="syz.2.13637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14eb8e929 code=0x7ffc0000 [ 951.501552][ T3536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 951.532757][ T30] audit: type=1326 audit(1751074061.873:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3529 comm="syz.2.13637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7ff14eb8e929 code=0x7ffc0000 [ 951.554469][ C1] vkms_vblank_simulate: vblank timer overrun [ 951.639561][ T30] audit: type=1326 audit(1751074061.873:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3529 comm="syz.2.13637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14eb8e929 code=0x7ffc0000 [ 951.683015][ T30] audit: type=1326 audit(1751074061.873:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3529 comm="syz.2.13637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14eb8e929 code=0x7ffc0000 [ 951.704693][ C1] vkms_vblank_simulate: vblank timer overrun [ 951.758103][ T30] audit: type=1326 audit(1751074062.213:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3537 comm="syz.2.13641" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff14eb8e929 code=0x0 [ 952.443999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 952.453023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 952.462811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 952.472761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 952.547324][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 952.832373][ T9] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 953.044491][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 953.076353][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 953.120197][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 953.152770][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.399647][ T9] usb 5-1: usb_control_msg returned -32 [ 953.427986][ T9] usbtmc 5-1:16.0: can't read capabilities [ 953.891720][ T3556] kexec: Could not allocate control_code_buffer [ 954.421446][ T30] audit: type=1326 audit(1751074064.883:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3607 comm="syz.9.13669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a3d8e929 code=0x7ffc0000 [ 954.479752][ T30] audit: type=1326 audit(1751074064.923:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3607 comm="syz.9.13669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f25a3d8e929 code=0x7ffc0000 [ 954.529022][ T30] audit: type=1326 audit(1751074064.923:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3607 comm="syz.9.13669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a3d8e929 code=0x7ffc0000 [ 954.582011][ T30] audit: type=1326 audit(1751074064.923:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3607 comm="syz.9.13669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a3d8e929 code=0x7ffc0000 [ 954.928455][ T3625] unknown channel width for channel at 909000KHz? [ 955.000213][ T3631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 955.487763][ T9] usb 5-1: USB disconnect, device number 11 [ 955.521684][ T3637] netlink: 'syz.9.13684': attribute type 16 has an invalid length. [ 955.530509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 955.567727][ T3637] netlink: 'syz.9.13684': attribute type 17 has an invalid length. [ 955.607994][ T3637] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 956.360955][ T3670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 957.550355][ T3701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13711'. [ 957.575956][ T3701] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13711'. [ 958.122758][ T5934] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 958.291384][ T5934] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 958.324797][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.352813][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.387524][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 958.410127][ T5934] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 958.420526][ T5934] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 958.434731][ T5934] usb 3-1: Manufacturer: syz [ 958.443519][ T5934] usb 3-1: config 0 descriptor?? [ 958.859296][ T5934] appleir 0003:05AC:8243.0081: unknown main item tag 0x0 [ 958.885440][ T5934] appleir 0003:05AC:8243.0081: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 958.902442][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 958.919460][ T3748] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13732'. [ 959.085256][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 959.094015][ T10] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 959.106171][ T10] usb 5-1: config 0 has no interface number 0 [ 959.117445][ T10] usb 5-1: config 0 interface 12 has no altsetting 0 [ 959.126812][ T9] usb 3-1: USB disconnect, device number 106 [ 959.144942][ T10] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 959.155036][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.164844][ T10] usb 5-1: Product: syz [ 959.173939][ T10] usb 5-1: Manufacturer: syz [ 959.185128][ T10] usb 5-1: SerialNumber: syz [ 959.193910][ T10] usb 5-1: config 0 descriptor?? [ 960.094235][ T3777] vivid-003: ================= START STATUS ================= [ 960.102759][ T3777] vivid-003: Radio HW Seek Mode: Bounded [ 960.110724][ T3777] vivid-003: Radio Programmable HW Seek: false [ 960.118029][ T3777] vivid-003: RDS Rx I/O Mode: Block I/O [ 960.124388][ T3777] vivid-003: Generate RBDS Instead of RDS: false [ 960.130972][ T3777] vivid-003: RDS Reception: true [ 960.138343][ T3777] vivid-003: RDS Program Type: 0 inactive [ 960.145044][ T3777] vivid-003: RDS PS Name: inactive [ 960.156245][ T3777] vivid-003: RDS Radio Text: inactive [ 960.161921][ T3777] vivid-003: RDS Traffic Announcement: false inactive [ 960.170536][ T3777] vivid-003: RDS Traffic Program: false inactive [ 960.177810][ T3777] vivid-003: RDS Music: false inactive [ 960.185041][ T3777] vivid-003: ================== END STATUS ================== [ 960.238906][ T10] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 960.251856][ T10] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 960.266412][ T10] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 960.275795][ T10] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 960.296708][ T10] usb 5-1: USB disconnect, device number 12 [ 960.499940][ T3789] netlink: 27 bytes leftover after parsing attributes in process `syz.6.13750'. [ 960.572295][ T5867] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 960.732580][ T5867] usb 10-1: Using ep0 maxpacket: 32 [ 960.758787][ T5867] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 960.767539][ T5867] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 960.787395][ T5867] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 960.806595][ T5867] usb 10-1: config 1 has no interface number 0 [ 960.817321][ T5867] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 960.837874][ T5867] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 960.851621][ T5867] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 960.865840][ T5867] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.890625][ T5867] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 961.072773][ T5934] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 961.081267][ T3815] sctp: [Deprecated]: syz.4.13760 (pid 3815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 961.081267][ T3815] Use struct sctp_sack_info instead [ 961.116021][ T5867] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 961.252929][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 961.265037][ T5934] usb 3-1: config 0 interface 0 has no altsetting 0 [ 961.278446][ T5934] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 961.311631][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.362033][ T5934] usb 3-1: config 0 descriptor?? [ 961.537143][ T5867] usb 10-1: USB disconnect, device number 17 [ 961.560055][ T5867] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 961.809035][ T5934] hid (null): global environment stack underflow [ 961.817762][ T5934] hid (null): global environment stack underflow [ 961.829768][ T5934] hid (null): report_id 3899690137 is invalid [ 961.839183][ T5934] hid (null): unknown global tag 0xc [ 962.077561][ T5934] usb 3-1: USB disconnect, device number 107 [ 962.670527][ T3871] could not open pipe file descriptor [ 962.777858][ T3874] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.13784'. [ 963.813313][ T5827] Bluetooth: hci3: Malformed LE Event: 0x0d [ 963.951255][ T3903] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13798'. [ 967.526508][ T4004] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 967.547303][ T4004] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 967.916016][ T4018] overlayfs: failed to clone lowerpath [ 967.928554][ T4019] binder: 4017:4019 ioctl c0306201 200000000040 returned -14 [ 968.060617][ T4021] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.13849'. [ 968.136656][ T4027] sctp: [Deprecated]: syz.6.13852 (pid 4027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 968.136656][ T4027] Use struct sctp_sack_info instead [ 968.597659][ T5867] IPVS: starting estimator thread 0... [ 968.692447][ T4042] IPVS: using max 23 ests per chain, 55200 per kthread [ 970.170783][ T5867] hid-generic 0005:10CF:0009.0083: unknown main item tag 0x0 [ 970.292502][ T5867] hid-generic 0005:10CF:0009.0083: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 970.921927][ T10] hid-generic 00A0:0008:0003.0084: unknown main item tag 0x0 [ 970.948830][ T10] hid-generic 00A0:0008:0003.0084: unknown main item tag 0x1 [ 970.974061][ T10] hid-generic 00A0:0008:0003.0084: unknown main item tag 0x0 [ 970.981537][ T10] hid-generic 00A0:0008:0003.0084: unknown main item tag 0x0 [ 971.000738][ T10] hid-generic 00A0:0008:0003.0084: unknown main item tag 0x0 [ 971.016033][ T10] hid-generic 00A0:0008:0003.0084: unknown main item tag 0x0 [ 971.037859][ T10] hid-generic 00A0:0008:0003.0084: unknown main item tag 0x0 [ 971.055755][ T10] hid-generic 00A0:0008:0003.0084: unknown main item tag 0x0 [ 971.084590][ T10] hid-generic 00A0:0008:0003.0084: unknown main item tag 0x0 [ 971.118391][ T10] hid-generic 00A0:0008:0003.0084: hidraw1: HID v0.05 Device [syz1] on syz0 [ 971.156494][ T5867] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 971.325490][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.352254][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.388209][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 971.446163][ T5867] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 971.478056][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.498670][ T5867] usb 3-1: config 0 descriptor?? [ 971.610704][ T4123] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 971.962525][ T5867] plantronics 0003:047F:FFFF.0085: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 972.174726][ T5912] usb 3-1: USB disconnect, device number 108 [ 972.216502][ T5934] kernel write not supported for file /1317/loginuid (pid: 5934 comm: kworker/1:6) [ 972.911760][ T4161] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.13911'. [ 973.682714][ T5934] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 973.832799][ T5934] usb 10-1: Using ep0 maxpacket: 32 [ 973.843157][ T5934] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 973.851429][ T5934] usb 10-1: config 0 has no interface number 0 [ 973.882844][ T5934] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 973.912955][ T5934] usb 10-1: config 0 interface 85 has no altsetting 0 [ 973.947408][ T5934] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 973.968854][ T5934] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.992806][ T5934] usb 10-1: Product: syz [ 973.997224][ T5934] usb 10-1: Manufacturer: syz [ 974.001943][ T5934] usb 10-1: SerialNumber: syz [ 974.035767][ T5934] usb 10-1: config 0 descriptor?? [ 974.669856][ T5934] appletouch 10-1:0.85: Geyser mode initialized. [ 974.694991][ T5934] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input90 [ 974.881873][ T5934] usb 10-1: USB disconnect, device number 18 [ 974.980599][ T5934] appletouch 10-1:0.85: input: appletouch disconnected [ 975.184031][ T4225] netlink: 'syz.6.13939': attribute type 1 has an invalid length. [ 975.202370][ T4225] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.13939'. [ 976.094416][ T4261] openvswitch: netlink: IPv4 tun info is not correct [ 976.892724][ T5934] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 977.002401][ T5867] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 977.052921][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 977.065963][ T5934] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 977.082867][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.117601][ T5934] usb 5-1: config 0 descriptor?? [ 977.131517][ T5934] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 977.197105][ T5867] usb 10-1: Using ep0 maxpacket: 8 [ 977.209024][ T5867] usb 10-1: config 0 has no interfaces? [ 977.216060][ T5867] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 977.240935][ T5867] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.253979][ T5867] usb 10-1: config 0 descriptor?? [ 977.526617][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 977.526638][ T30] audit: type=1326 audit(1751074087.993:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4281 comm="syz.6.13965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb138e929 code=0x7fc00000 [ 977.555091][ C1] vkms_vblank_simulate: vblank timer overrun [ 977.675754][ T4286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.709554][ T4286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.759708][ T10] usb 10-1: USB disconnect, device number 19 [ 978.171191][ T5934] gspca_nw80x: reg_w err -71 [ 978.177546][ T5934] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 978.195246][ T5934] usb 5-1: USB disconnect, device number 13 [ 978.254619][ T4295] netlink: 'syz.3.13967': attribute type 16 has an invalid length. [ 978.263830][ T4295] netlink: 'syz.3.13967': attribute type 17 has an invalid length. [ 978.288258][ T4295] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 979.226208][ T10] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 979.398848][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 979.421172][ T10] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 979.437876][ T10] usb 10-1: config 0 has no interface number 0 [ 979.460927][ T10] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 979.475061][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.485630][ T10] usb 10-1: Product: syz [ 979.505205][ T10] usb 10-1: Manufacturer: syz [ 979.514263][ T10] usb 10-1: SerialNumber: syz [ 979.530292][ T10] usb 10-1: config 0 descriptor?? [ 979.559395][ T10] smsc95xx v2.0.0 [ 980.155541][ T4381] batadv_slave_1: entered promiscuous mode [ 980.181736][ T4380] batadv_slave_1: left promiscuous mode [ 980.210628][ T4376] netlink: 'syz.2.14005': attribute type 4 has an invalid length. [ 980.224780][ T4376] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14005'. [ 980.586339][ T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 980.611793][ T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 980.652219][ T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 980.674948][ T10] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 980.712182][ T10] usb 10-1: USB disconnect, device number 20 [ 980.984963][ T4412] netlink: 104 bytes leftover after parsing attributes in process `syz.4.14015'. [ 981.718089][ T4428] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.14023'. [ 981.836346][ T4431] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14024'. [ 982.171600][ T4447] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input91 [ 982.183112][ T5934] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 982.342722][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 982.361746][ T5934] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 982.383769][ T5934] usb 4-1: config 0 has no interface number 0 [ 982.404377][ T5934] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 982.423870][ T5934] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 982.440459][ T5934] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 982.463624][ T5934] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 982.543404][ T5934] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 982.552745][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.576575][ T5934] usb 4-1: config 0 descriptor?? [ 982.603057][ T5934] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 982.853576][ T5934] usb 4-1: USB disconnect, device number 93 [ 982.886347][ T5934] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 984.615969][ T30] audit: type=1326 audit(1751074095.083:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4523 comm="syz.6.14063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb138e929 code=0x7ffc0000 [ 984.637712][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.658004][ T30] audit: type=1326 audit(1751074095.083:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4523 comm="syz.6.14063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb138e929 code=0x7ffc0000 [ 984.736522][ T30] audit: type=1326 audit(1751074095.123:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4523 comm="syz.6.14063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cb138e929 code=0x7ffc0000 [ 984.798862][ T30] audit: type=1326 audit(1751074095.123:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4523 comm="syz.6.14063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb138e929 code=0x7ffc0000 [ 984.820791][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.837261][ T30] audit: type=1326 audit(1751074095.123:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4523 comm="syz.6.14063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb138e929 code=0x7ffc0000 [ 984.879167][ T30] audit: type=1326 audit(1751074095.153:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4523 comm="syz.6.14063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cb138e929 code=0x7ffc0000 [ 984.983115][ T30] audit: type=1326 audit(1751074095.153:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4523 comm="syz.6.14063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb138e929 code=0x7ffc0000 [ 985.004797][ C1] vkms_vblank_simulate: vblank timer overrun [ 985.092762][ T30] audit: type=1326 audit(1751074095.153:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4523 comm="syz.6.14063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cb138e929 code=0x7ffc0000 [ 985.152892][ T30] audit: type=1326 audit(1751074095.153:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4523 comm="syz.6.14063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb138e929 code=0x7ffc0000 [ 985.225320][ T30] audit: type=1326 audit(1751074095.153:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4523 comm="syz.6.14063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb138e929 code=0x7ffc0000 [ 985.892588][ T4553] program syz.2.14077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 987.051997][ T5912] kernel read not supported for file /dsp (pid: 5912 comm: kworker/1:5) [ 987.466917][ T4595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14103'. [ 987.475291][ T4557] netlink: 'syz.6.14075': attribute type 16 has an invalid length. [ 987.490938][ T4557] netlink: 'syz.6.14075': attribute type 17 has an invalid length. [ 987.542848][ T4557] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 988.913142][ T5912] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 989.083259][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 989.089784][ T5912] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 989.098672][ T5912] usb 5-1: config 0 has no interface number 0 [ 989.109457][ T5912] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 989.119377][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.128044][ T5912] usb 5-1: Product: syz [ 989.142661][ T5912] usb 5-1: Manufacturer: syz [ 989.147418][ T5912] usb 5-1: SerialNumber: syz [ 989.160826][ T5912] usb 5-1: config 0 descriptor?? [ 989.178083][ T5912] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 989.198285][ T5912] usb 5-1: selecting invalid altsetting 1 [ 989.206329][ T5912] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 989.235749][ T5912] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 989.253373][ T5912] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 989.261836][ T5912] usb 5-1: media controller created [ 989.296501][ T9] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 989.304308][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 989.422567][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 989.423205][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 989.492301][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 989.532874][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 989.544567][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.562760][ T9] usb 3-1: Product: syz [ 989.567741][ T9] usb 3-1: Manufacturer: syz [ 989.575029][ T9] usb 3-1: SerialNumber: syz [ 989.593263][ T9] usb 3-1: config 0 descriptor?? [ 989.608952][ T9] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 989.723448][ T5827] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 989.815868][ T9] pwc: Warning: more than 1 configuration available. [ 989.838446][ T9] pwc: Failed to set LED on/off time (-71) [ 989.852762][ T9] pwc: send_video_command error -71 [ 989.867935][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 989.887679][ T9] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 989.925139][ T9] usb 3-1: USB disconnect, device number 109 [ 990.199070][ T4666] tipc: Enabling of bearer rejected, failed to enable media [ 990.218434][ T4667] program syz.9.14125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 990.383251][ T5912] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 990.405031][ T5912] zl10353_read_register: readreg error (reg=127, ret==-110) [ 990.417582][ T4634] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 990.530946][ T5912] usb 5-1: USB disconnect, device number 14 [ 990.588070][ T4681] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.602788][ T4681] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.615575][ T4681] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.628866][ T4681] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.637240][ T4683] netlink: 16 bytes leftover after parsing attributes in process `syz.9.14134'. [ 991.041158][ T4694] netlink: 'syz.3.14139': attribute type 1 has an invalid length. [ 991.102394][ T4694] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.14139'. [ 991.123456][ T4698] overlayfs: failed to clone lowerpath [ 991.616509][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 991.616529][ T30] audit: type=1326 audit(1751074102.083:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4711 comm="syz.2.14148" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff14eb8e929 code=0x0 [ 992.788973][ T4755] syzkaller1: entered promiscuous mode [ 992.799542][ T4755] syzkaller1: entered allmulticast mode [ 993.190368][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.197048][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.601396][ T4783] program syz.3.14177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 996.160222][ T4784] kexec: Could not allocate control_code_buffer [ 996.466602][ T4815] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 996.476565][ T4815] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 996.503077][ T4815] overlayfs: failed to set uuid (2655/file1, err=-13); falling back to uuid=null. [ 996.775845][ T4829] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000003 [ 997.418100][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14207'. [ 997.543836][ T4856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1000.989361][ T5934] kernel read not supported for file /audio (pid: 5934 comm: kworker/1:6) [ 1003.730551][ T4999] program syz.3.14269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1004.842831][ T5028] input: syz1 as /devices/virtual/input/input92 [ 1007.560352][ T5095] 9pnet_fd: Insufficient options for proto=fd [ 1009.371535][ T5934] kernel read not supported for file /audio (pid: 5934 comm: kworker/1:6) [ 1011.458522][ T30] audit: type=1326 audit(1751074121.923:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5205 comm="syz.9.14354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a3d8e929 code=0x7ffc0000 [ 1011.510351][ T30] audit: type=1326 audit(1751074121.923:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5205 comm="syz.9.14354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a3d8e929 code=0x7ffc0000 [ 1011.554801][ T30] audit: type=1326 audit(1751074121.923:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5205 comm="syz.9.14354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f25a3d8e929 code=0x7ffc0000 [ 1011.631922][ T30] audit: type=1326 audit(1751074121.923:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5205 comm="syz.9.14354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a3d8e929 code=0x7ffc0000 [ 1011.702224][ T30] audit: type=1326 audit(1751074121.923:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5205 comm="syz.9.14354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a3d8e929 code=0x7ffc0000 [ 1011.972714][ T5934] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1012.135313][ T5934] usb 10-1: config 0 has an invalid interface number: 101 but max is 0 [ 1012.144880][ T5934] usb 10-1: config 0 has no interface number 0 [ 1012.157557][ T5934] usb 10-1: config 0 interface 101 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1012.202739][ T5934] usb 10-1: config 0 interface 101 altsetting 0 endpoint 0x9 has invalid maxpacket 2007, setting to 1024 [ 1012.240226][ T5934] usb 10-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 1012.252656][ T5934] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.272745][ T5934] usb 10-1: Product: syz [ 1012.277067][ T5934] usb 10-1: Manufacturer: syz [ 1012.281792][ T5934] usb 10-1: SerialNumber: syz [ 1012.309880][ T5934] usb 10-1: config 0 descriptor?? [ 1012.366312][ T5934] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 1012.656849][ T5245] overlayfs: upper fs does not support tmpfile. [ 1012.676211][ T5247] input input93: cannot allocate more than FF_MAX_EFFECTS effects [ 1013.194205][ T5934] input: gspca_pac7302 as /devices/platform/dummy_hcd.9/usb10/10-1/input/input94 [ 1013.395559][ T5934] usb 10-1: USB disconnect, device number 21 [ 1013.406361][ T5269] sctp: [Deprecated]: syz.4.14382 (pid 5269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1013.406361][ T5269] Use struct sctp_sack_info instead [ 1013.731284][ T5276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14387'. [ 1015.064391][ T30] audit: type=1326 audit(1751074125.523:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5319 comm="syz.6.14407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8cb13858e7 code=0x7ffc0000 [ 1015.110970][ T30] audit: type=1326 audit(1751074125.523:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5319 comm="syz.6.14407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8cb132ab19 code=0x7ffc0000 [ 1015.162313][ T30] audit: type=1326 audit(1751074125.523:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5319 comm="syz.6.14407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8cb13858e7 code=0x7ffc0000 [ 1015.189732][ T30] audit: type=1326 audit(1751074125.523:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5319 comm="syz.6.14407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8cb132ab19 code=0x7ffc0000 [ 1015.218180][ T30] audit: type=1326 audit(1751074125.523:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5319 comm="syz.6.14407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8cb13858e7 code=0x7ffc0000 [ 1015.497382][ T5334] vlan5: entered promiscuous mode [ 1015.503350][ T5334] bond0: entered promiscuous mode [ 1015.509662][ T5334] bond_slave_0: entered promiscuous mode [ 1015.523820][ T5334] bond_slave_1: entered promiscuous mode [ 1015.530001][ T5334] dummy0: entered promiscuous mode [ 1015.544146][ T5334] bond0: (slave vlan5): Opening slave failed [ 1015.962276][ T5346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14421'. [ 1016.001739][ T5347] mkiss: ax0: crc mode is auto. [ 1016.008814][ T5346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14421'. [ 1016.522322][ T5867] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1016.684411][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.712404][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.735908][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1016.769957][ T5867] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1016.796616][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.823233][ T5867] usb 4-1: config 0 descriptor?? [ 1017.172636][ T5934] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1017.260816][ T5867] plantronics 0003:047F:FFFF.0086: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1017.348716][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 1017.357202][ T5934] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1017.386059][ T5934] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1017.402774][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.410865][ T5934] usb 3-1: Product: syz [ 1017.432758][ T5934] usb 3-1: Manufacturer: syz [ 1017.437463][ T5934] usb 3-1: SerialNumber: syz [ 1017.470507][ T5934] usb 3-1: config 0 descriptor?? [ 1017.480110][ T5934] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1017.524466][ T5867] usb 4-1: USB disconnect, device number 94 [ 1017.615758][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1017.628306][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1017.642509][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1017.652859][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1017.663896][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1018.164637][ T5381] chnl_net:caif_netlink_parms(): no params data found [ 1018.305970][ T5934] gspca_zc3xx: reg_w_i err -71 [ 1018.426622][ T5381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.466714][ T5381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.482725][ T5381] bridge_slave_0: entered allmulticast mode [ 1018.491032][ T5381] bridge_slave_0: entered promiscuous mode [ 1018.500274][ T5381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.532287][ T5381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.542703][ T5381] bridge_slave_1: entered allmulticast mode [ 1018.549918][ T5381] bridge_slave_1: entered promiscuous mode [ 1018.660720][ T5381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.689254][ T5381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.789509][ T5381] team0: Port device team_slave_0 added [ 1018.817507][ T5381] team0: Port device team_slave_1 added [ 1018.892967][ T5934] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1018.899385][ T5934] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1018.921535][ T5381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.929075][ T5381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.929543][ T5934] usb 3-1: USB disconnect, device number 110 [ 1018.955039][ C1] vkms_vblank_simulate: vblank timer overrun [ 1018.972549][ T5381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.972667][ T5912] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1019.037958][ T5381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.056984][ T5381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.100017][ T5381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.167547][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.193287][ T5912] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1019.222817][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.235426][ T5912] usb 4-1: config 0 descriptor?? [ 1019.247652][ T5421] syzkaller1: entered promiscuous mode [ 1019.259179][ T5421] syzkaller1: entered allmulticast mode [ 1019.283437][ T5381] hsr_slave_0: entered promiscuous mode [ 1019.290616][ T5381] hsr_slave_1: entered promiscuous mode [ 1019.301965][ T5381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1019.316983][ T5381] Cannot create hsr debugfs directory [ 1019.492902][ T5934] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 1019.655484][ T5934] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1019.666958][ T5934] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1019.680112][ T5912] zydacron 0003:13EC:0006.0087: invalid report_size -1021686408 [ 1019.704974][ T5934] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1019.718600][ T5912] zydacron 0003:13EC:0006.0087: item 0 4 1 7 parsing failed [ 1019.729879][ T5912] zydacron 0003:13EC:0006.0087: parse failed [ 1019.736717][ T5912] zydacron 0003:13EC:0006.0087: probe with driver zydacron failed with error -22 [ 1019.748479][ T5934] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1019.752556][ T51] Bluetooth: hci4: command tx timeout [ 1019.758297][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.805734][ T5934] usb 3-1: Product: syz [ 1019.809933][ T5934] usb 3-1: Manufacturer: syz [ 1019.832739][ T5934] usb 3-1: SerialNumber: syz [ 1019.871069][ T5934] usb 3-1: selecting invalid altsetting 1 [ 1019.951588][ T5912] usb 4-1: USB disconnect, device number 95 [ 1020.456622][ T5381] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1020.473186][ T5381] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1020.505159][ T5381] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1020.555887][ T5381] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1020.681221][ T5934] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 1020.710564][ T51] Bluetooth: hci3: unknown advertising packet type: 0x82 [ 1020.710610][ T51] Bluetooth: hci3: Dropping invalid advertising data [ 1020.723094][ T5934] usb 3-1: selecting invalid altsetting 1 [ 1020.731211][ T5934] cdc_ncm 3-1:1.0: bind() failure [ 1020.732320][ T51] Bluetooth: hci3: unknown advertising packet type: 0xf2 [ 1020.737906][ T51] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1020.768696][ T5934] usb 3-1: USB disconnect, device number 111 [ 1020.847291][ T5381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.887242][ T5381] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.906172][T32187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.913404][T32187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.937898][T32187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.945153][T32187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.390400][ T5475] Invalid source name [ 1021.563466][ T5381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.779432][ T5484] all (unregistering): Released all slaves [ 1021.822836][ T51] Bluetooth: hci4: command tx timeout [ 1022.372903][ T5934] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1022.550144][ T5934] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1022.570827][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.606032][ T5934] usb 4-1: config 0 descriptor?? [ 1022.609354][ T5381] veth0_vlan: entered promiscuous mode [ 1022.621369][ T5934] cp210x 4-1:0.0: cp210x converter detected [ 1022.671184][ T5381] veth1_vlan: entered promiscuous mode [ 1022.796711][ T5381] veth0_macvtap: entered promiscuous mode [ 1022.829212][ T5381] veth1_macvtap: entered promiscuous mode [ 1022.900785][ T5381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.904298][ T5519] netlink: 'syz.2.14483': attribute type 3 has an invalid length. [ 1022.935730][ T5381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1022.943658][ T5519] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14483'. [ 1022.967976][ T5381] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.981596][ T5381] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.993563][ T5381] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.007233][ T5381] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.048206][ T5934] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1023.079246][ T5522] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14484'. [ 1023.092049][ T5522] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14484'. [ 1023.280194][ T5934] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1023.297768][T19882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.318404][T19882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.409527][ T4388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.429619][ T4388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.464663][ T5528] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14487'. [ 1023.467583][ T5934] usb 4-1: USB disconnect, device number 96 [ 1023.490667][ T5934] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1023.496841][ T5528] syz_tun: Device is already in use. [ 1023.528405][ T5934] cp210x 4-1:0.0: device disconnected [ 1023.733274][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1023.733294][ T30] audit: type=1326 audit(1751074134.203:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5535 comm="syz.2.14490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14eb8e929 code=0x7ffc0000 [ 1023.816176][ T30] audit: type=1326 audit(1751074134.233:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5535 comm="syz.2.14490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7ff14eb8e929 code=0x7ffc0000 [ 1023.862171][ T30] audit: type=1326 audit(1751074134.233:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5535 comm="syz.2.14490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14eb8e929 code=0x7ffc0000 [ 1023.913989][ T51] Bluetooth: hci4: command tx timeout [ 1024.126388][ T30] audit: type=1326 audit(1751074134.593:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5546 comm="syz.5.14495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cad58e929 code=0x7ffc0000 [ 1024.192185][ T30] audit: type=1326 audit(1751074134.593:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5546 comm="syz.5.14495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cad58e929 code=0x7ffc0000 [ 1024.281202][ T30] audit: type=1326 audit(1751074134.593:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5546 comm="syz.5.14495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9cad58e929 code=0x7ffc0000 [ 1024.352042][ T30] audit: type=1326 audit(1751074134.593:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5546 comm="syz.5.14495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cad58e929 code=0x7ffc0000 [ 1024.390458][ T5555] 9pnet_fd: Insufficient options for proto=fd [ 1024.420173][ T30] audit: type=1326 audit(1751074134.593:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5546 comm="syz.5.14495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cad58e929 code=0x7ffc0000 [ 1024.449638][ T5556] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.14498'. [ 1024.479859][ T30] audit: type=1326 audit(1751074134.603:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5546 comm="syz.5.14495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f9cad58e929 code=0x7ffc0000 [ 1024.566090][ T30] audit: type=1326 audit(1751074134.603:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5546 comm="syz.5.14495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cad58e929 code=0x7ffc0000 [ 1024.887147][ T5575] syzkaller1: entered promiscuous mode [ 1024.902774][ T5575] syzkaller1: entered allmulticast mode [ 1025.346360][ T5591] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.14511'. [ 1025.982223][ T51] Bluetooth: hci4: command tx timeout [ 1026.090519][ T5613] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 1027.409252][ T5653] netlink: 'syz.9.14539': attribute type 1 has an invalid length. [ 1027.451531][ T5653] bond1: entered promiscuous mode [ 1027.457765][ T5653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1027.510652][ T5653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1027.530605][ T5653] bond1: (slave bond2): making interface the new active one [ 1027.572557][ T5653] bond2: entered promiscuous mode [ 1027.583470][ T5653] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1027.845956][ T5669] vlan2: entered promiscuous mode [ 1027.876099][ T5669] bond0: entered promiscuous mode [ 1027.887426][ T5669] bond_slave_0: entered promiscuous mode [ 1027.893664][ T5669] bond_slave_1: entered promiscuous mode [ 1028.132345][ T10] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1028.292197][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 1028.312583][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1028.328266][ T10] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1028.337755][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.353468][ T10] usb 10-1: config 0 descriptor?? [ 1028.812365][ T10] hid (null): invalid report_size 27418 [ 1028.838536][ T10] hid (null): report_id 17018 is invalid [ 1028.875173][ T10] hid (null): report_id 48117 is invalid [ 1029.008434][ T5912] usb 10-1: USB disconnect, device number 22 [ 1029.173318][ T5934] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1029.345546][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 1029.358585][ T5934] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1029.385177][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.416284][ T5709] vlan2: entered promiscuous mode [ 1029.417172][ T5934] usb 4-1: config 0 descriptor?? [ 1029.421371][ T5709] bond0: entered promiscuous mode [ 1029.421391][ T5709] bond_slave_0: entered promiscuous mode [ 1029.421624][ T5709] bond_slave_1: entered promiscuous mode [ 1029.441428][ T5934] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1029.501181][ T5709] batadv_slave_0: entered promiscuous mode [ 1029.538614][ T5709] bond0: (slave vlan2): Opening slave failed [ 1030.212221][ T9] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 1030.360568][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14568'. [ 1030.413084][ T9] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1030.432373][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.457089][ T9] usb 3-1: config 0 descriptor?? [ 1030.470014][ T5934] gspca_sunplus: reg_w_riv err -71 [ 1030.479768][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1030.480168][ T5934] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1030.551269][ T5934] usb 4-1: USB disconnect, device number 97 [ 1030.696004][ T9] gp8psk: usb in 128 operation failed. [ 1030.907486][ T9] gp8psk: usb in 146 operation failed. [ 1030.913134][ T9] gp8psk: failed to get FW version [ 1030.933218][ T9] gp8psk: FPGA Version = 225 [ 1031.139606][ T9] gp8psk: usb in 138 operation failed. [ 1031.162204][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1031.178813][ T5746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14576'. [ 1031.197652][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1031.242600][ T9] usb 3-1: USB disconnect, device number 112 [ 1031.496062][ T5758] netlink: 4344 bytes leftover after parsing attributes in process `syz.3.14582'. [ 1031.725633][ T5764] sctp: [Deprecated]: syz.5.14584 (pid 5764) Use of int in max_burst socket option. [ 1031.725633][ T5764] Use struct sctp_assoc_value instead [ 1031.924066][ T5771] overlayfs: failed to clone upperpath [ 1033.372816][ T5912] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1033.525151][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.552768][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.588651][ T5912] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1033.605550][ T5912] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1033.617007][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.628755][ T5912] usb 6-1: config 0 descriptor?? [ 1034.069552][ T5912] plantronics 0003:047F:FFFF.0089: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1034.336935][ T5912] usb 6-1: USB disconnect, device number 48 [ 1036.087420][ T5921] syzkaller1: entered promiscuous mode [ 1036.103540][ T5921] syzkaller1: entered allmulticast mode [ 1037.517748][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1037.517771][ T30] audit: type=1400 audit(1751074147.973:1992): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=5969 comm="syz.5.14664" saddr=100.1.1.1 daddr=172.20.20.170 dest=20002 netif=wpan0 [ 1038.510215][ T6022] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1038.622409][ T5867] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1038.782864][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 1038.797040][ T5867] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1038.819216][ T5867] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1038.829414][ T5867] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1038.859731][ T5867] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1038.910907][ T5867] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1038.932428][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.151011][ T5867] usb 6-1: GET_CAPABILITIES returned 0 [ 1039.159413][ T5867] usbtmc 6-1:16.0: can't read capabilities [ 1039.364679][ T5867] usb 6-1: USB disconnect, device number 49 [ 1039.587272][ T30] audit: type=1800 audit(1751074150.053:1993): pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.14706" name="nullb0" dev="devtmpfs" ino=3773 res=0 errno=0 [ 1040.213036][ T5912] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1040.391219][ T5912] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.418577][ T5912] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1040.450243][ T5912] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1040.470593][ T5912] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1040.501172][ T5912] usb 10-1: SerialNumber: syz [ 1040.674579][ T30] audit: type=1326 audit(1751074151.143:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6097 comm="syz.6.14720" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8cb138e929 code=0x0 [ 1040.751953][ T5912] usb 10-1: 0:2 : does not exist [ 1040.778972][ T5912] usb 10-1: usbmixer: too many channels (61) in unit 5 [ 1040.854644][ T5912] usb 10-1: USB disconnect, device number 23 [ 1041.400451][ T30] audit: type=1326 audit(1751074151.863:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6114 comm="syz.9.14728" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25a3d8e929 code=0x0 [ 1041.806139][ T9] kernel read not supported for file /sequencer (pid: 9 comm: kworker/0:0) [ 1042.622604][ T9] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1042.754300][ T6174] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.14754'. [ 1042.792462][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1042.806358][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.828441][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.843015][ T5934] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 1042.855112][ T9] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1042.882154][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.920018][ T9] usb 4-1: config 0 descriptor?? [ 1042.973697][ T6182] loop2: detected capacity change from 0 to 7 [ 1042.983114][ T6182] Dev loop2: unable to read RDB block 7 [ 1042.988730][ T6182] loop2: AHDI p2 p3 [ 1043.012387][ T6182] loop2: partition table partially beyond EOD, truncated [ 1043.020014][ T6182] loop2: p2 size 150995456 extends beyond EOD, truncated [ 1043.326066][ T5934] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1043.338888][ T5934] usb 3-1: can't read configurations, error -71 [ 1043.344898][ T9] hid-led 0003:1294:1320.008A: unknown main item tag 0x0 [ 1043.353327][ T9] hid-led 0003:1294:1320.008A: unknown main item tag 0x0 [ 1043.462834][ T9] hid-led 0003:1294:1320.008A: unknown main item tag 0x0 [ 1043.498093][ T9] hid-led 0003:1294:1320.008A: unknown main item tag 0x0 [ 1043.518822][ T9] hid-led 0003:1294:1320.008A: unknown main item tag 0x0 [ 1043.562475][ T9] hid-led 0003:1294:1320.008A: unknown main item tag 0x0 [ 1043.569585][ T9] hid-led 0003:1294:1320.008A: unknown main item tag 0x0 [ 1043.592397][ T9] hid-led 0003:1294:1320.008A: unknown main item tag 0x0 [ 1043.613920][ T9] hid-led 0003:1294:1320.008A: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.3-1/input0 [ 1043.638692][ T9] hid-led 0003:1294:1320.008A: Riso Kagaku Webmail Notifier initialized [ 1043.651704][ T9] usb 4-1: USB disconnect, device number 98 [ 1043.668608][T32185] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 1043.681758][ T4390] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 1043.713544][ T4390] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 1044.405571][ T5934] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1044.564970][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 1044.576437][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1044.599765][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1044.636148][ T5934] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1044.650438][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.676626][ T5934] usb 3-1: Product: syz [ 1044.680863][ T5934] usb 3-1: Manufacturer: syz [ 1044.718807][ T5934] usb 3-1: SerialNumber: syz [ 1044.729280][ T5934] usb 3-1: config 0 descriptor?? [ 1044.749567][ T5934] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1044.780741][ T5934] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1044.964400][ T6243] macvlan1: entered promiscuous mode [ 1044.979319][ T6243] ipvlan0: entered promiscuous mode [ 1044.987330][ T6243] ipvlan0: left promiscuous mode [ 1045.006230][ T6243] macvlan1: left promiscuous mode [ 1045.180307][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14787'. [ 1045.197100][ T6252] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14788'. [ 1045.226510][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14788'. [ 1045.290241][ T6256] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14790'. [ 1045.357180][ T5934] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1045.379077][ T5934] em28xx 3-1:0.0: Config register raw data: 0x15 [ 1045.643894][ T5934] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1045.666110][ T5934] em28xx 3-1:0.0: No AC97 audio processor [ 1045.762774][ T5934] usb 3-1: USB disconnect, device number 114 [ 1045.780782][ T5934] em28xx 3-1:0.0: Disconnecting em28xx [ 1045.809904][ T5934] em28xx 3-1:0.0: Freeing device [ 1046.884478][ T6290] pimreg3: entered allmulticast mode [ 1047.246949][ T6297] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14807'. [ 1047.273501][ T6297] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14807'. [ 1047.913315][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14813'. [ 1047.981505][ T30] audit: type=1326 audit(1751074158.443:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6312 comm="syz.5.14814" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9cad58e929 code=0x0 [ 1048.019423][ T6315] netlink: 'syz.2.14815': attribute type 10 has an invalid length. [ 1048.038195][T32187] bridge_slave_1: left allmulticast mode [ 1048.038434][ T6315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14815'. [ 1048.063462][T32187] bridge_slave_1: left promiscuous mode [ 1048.076053][T32187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.123258][T32187] bridge_slave_0: left allmulticast mode [ 1048.129010][T32187] bridge_slave_0: left promiscuous mode [ 1048.163251][T32187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.401702][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1048.421107][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1048.435931][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1048.459015][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1048.469106][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1048.710393][T32187] team0: Port device geneve1 removed [ 1048.897639][T32187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1048.917523][T32187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1048.929679][T32187] bond0 (unregistering): Released all slaves [ 1049.099413][T32187] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1049.109190][T32187] bond2 (unregistering): left promiscuous mode [ 1049.118210][T32187] bond1 (unregistering): Released all slaves [ 1049.142687][ T9] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1049.294269][T32187] bond2 (unregistering): Released all slaves [ 1049.309102][ T6315] dummy0: entered promiscuous mode [ 1049.314940][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1049.325743][ T6315] bridge0: port 1(dummy0) entered blocking state [ 1049.337252][ T6315] bridge0: port 1(dummy0) entered disabled state [ 1049.348302][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1049.362193][ T6315] dummy0: entered allmulticast mode [ 1049.368745][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.391186][ T9] usb 6-1: Product: syz [ 1049.399472][ T9] usb 6-1: Manufacturer: syz [ 1049.408679][ T6342] batadv_slave_1: entered promiscuous mode [ 1049.436257][ T9] usb 6-1: SerialNumber: syz [ 1049.450459][ T9] usb 6-1: config 0 descriptor?? [ 1049.473216][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1049.552729][ T6341] batadv_slave_1: left promiscuous mode [ 1049.750512][T32187] hsr_slave_0: left promiscuous mode [ 1049.765582][T32187] hsr_slave_1: left promiscuous mode [ 1049.784468][T32187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1049.805777][T32187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1049.870556][ T6354] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 1050.003967][ T6356] netlink: 'syz.3.14831': attribute type 1 has an invalid length. [ 1050.499843][ T9] gspca_sonixj: reg_w1 err -71 [ 1050.547074][ T51] Bluetooth: hci0: command tx timeout [ 1050.602616][ T9] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1050.654443][ T9] usb 6-1: USB disconnect, device number 50 [ 1050.951149][T32187] team0 (unregistering): Port device team_slave_1 removed [ 1051.123651][T32187] team0 (unregistering): Port device team_slave_0 removed [ 1051.358265][ T6389] kvm: kvm [6388]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x200000000280 [ 1051.567694][ T6394] program syz.5.14848 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1051.592621][ T9] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1051.788547][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.811290][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1051.822578][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.844518][ T9] usb 3-1: config 0 descriptor?? [ 1051.920855][ T6400] netlink: 71 bytes leftover after parsing attributes in process `syz.6.14851'. [ 1052.005102][ T6356] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1052.014397][ T6359] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1052.295658][ T9] keytouch 0003:0926:3333.008B: fixing up Keytouch IEC report descriptor [ 1052.318935][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.008B/input/input95 [ 1052.422574][ T9] keytouch 0003:0926:3333.008B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1052.607616][ T6325] chnl_net:caif_netlink_parms(): no params data found [ 1052.622723][ T51] Bluetooth: hci0: command tx timeout [ 1052.631198][ T6415] overlayfs: failed to clone lowerpath [ 1052.964965][ T9] usb 3-1: USB disconnect, device number 115 [ 1053.064317][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.073101][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.098341][ T6325] bridge_slave_0: entered allmulticast mode [ 1053.135793][ T6325] bridge_slave_0: entered promiscuous mode [ 1053.148582][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.165817][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.182490][ T6325] bridge_slave_1: entered allmulticast mode [ 1053.200912][ T6325] bridge_slave_1: entered promiscuous mode [ 1053.297856][ T6325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.321580][ T6325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.459982][ T6325] team0: Port device team_slave_0 added [ 1053.481975][ T6325] team0: Port device team_slave_1 added [ 1053.527293][ T30] audit: type=1400 audit(1751074163.993:1997): lsm=SMACK fn=smack_inode_set_acl action=denied subject="w" object="_" requested=w pid=6434 comm="syz.5.14864" name="85" dev="tmpfs" ino=444 [ 1053.679430][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.696888][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.765879][ T6325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.798171][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.815542][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.859397][ T6325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.036204][ T6325] hsr_slave_0: entered promiscuous mode [ 1054.058437][ T6325] hsr_slave_1: entered promiscuous mode [ 1054.626850][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.633749][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.703109][ T51] Bluetooth: hci0: command tx timeout [ 1054.752715][ T9] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1054.922153][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1054.942777][ T9] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1054.948583][ T6325] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1054.952017][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.972839][ T9] usb 3-1: Product: syz [ 1054.977552][ T9] usb 3-1: Manufacturer: syz [ 1054.987564][ T9] usb 3-1: SerialNumber: syz [ 1054.996930][ T9] usb 3-1: config 0 descriptor?? [ 1055.012745][ T6325] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1055.026140][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 1055.036987][ T6325] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1055.077351][ T6325] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1055.428979][ T6325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.488611][ T6325] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.514234][ T6485] netlink: 428 bytes leftover after parsing attributes in process `syz.6.14884'. [ 1055.537832][T19882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.545099][T19882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.564694][T19882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.571920][T19882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1055.590316][ T6485] netlink: 56 bytes leftover after parsing attributes in process `syz.6.14884'. [ 1055.664673][ T9] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input96 [ 1055.916388][ T5934] usb 3-1: USB disconnect, device number 116 [ 1056.121022][ T6498] syzkaller1: entered promiscuous mode [ 1056.134310][ T6498] syzkaller1: entered allmulticast mode [ 1056.295990][ T6325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1056.782709][ T51] Bluetooth: hci0: command tx timeout [ 1057.125035][ T6325] veth0_vlan: entered promiscuous mode [ 1057.156923][ T6325] veth1_vlan: entered promiscuous mode [ 1057.221223][ T6325] veth0_macvtap: entered promiscuous mode [ 1057.286491][ T6325] veth1_macvtap: entered promiscuous mode [ 1057.366874][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.438631][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.476713][ T6325] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.499743][ T6325] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.521630][ T6325] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.563021][ T6325] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.859408][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.894187][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.991211][T32185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.022554][T32185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.544274][ T4392] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.566040][ T5965] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 1058.706840][ T4392] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.734832][ T5965] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.751688][ T5965] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1058.777740][ T5965] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1058.795311][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.809103][ T5965] usb 6-1: Product: syz [ 1058.816133][ T5965] usb 6-1: Manufacturer: syz [ 1058.820860][ T5965] usb 6-1: SerialNumber: syz [ 1058.880239][ T4392] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.045200][ T4392] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.083814][ T5965] usb 6-1: 0:2 : does not exist [ 1059.111688][ T5965] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1059.205888][ T5965] usb 6-1: USB disconnect, device number 51 [ 1059.402046][ T4392] bridge_slave_1: left allmulticast mode [ 1059.408155][ T4392] bridge_slave_1: left promiscuous mode [ 1059.424458][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.441446][ T4392] bridge_slave_0: left allmulticast mode [ 1059.448435][ T4392] bridge_slave_0: left promiscuous mode [ 1059.461061][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.807433][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1059.819655][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1059.830513][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1059.894468][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1059.914135][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1060.966864][ T4392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.991926][ T4392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.013662][ T4392] bond0 (unregistering): Released all slaves [ 1061.638932][ T4392] hsr_slave_0: left promiscuous mode [ 1061.657970][ T4392] hsr_slave_1: left promiscuous mode [ 1061.683769][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.691368][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.709885][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.725273][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.851625][ T4392] veth1_macvtap: left promiscuous mode [ 1061.875748][ T4392] veth0_macvtap: left promiscuous mode [ 1061.900985][ T4392] veth1_vlan: left promiscuous mode [ 1061.907089][ T4392] veth0_vlan: left promiscuous mode [ 1061.982731][ T51] Bluetooth: hci0: command tx timeout [ 1062.057282][ T6637] program syz.3.14947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1062.711904][ T4392] team0 (unregistering): Port device team_slave_1 removed [ 1062.780163][ T4392] team0 (unregistering): Port device team_slave_0 removed [ 1063.655325][ T6652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14952'. [ 1063.814394][ T6561] chnl_net:caif_netlink_parms(): no params data found [ 1063.986451][ T6561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.996285][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.004553][ T6561] bridge_slave_0: entered allmulticast mode [ 1064.013552][ T6561] bridge_slave_0: entered promiscuous mode [ 1064.026957][ T6561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.035027][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.043261][ T6561] bridge_slave_1: entered allmulticast mode [ 1064.051549][ T6561] bridge_slave_1: entered promiscuous mode [ 1064.063849][ T51] Bluetooth: hci0: command tx timeout [ 1064.220173][ T30] audit: type=1326 audit(1751074174.683:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6662 comm="syz.6.14959" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cb138e929 code=0x0 [ 1064.263072][ T30] audit: type=1326 audit(1751074174.733:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6662 comm="syz.6.14959" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f8cb138e929 code=0x0 [ 1064.284218][ C1] vkms_vblank_simulate: vblank timer overrun [ 1064.392926][ T4392] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.466197][ T6561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.584568][ T4392] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.656538][ T6561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.694775][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1064.714330][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1064.727697][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1064.731636][ T6673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1064.756866][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1064.766812][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1064.844833][ T4392] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.872389][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1065.010775][ T6561] team0: Port device team_slave_0 added [ 1065.111959][ T4392] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.193394][ T6561] team0: Port device team_slave_1 added [ 1065.336704][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.352189][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.411785][ T6561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.434741][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.441743][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.507775][ T6561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.532767][T29392] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1065.703158][T29392] usb 4-1: Using ep0 maxpacket: 16 [ 1065.726427][T29392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.763150][T29392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1065.792834][T29392] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1065.827444][T29392] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1065.843656][T29392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.858667][T29392] usb 4-1: config 0 descriptor?? [ 1065.914557][ T6561] hsr_slave_0: entered promiscuous mode [ 1065.921901][ T6561] hsr_slave_1: entered promiscuous mode [ 1066.062384][ T4392] bridge_slave_1: left allmulticast mode [ 1066.068231][ T4392] bridge_slave_1: left promiscuous mode [ 1066.084866][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.101178][ T4392] bridge_slave_0: left allmulticast mode [ 1066.122134][ T4392] bridge_slave_0: left promiscuous mode [ 1066.127930][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.142855][ T51] Bluetooth: hci0: command tx timeout [ 1066.304259][T29392] hid_map_usage: 11766 callbacks suppressed [ 1066.304281][T29392] HID 045e:07da: Invalid code 65791 type 1 [ 1066.340355][T29392] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.008C/input/input97 [ 1066.362752][T29392] microsoft 0003:045E:07DA.008C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1066.555968][ T5934] usb 4-1: USB disconnect, device number 99 [ 1066.868196][ T5827] Bluetooth: hci4: command tx timeout [ 1066.960417][ T4392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1066.970173][ T4392] bond_slave_0: left promiscuous mode [ 1066.979926][ T4392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.989726][ T4392] bond_slave_1: left promiscuous mode [ 1066.998584][ T4392] bond0 (unregistering): Released all slaves [ 1068.029872][ T6713] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000005 [ 1068.117920][ T6670] chnl_net:caif_netlink_parms(): no params data found [ 1068.189894][ T4392] hsr_slave_0: left promiscuous mode [ 1068.225894][ T5827] Bluetooth: hci0: command tx timeout [ 1068.233701][ T4392] hsr_slave_1: left promiscuous mode [ 1068.239942][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.248501][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.287649][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1068.300101][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.377325][ T4392] veth1_macvtap: left promiscuous mode [ 1068.392346][ T4392] veth0_macvtap: left promiscuous mode [ 1068.398121][ T4392] veth1_vlan: left promiscuous mode [ 1068.412823][ T4392] veth0_vlan: left promiscuous mode [ 1068.942919][ T5827] Bluetooth: hci4: command tx timeout [ 1069.158543][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14990'. [ 1069.510031][ T4392] team0 (unregistering): Port device team_slave_1 removed [ 1069.571503][ T4392] team0 (unregistering): Port device team_slave_0 removed [ 1070.376846][ T6743] netlink: 136 bytes leftover after parsing attributes in process `syz.3.14991'. [ 1070.419331][ T6740] IPVS: Error joining to the multicast group [ 1070.652643][ T6753] overlayfs: failed to clone upperpath [ 1070.771292][ T6670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.792493][ T6670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.800958][ T6670] bridge_slave_0: entered allmulticast mode [ 1070.803102][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14996'. [ 1070.812323][ T6670] bridge_slave_0: entered promiscuous mode [ 1070.843713][ T6670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.850928][ T6670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.880282][ T6670] bridge_slave_1: entered allmulticast mode [ 1070.897278][ T6670] bridge_slave_1: entered promiscuous mode [ 1071.022984][ T5827] Bluetooth: hci4: command tx timeout [ 1071.182740][ T6772] netlink: 'syz.6.15002': attribute type 10 has an invalid length. [ 1071.208493][ T6670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.228897][ T6670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.269666][ T6561] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1071.289189][ T6561] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1071.332998][ T6561] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1071.345839][ T6561] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1071.372677][ T5934] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1071.396701][ T6670] team0: Port device team_slave_0 added [ 1071.410427][ T6670] team0: Port device team_slave_1 added [ 1071.506852][ T6670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.525036][ T6670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.550930][ C1] vkms_vblank_simulate: vblank timer overrun [ 1071.567409][ T6670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.592673][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 1071.599966][ T6670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.608277][ T6670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.634317][ C1] vkms_vblank_simulate: vblank timer overrun [ 1071.641963][ T6670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.662864][ T5934] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1071.688224][ T5934] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1071.699743][ T5934] usb 3-1: string descriptor 0 read error: -22 [ 1071.706689][ T5934] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1071.721683][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.753776][ T5934] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1071.783209][ T5934] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1071.794858][ T5934] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1071.802741][ T5934] usb 3-1: media controller created [ 1071.835761][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1071.852834][ T6670] hsr_slave_0: entered promiscuous mode [ 1071.865549][ T6670] hsr_slave_1: entered promiscuous mode [ 1071.883702][ T6670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1071.891301][ T6670] Cannot create hsr debugfs directory [ 1071.977338][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15008'. [ 1072.229078][ T6561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1072.381553][ T6561] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.467838][ T6799] input: syz1 as /devices/virtual/input/input98 [ 1072.476806][T19912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.483957][T19912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.598963][T19912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.606228][T19912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.943756][ T5934] zl10353_read_register: readreg error (reg=127, ret==0) [ 1072.952906][ T6769] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 1072.976426][ T6670] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1073.038962][ T6670] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1073.048744][ T5934] usb 3-1: USB disconnect, device number 117 [ 1073.089202][ T6670] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1073.103037][ T5827] Bluetooth: hci4: command tx timeout [ 1073.138147][ T6670] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1073.505021][ T6561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.528459][ T6670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1073.604518][ T6670] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.680572][ T4390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.687839][ T4390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1073.716024][ T4390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.723292][ T4390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1074.135061][ T6841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1074.509642][ T6561] veth0_vlan: entered promiscuous mode [ 1074.553708][ T6561] veth1_vlan: entered promiscuous mode [ 1074.577247][ T6670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.745906][ T6561] veth0_macvtap: entered promiscuous mode [ 1074.803916][ T6561] veth1_macvtap: entered promiscuous mode [ 1074.832132][ T6670] veth0_vlan: entered promiscuous mode [ 1074.868936][ T6670] veth1_vlan: entered promiscuous mode [ 1074.902019][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1074.934551][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1074.974581][ T6561] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.012469][ T6561] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.032701][ T6561] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.052701][ T6561] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.102373][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1075.216328][ T6670] veth0_macvtap: entered promiscuous mode [ 1075.310701][ T6670] veth1_macvtap: entered promiscuous mode [ 1075.461030][ T6670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1075.501136][ T4392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.521792][ T4392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.578931][ T6670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1075.620625][ T6670] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.662966][ T6670] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.695627][ T6670] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.712268][ T6670] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.815073][ T4390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.828994][ T4390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.018959][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.031221][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.206582][ T4388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.225250][ T4388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.476807][T19882] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.565254][ T6894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.610691][ T6894] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1076.766099][T19882] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.305921][T19882] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.448896][ T6919] 9pnet: p9_errstr2errno: server reported unknown error [ 1077.536797][ T6910] binder: 6909:6910 ioctl c0306201 200000001a80 returned -14 [ 1077.597625][T19882] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.112374][T19882] bridge_slave_1: left allmulticast mode [ 1078.142708][T19882] bridge_slave_1: left promiscuous mode [ 1078.148553][T19882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.203661][T19882] bridge_slave_0: left allmulticast mode [ 1078.209381][T19882] bridge_slave_0: left promiscuous mode [ 1078.242398][T19882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.253731][ T5934] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 1078.370474][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1078.385541][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1078.397252][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1078.425321][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.437026][ T5934] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1078.447141][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1078.459480][ T5934] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1078.470475][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.479667][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1078.493801][ T5934] usb 4-1: config 0 descriptor?? [ 1078.503293][ T5934] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1078.510143][ T5934] dvb-usb: bulk message failed: -22 (3/0) [ 1078.527752][ T5934] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1078.538196][ T5934] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1078.546302][ T5934] usb 4-1: media controller created [ 1078.555505][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1078.583888][ T5934] dvb-usb: bulk message failed: -22 (6/0) [ 1078.591668][ T5934] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1078.606582][ T5934] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input99 [ 1078.638562][ T5934] dvb-usb: schedule remote query interval to 150 msecs. [ 1078.650176][ T5934] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1078.806249][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 1078.824446][ T5934] dvb-usb: error while querying for an remote control event. [ 1079.007910][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 1079.019468][ T5934] dvb-usb: error while querying for an remote control event. [ 1079.148542][ T5934] usb 4-1: USB disconnect, device number 100 [ 1079.204539][ T5934] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1079.405971][ T5867] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 1079.584701][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1079.599599][T19882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1079.599623][ T5867] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1079.621673][T19882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.633840][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.649881][T19882] bond0 (unregistering): Released all slaves [ 1079.657759][ T5867] usb 3-1: config 0 descriptor?? [ 1079.671027][ T6965] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1080.197806][ T5867] elan 0003:04F3:0755.008D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 1080.255953][ T6990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15076'. [ 1080.376883][ T6990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15076'. [ 1080.476771][ T5867] usb 3-1: USB disconnect, device number 118 [ 1080.542697][ T51] Bluetooth: hci0: command tx timeout [ 1080.581676][T19882] hsr_slave_0: left promiscuous mode [ 1080.630445][T19882] hsr_slave_1: left promiscuous mode [ 1080.652026][T19882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1080.682270][T19882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1080.700767][T19882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1080.712819][T19882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1080.770469][T19882] veth1_macvtap: left promiscuous mode [ 1080.789564][T19882] veth0_macvtap: left promiscuous mode [ 1080.796199][T19882] veth1_vlan: left promiscuous mode [ 1080.801594][T19882] veth0_vlan: left promiscuous mode [ 1080.863594][ T5912] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1081.022516][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 1081.073058][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1081.088743][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1081.135042][ T5912] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1081.164493][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.192893][ T5912] usb 4-1: Product: syz [ 1081.197170][ T5912] usb 4-1: Manufacturer: syz [ 1081.201785][ T5912] usb 4-1: SerialNumber: syz [ 1081.235081][ T5912] usb 4-1: config 0 descriptor?? [ 1081.254834][ T5912] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1081.282686][ T5912] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1081.859121][ T5912] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1081.868546][ T5912] em28xx 4-1:0.0: Config register raw data: 0x41 [ 1082.074061][ T5912] usb 4-1: USB disconnect, device number 101 [ 1082.081847][ T5912] em28xx 4-1:0.0: Disconnecting em28xx [ 1082.092850][T29392] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1082.104164][ T5912] em28xx 4-1:0.0: Freeing device [ 1082.254954][T29392] usb 2-1: Using ep0 maxpacket: 16 [ 1082.284167][T29392] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.297027][T29392] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1082.346426][T29392] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1082.363557][T29392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.398246][T29392] usb 2-1: Product: syz [ 1082.403066][T29392] usb 2-1: Manufacturer: syz [ 1082.407697][T29392] usb 2-1: SerialNumber: syz [ 1082.622836][ T51] Bluetooth: hci0: command tx timeout [ 1082.999349][T29392] usb 2-1: 0:2 : does not exist [ 1083.176800][T19882] team0 (unregistering): Port device team_slave_1 removed [ 1083.304215][T19882] team0 (unregistering): Port device team_slave_0 removed [ 1083.655341][ T5867] usb 2-1: USB disconnect, device number 54 [ 1084.380703][ T6945] chnl_net:caif_netlink_parms(): no params data found [ 1084.550121][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15099'. [ 1084.614458][ T7046] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15099'. [ 1084.718553][ T51] Bluetooth: hci0: command tx timeout [ 1084.932030][ T6945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.940621][ T6945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.978395][ T6945] bridge_slave_0: entered allmulticast mode [ 1085.001431][ T6945] bridge_slave_0: entered promiscuous mode [ 1085.034275][ T6945] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.045786][ T6945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.054421][ T6945] bridge_slave_1: entered allmulticast mode [ 1085.066506][ T6945] bridge_slave_1: entered promiscuous mode [ 1085.147689][ T7065] @: renamed from vlan0 [ 1085.166755][ T7065] tipc: Disabling bearer [ 1085.271786][ T6945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.314417][ T6945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.420558][ T7074] sctp: [Deprecated]: syz.6.15111 (pid 7074) Use of int in max_burst socket option deprecated. [ 1085.420558][ T7074] Use struct sctp_assoc_value instead [ 1085.479054][ T6945] team0: Port device team_slave_0 added [ 1085.509393][ T6945] team0: Port device team_slave_1 added [ 1085.925336][ T6945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.939519][ T6945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.987929][ T6945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.028879][ T6945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.059334][ T6945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.097018][ T6945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.109082][ T30] audit: type=1800 audit(1751074196.583:2000): pid=7095 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.15120" name="nullb0" dev="devtmpfs" ino=3773 res=0 errno=0 [ 1086.506052][ T6945] hsr_slave_0: entered promiscuous mode [ 1086.536937][ T6945] hsr_slave_1: entered promiscuous mode [ 1086.782789][ T51] Bluetooth: hci0: command tx timeout [ 1087.214095][ T6898] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1087.295658][ T7124] netlink: 'syz.1.15131': attribute type 29 has an invalid length. [ 1087.350866][ T7124] netlink: 500 bytes leftover after parsing attributes in process `syz.1.15131'. [ 1087.379987][ T7125] netlink: 'syz.1.15131': attribute type 29 has an invalid length. [ 1087.389747][ T6898] usb 3-1: Using ep0 maxpacket: 32 [ 1087.413167][ T6898] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 1087.452170][ T6898] usb 3-1: config 0 has no interface number 0 [ 1087.499152][ T6898] usb 3-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 1087.532405][ T6898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.540466][ T6898] usb 3-1: Product: syz [ 1087.563538][ T6898] usb 3-1: Manufacturer: syz [ 1087.568206][ T6898] usb 3-1: SerialNumber: syz [ 1087.599526][ T6898] usb 3-1: config 0 descriptor?? [ 1087.870626][ T6898] kaweth 3-1:0.235: Firmware present in device. [ 1088.045446][ T6898] kaweth 3-1:0.235: Statistics collection: 0 [ 1088.073001][ T6898] kaweth 3-1:0.235: Multicast filter limit: 0 [ 1088.079258][ T6898] kaweth 3-1:0.235: MTU: 0 [ 1088.122955][ T6898] kaweth 3-1:0.235: Read MAC address 00:00:00:00:00:00 [ 1088.330855][ T6945] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1088.448097][ T6898] kaweth 3-1:0.235: Error setting SOFS wait [ 1088.460230][ T6945] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1088.467659][ T6898] kaweth 3-1:0.235: probe with driver kaweth failed with error -5 [ 1088.498610][ T6945] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1088.510511][ T6898] usb 3-1: USB disconnect, device number 119 [ 1088.544799][ T6945] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1088.745914][ T6945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1088.753492][ T30] audit: type=1800 audit(1751074199.223:2001): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.15144" name="nullb0" dev="devtmpfs" ino=3773 res=0 errno=0 [ 1088.805546][ T6945] 8021q: adding VLAN 0 to HW filter on device team0 [ 1088.829549][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.836804][ T4392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.877076][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.884381][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.498185][ T30] audit: type=1326 audit(1751074199.973:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7189 comm="syz.1.15156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f440d72ab19 code=0x7ffc0000 [ 1089.536218][ T6945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1089.597524][ T30] audit: type=1326 audit(1751074199.973:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7189 comm="syz.1.15156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f440d72ab19 code=0x7ffc0000 [ 1089.692355][ T30] audit: type=1326 audit(1751074199.973:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7189 comm="syz.1.15156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f440d72ab19 code=0x7ffc0000 [ 1089.783153][ T30] audit: type=1326 audit(1751074199.973:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7189 comm="syz.1.15156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f440d72ab19 code=0x7ffc0000 [ 1089.879418][ T30] audit: type=1326 audit(1751074199.973:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7189 comm="syz.1.15156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f440d72ab19 code=0x7ffc0000 [ 1089.903907][ T30] audit: type=1326 audit(1751074199.973:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7189 comm="syz.1.15156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f440d72ab19 code=0x7ffc0000 [ 1089.931791][ T30] audit: type=1326 audit(1751074199.973:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7189 comm="syz.1.15156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f440d72ab19 code=0x7ffc0000 [ 1089.954814][ T30] audit: type=1326 audit(1751074199.973:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7189 comm="syz.1.15156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f440d72ab19 code=0x7ffc0000 [ 1090.467953][ T6945] veth0_vlan: entered promiscuous mode [ 1090.506645][ T6945] veth1_vlan: entered promiscuous mode [ 1090.590727][ T6945] veth0_macvtap: entered promiscuous mode [ 1090.601110][ T6945] veth1_macvtap: entered promiscuous mode [ 1090.620077][ T6945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1090.639902][ T6945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1090.653451][ T6945] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.664503][ T6945] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.674393][ T6945] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.686485][ T6945] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.821265][T32181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.830348][T32181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.837990][ T6898] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1090.886972][T32187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.896560][T32187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.005524][ T6898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.033504][ T6898] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1091.066597][ T6898] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1091.096323][ T6898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1091.122133][ T6898] usb 2-1: SerialNumber: syz [ 1091.359312][ T6898] usb 2-1: 0:2 : does not exist [ 1091.382655][ T6898] usb 2-1: USB disconnect, device number 55 [ 1092.155992][ T30] kauditd_printk_skb: 144 callbacks suppressed [ 1092.156018][ T30] audit: type=1326 audit(1751074202.633:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7242 comm="syz.2.15175" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff14eb8e929 code=0x0 [ 1092.763220][ T7257] program syz.3.15181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1092.837435][ T4392] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.067441][ T4392] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.175802][ T4392] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.278848][ T4392] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.453502][ T4392] bridge_slave_1: left allmulticast mode [ 1093.459218][ T4392] bridge_slave_1: left promiscuous mode [ 1093.465796][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.480042][ T4392] bridge_slave_0: left allmulticast mode [ 1093.486234][ T4392] bridge_slave_0: left promiscuous mode [ 1093.492102][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.196136][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1199.203150][ C0] rcu: 1-...!: (1 GPs behind) idle=e4bc/1/0x4000000000000000 softirq=194916/194917 fqs=1 [ 1199.214585][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7258/1:b..l [ 1199.222532][ C0] rcu: (detected by 0, t=10505 jiffies, g=197697, q=210 ncpus=2) [ 1199.230356][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1199.230389][ C1] NMI backtrace for cpu 1 [ 1199.230405][ C1] CPU: 1 UID: 0 PID: 7271 Comm: syz.2.15187 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 1199.230425][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1199.230435][ C1] RIP: 0010:rcu_is_watching+0x10/0xb0 [ 1199.230463][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 f0 ad f2 10 5b ef b8 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df [ 1199.230478][ C1] RSP: 0018:ffffc90000a08d20 EFLAGS: 00000086 [ 1199.230493][ C1] RAX: ffffffff81ae5f3b RBX: ffff8880b8727d08 RCX: 0000000000010000 [ 1199.230505][ C1] RDX: ffff88802ef9da00 RSI: 0000000000000001 RDI: 0000000000000002 [ 1199.230516][ C1] RBP: ffffc90000a08e90 R08: ffffffff8f9fdff7 R09: 1ffffffff1f3fbfe [ 1199.230528][ C1] R10: dffffc0000000000 R11: fffffbfff1f3fbff R12: ffff88802a169340 [ 1199.230540][ C1] R13: 0000000000000000 R14: ffffffff897f70e0 R15: 0000000000000001 [ 1199.230551][ C1] FS: 0000000000000000(0000) GS:ffff888125d84000(0000) knlGS:0000000000000000 [ 1199.230565][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1199.230582][ C1] CR2: 000000110c38a261 CR3: 000000005148e000 CR4: 00000000003526f0 [ 1199.230599][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1199.230616][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1199.230627][ C1] Call Trace: [ 1199.230635][ C1] [ 1199.230644][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1199.230664][ C1] __hrtimer_run_queues+0x475/0xc60 [ 1199.230696][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1199.230717][ C1] ? read_tsc+0x9/0x20 [ 1199.230739][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 1199.230775][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 1199.230799][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1199.230819][ C1] [ 1199.230826][ C1] [ 1199.230833][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1199.230850][ C1] RIP: 0010:x2apic_send_IPI+0x73/0xe0 [ 1199.230867][ C1] Code: 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 75 42 41 8b 16 0f ae f0 0f ae e8 83 fb 02 b8 00 04 00 00 0f 45 c3 b9 30 08 00 00 0f 30 <66> 90 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 89 fe 89 fd 48 c7 [ 1199.230880][ C1] RSP: 0018:ffffc90000b97570 EFLAGS: 00000206 [ 1199.230894][ C1] RAX: 00000000000000fb RBX: 00000000000000fb RCX: 0000000000000830 [ 1199.230904][ C1] RDX: 0000000000000000 RSI: 00000000000000fb RDI: 0000000000000000 [ 1199.230914][ C1] RBP: ffffc90000b97700 R08: ffffffff8f9fdff7 R09: 1ffffffff1f3fbfe [ 1199.230926][ C1] R10: dffffc0000000000 R11: ffffffff81702110 R12: dffffc0000000000 [ 1199.230938][ C1] R13: dffffc0000000000 R14: ffff8880b86201b0 R15: ffffffff8db92c60 [ 1199.230952][ C1] ? __pfx_native_send_call_func_single_ipi+0x10/0x10 [ 1199.230977][ C1] smp_call_function_many_cond+0xc8c/0x12d0 [ 1199.231001][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1199.231021][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1199.231043][ C1] ? __kernel_text_address+0xd/0x40 [ 1199.231061][ C1] ? unwind_get_return_address+0x4d/0x90 [ 1199.231082][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1199.231098][ C1] ? arch_stack_walk+0xfc/0x150 [ 1199.231122][ C1] ? rcu_is_watching+0x15/0xb0 [ 1199.231144][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1199.231159][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1199.231182][ C1] flush_tlb_mm_range+0x6b1/0x12c0 [ 1199.231203][ C1] ? free_pgd_range+0x144b/0x14c0 [ 1199.231226][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1199.231248][ C1] tlb_flush_mmu+0x1a7/0x680 [ 1199.231273][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 1199.231293][ C1] ? free_pgd_range+0x144b/0x14c0 [ 1199.231315][ C1] free_ldt_pgtables+0x17b/0x320 [ 1199.231340][ C1] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 1199.231371][ C1] ? down_read+0x1ad/0x2e0 [ 1199.231388][ C1] exit_mmap+0x17c/0xb50 [ 1199.231406][ C1] ? uprobe_clear_state+0x20f/0x290 [ 1199.231427][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1199.231444][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1199.231472][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1199.231495][ C1] ? uprobe_clear_state+0x274/0x290 [ 1199.231512][ C1] ? mm_update_next_owner+0xa7/0x870 [ 1199.231532][ C1] __mmput+0x118/0x420 [ 1199.231554][ C1] exit_mm+0x1da/0x2c0 [ 1199.231571][ C1] ? __pfx_exit_mm+0x10/0x10 [ 1199.231589][ C1] ? rcu_is_watching+0x15/0xb0 [ 1199.231618][ C1] do_exit+0x648/0x22e0 [ 1199.231638][ C1] ? preempt_schedule_common+0x83/0xd0 [ 1199.231658][ C1] ? preempt_schedule+0xae/0xc0 [ 1199.231677][ C1] ? __pfx_do_exit+0x10/0x10 [ 1199.231697][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1199.231719][ C1] do_group_exit+0x21c/0x2d0 [ 1199.231739][ C1] __x64_sys_exit_group+0x3f/0x40 [ 1199.231756][ C1] x64_sys_call+0x21ba/0x21c0 [ 1199.231771][ C1] do_syscall_64+0xfa/0x3b0 [ 1199.231792][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1199.231812][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.231827][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1199.231845][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.231860][ C1] RIP: 0033:0x7ff14eb8e929 [ 1199.231874][ C1] Code: Unable to access opcode bytes at 0x7ff14eb8e8ff. [ 1199.231883][ C1] RSP: 002b:00007ffdc0328c88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1199.231898][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff14eb8e929 [ 1199.231909][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1199.231920][ C1] RBP: 00007ffdc0328cec R08: 00000005c0328d7f R09: 00000000000927c0 [ 1199.231931][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000cc0 [ 1199.231941][ C1] R13: 00000000000927c0 R14: 000000000010b0da R15: 00007ffdc0328d40 [ 1199.231961][ C1] [ 1199.232382][ C0] task:syz-executor state:R running task stack:24104 pid:7258 tgid:7258 ppid:5805 task_flags:0x400000 flags:0x00004000 [ 1199.800484][ C0] Call Trace: [ 1199.803797][ C0] [ 1199.806790][ C0] __schedule+0x16a2/0x4cb0 [ 1199.811335][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1199.817280][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 1199.822606][ C0] ? __pfx___schedule+0x10/0x10 [ 1199.827509][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1199.832831][ C0] preempt_schedule_irq+0xb5/0x150 [ 1199.837977][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1199.843756][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1199.849605][ C0] irqentry_exit+0x6f/0x90 [ 1199.854052][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1199.860059][ C0] RIP: 0010:unwind_next_frame+0xd4/0x2390 [ 1199.865812][ C0] Code: 13 8e 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 41 57 e8 6e 95 2b 00 48 83 c4 08 e8 75 64 ed 09 85 c0 74 3a e8 0c 87 34 00 <84> c0 75 31 e8 63 64 ed 09 85 c0 74 28 80 3d c4 27 17 0e 00 75 1f [ 1199.885453][ C0] RSP: 0018:ffffc90003f4f418 EFLAGS: 00000202 [ 1199.891588][ C0] RAX: 0000000000000001 RBX: ffffffff8211436d RCX: cc5b684b0ab85e00 [ 1199.899582][ C0] RDX: 0000000000000001 RSI: ffffffff8be1bb60 RDI: ffffffff8be1bb20 [ 1199.907574][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff81728af5 [ 1199.915573][ C0] R10: ffffc90003f4f538 R11: ffffffff81ace5b0 R12: 1ffff920007e9e9d [ 1199.923571][ C0] R13: ffffc90003f4f520 R14: ffffc90003f4f4e8 R15: ffffffff81728af5 [ 1199.931564][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1199.936709][ C0] ? __vmalloc_node_range_noprof+0x97d/0x12f0 [ 1199.942807][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1199.948985][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1199.954144][ C0] ? unwind_next_frame+0xd4/0x2390 [ 1199.959292][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1199.964439][ C0] ? alloc_pages_noprof+0xa9/0x190 [ 1199.969585][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1199.975782][ C0] arch_stack_walk+0x11c/0x150 [ 1199.980585][ C0] ? __vmalloc_node_range_noprof+0x97d/0x12f0 [ 1199.986688][ C0] stack_trace_save+0x9c/0xe0 [ 1199.991391][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1199.996807][ C0] save_stack+0xf7/0x1f0 [ 1200.001083][ C0] ? __pfx_save_stack+0x10/0x10 [ 1200.005979][ C0] ? post_alloc_hook+0x240/0x2a0 [ 1200.010952][ C0] ? get_page_from_freelist+0x21d5/0x22b0 [ 1200.016706][ C0] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 1200.022729][ C0] ? alloc_pages_mpol+0x232/0x4a0 [ 1200.027791][ C0] ? alloc_pages_noprof+0xa9/0x190 [ 1200.032930][ C0] ? __vmalloc_node_range_noprof+0x97d/0x12f0 [ 1200.039035][ C0] ? seqcount_lockdep_reader_access+0x102/0x180 [ 1200.045314][ C0] __set_page_owner+0x8d/0x4a0 [ 1200.050112][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 1200.055523][ C0] post_alloc_hook+0x240/0x2a0 [ 1200.060325][ C0] get_page_from_freelist+0x21d5/0x22b0 [ 1200.065965][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1200.071892][ C0] ? prepare_alloc_pages+0x213/0x610 [ 1200.077216][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 1200.083063][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1200.089434][ C0] ? policy_nodemask+0x27c/0x720 [ 1200.094400][ C0] ? __pfx___might_resched+0x10/0x10 [ 1200.099722][ C0] alloc_pages_mpol+0x232/0x4a0 [ 1200.104612][ C0] alloc_pages_noprof+0xa9/0x190 [ 1200.109580][ C0] __vmalloc_node_range_noprof+0x97d/0x12f0 [ 1200.115538][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1200.121915][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 1200.126806][ C0] vmalloc_user_noprof+0xad/0xf0 [ 1200.131778][ C0] ? kcov_ioctl+0x55/0x640 [ 1200.136228][ C0] kcov_ioctl+0x55/0x640 [ 1200.140501][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1200.145467][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 1200.150355][ C0] __se_sys_ioctl+0xf9/0x170 [ 1200.154976][ C0] do_syscall_64+0xfa/0x3b0 [ 1200.159513][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1200.164742][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.170843][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1200.175548][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.181463][ C0] RIP: 0033:0x7f2a58f8e52b [ 1200.185903][ C0] RSP: 002b:00007ffdda863950 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1200.194349][ C0] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f2a58f8e52b [ 1200.202342][ C0] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000de [ 1200.210335][ C0] RBP: 00007f2a591b6578 R08: 00000000000000da R09: 0000000000000000 [ 1200.218335][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1200.226331][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1200.234345][ C0] [ 1200.237387][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g197697 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1200.248688][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1200.258681][ C0] rcu: RCU grace-period kthread stack dump: [ 1200.264592][ C0] task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1200.278121][ C0] Call Trace: [ 1200.281419][ C0] [ 1200.284380][ C0] __schedule+0x16a2/0x4cb0 [ 1200.288923][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1200.294158][ C0] ? schedule+0x165/0x360 [ 1200.298520][ C0] ? __lock_acquire+0xab9/0xd20 [ 1200.303402][ C0] ? __pfx___schedule+0x10/0x10 [ 1200.308298][ C0] ? schedule+0x91/0x360 [ 1200.312578][ C0] schedule+0x165/0x360 [ 1200.316773][ C0] schedule_timeout+0x12b/0x270 [ 1200.321656][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1200.327050][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1200.332970][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1200.338302][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1200.343884][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1200.348788][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1200.354714][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1200.360037][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1200.365276][ C0] ? finish_swait+0xcd/0x1f0 [ 1200.369908][ C0] rcu_gp_kthread+0x99/0x390 [ 1200.374531][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1200.379774][ C0] ? __kthread_parkme+0x7b/0x200 [ 1200.384746][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1200.389822][ C0] kthread+0x70e/0x8a0 [ 1200.393923][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1200.399149][ C0] ? __pfx_kthread+0x10/0x10 [ 1200.403775][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1200.409004][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1200.414229][ C0] ? __pfx_kthread+0x10/0x10 [ 1200.418844][ C0] ret_from_fork+0x3fc/0x770 [ 1200.423470][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1200.428621][ C0] ? __switch_to_asm+0x39/0x70 [ 1200.433410][ C0] ? __switch_to_asm+0x33/0x70 [ 1200.438197][ C0] ? __pfx_kthread+0x10/0x10 [ 1200.442814][ C0] ret_from_fork_asm+0x1a/0x30 [ 1200.447619][ C0] [ 1200.450658][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1200.456999][ C0] CPU: 0 UID: 0 PID: 6670 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 1200.469170][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1200.479246][ C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 1200.485961][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 b0 79 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 5b 75 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 40 75 0b [ 1200.505591][ C0] RSP: 0018:ffffc9000aeb7580 EFLAGS: 00000293 [ 1200.511686][ C0] RAX: ffffffff81b4d830 RBX: ffff8880b863b040 RCX: ffff88803573da00 [ 1200.519680][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1200.527670][ C0] RBP: ffffc9000aeb76e0 R08: ffffffff8f9fdff7 R09: 1ffffffff1f3fbfe [ 1200.535666][ C0] R10: dffffc0000000000 R11: fffffbfff1f3fbff R12: 1ffff110170e7f2d [ 1200.543661][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b873f968 [ 1200.551655][ C0] FS: 000055555af01500(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000 [ 1200.560609][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1200.567215][ C0] CR2: 0000200000000280 CR3: 00000000589a8000 CR4: 00000000003526f0 [ 1200.575210][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1200.583204][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1200.591198][ C0] Call Trace: [ 1200.594496][ C0] [ 1200.597467][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1200.603835][ C0] ? ldt_dup_context+0x336/0x3e0 [ 1200.608809][ C0] ? rcu_is_watching+0x15/0xb0 [ 1200.613610][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1200.618831][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1200.623976][ C0] flush_tlb_mm_range+0x6b1/0x12c0 [ 1200.629125][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1200.634698][ C0] ? up_write+0x1c4/0x420 [ 1200.639078][ C0] dup_mmap+0x15a0/0x1ac0 [ 1200.643491][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1200.648221][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1200.654152][ C0] ? mm_init+0xca7/0xf00 [ 1200.658462][ C0] copy_mm+0x13c/0x4b0 [ 1200.662587][ C0] copy_process+0x1706/0x3c00 [ 1200.667325][ C0] ? copy_process+0x97f/0x3c00 [ 1200.672140][ C0] ? __pfx_copy_process+0x10/0x10 [ 1200.677211][ C0] ? __handle_mm_fault+0x1144/0x5620 [ 1200.682539][ C0] kernel_clone+0x224/0x7f0 [ 1200.687076][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1200.692147][ C0] __x64_sys_clone+0x18b/0x1e0 [ 1200.696934][ C0] ? count_memcg_event_mm+0x21/0x260 [ 1200.702245][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 1200.707574][ C0] ? do_user_addr_fault+0xc8a/0x1390 [ 1200.712892][ C0] ? do_syscall_64+0xbe/0x3b0 [ 1200.717605][ C0] do_syscall_64+0xfa/0x3b0 [ 1200.722143][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1200.727374][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.733461][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1200.738168][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.744085][ C0] RIP: 0033:0x7f440d785193 [ 1200.748530][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 1200.768162][ C0] RSP: 002b:00007ffe43fb4508 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1200.776608][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f440d785193 [ 1200.784605][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1200.792595][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1200.800588][ C0] R10: 000055555af017d0 R11: 0000000000000246 R12: 0000000000000000 [ 1200.808580][ C0] R13: 00000000000927c0 R14: 000000000010b09c R15: 00007ffe43fb46a0 [ 1200.816596][ C0]