last executing test programs: 6.648614653s ago: executing program 3 (id=1095): socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) 5.52081796s ago: executing program 3 (id=1102): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 5.318321964s ago: executing program 3 (id=1105): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) dup(0xffffffffffffffff) ioctl$RTC_AIE_OFF(r0, 0x7002) 4.883606864s ago: executing program 0 (id=1106): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) 4.883361446s ago: executing program 4 (id=1107): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x1, 'q'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x44, &(0x7f0000000d40)={0x40, 0x9, 0x1, 't'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.962274557s ago: executing program 3 (id=1113): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0xc0844123, &(0x7f0000000900)={0x0, 0x0}) 3.864217042s ago: executing program 0 (id=1114): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) socket(0xa, 0x2400000001, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x8}]}}]}, 0x38}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 3.542313321s ago: executing program 2 (id=1116): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000080)=0x80000049, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss, @sack_perm, @window={0x3, 0x74a}, @timestamp, @mss, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="6534d06531cfe2b1", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000440)="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", 0x579}], 0x1}}], 0x2, 0x800) 3.42883765s ago: executing program 1 (id=1117): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000b7050000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x87}, 0x0) socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002cc0)={r0, r2, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x1c) 3.390375143s ago: executing program 2 (id=1118): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getchain={0x24, 0x66, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0x6, 0xfff2}, {0x0, 0x8}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x80000000}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.195767124s ago: executing program 2 (id=1119): open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) syz_emit_ethernet(0x29a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaa00aaaaaaaaaa0086dd60cb653e02643a00fe800000000000000000000000000000fe80000000000000000000000000000086009078000000000000000000000000000d7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d9800081598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8b0034130c3818a2eaac43f1a6efc4f7772852ea05bff405aa28758ba53e0f2060e4e027f24bb723a5571d0da2ebeb3fe47f34e606cb3987e3681841f511126b773758e143f6be25d6965fcca35155fec3f970e2067f5db8a5de787eaf96b5957e6b988c02ae9fe26ec3118d9fdcca129d1269b290f687cde5b4eaba737c806335ca0d1e43697d144c6df4dc0d31e84004bc22e87b6e2daab5674479c76a1be360d309e7e7e5fa089032b331a3ceea18d92124681c0b78a0f1665ffcba0bee11950f6b4912bb302b3e648fad7ff4862ccc823e720fdb20af8ab0a6a09dfcdacf69923d60a0efeacf81e1e7e17db9547a4962bdec794c013af7210e54d43f3fe7da2f88c674f4cfd818f6a7461368bf62f1d5f98fd90f4eb74bf0559f1c6b1ebec57dba007f143108ca4be3fa330cc21a411b0b7af23ebd9282be17fb702a5ca61650b283eec78e0280e4f2713b42bd4e3615c48c55c1abe5827601038109736f9c6b7242e7c9c917309397b864eedf5ca71db1debb609b63c1b54955706017731319e0cc41083f99bd11da748b47d8715080899eb15caf19df36632b73bb22596b"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.195117411s ago: executing program 1 (id=1129): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x44) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x6) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000380)='./file0\x00', 0xa6000159) read(r1, 0x0, 0x20) rmdir(&(0x7f0000000240)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 3.142565906s ago: executing program 0 (id=1120): syz_open_dev$video(0x0, 0x485, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) socket$inet_udp(0x2, 0x2, 0x0) sendto$isdn(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8aa4819727cacc018737f83d6c14cb9b8997873a31631743b066331848b50fc922028117d48bb949623e158c16fc00"/57], 0x39, 0x8800, &(0x7f0000000080)={0x22, 0x1, 0xd3, 0x1, 0x8}, 0x6) r4 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0x0, 0xffffffffffffffff) r5 = fcntl$getown(0xffffffffffffffff, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab08", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6], 0x20000600}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 3.071415786s ago: executing program 2 (id=1121): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r5, 0x0, 0x4}, 0x18) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r5, r6, 0x32, 0x0, @val=@tcx={@void, @value}}, 0x1c) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) r9 = dup(r8) r10 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x802, 0x0) ftruncate(r10, 0x200004) read$FUSE(r9, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) sendfile(r9, r10, 0x0, 0x80001d00c0d1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) 2.831935852s ago: executing program 1 (id=1122): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000200)=@req3={0x3, 0x100, 0xf6f5, 0xfffffc01, 0x0, 0x2a2f, 0x6}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x3, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022ff00000000"}}}}}, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000180)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r7, &(0x7f00000002c0)={0x2c, 0x8, r9}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$can_j1939(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)="c1e4956af0cf4b69e0f39e34725fe822d17c780895bceb8e55e2cefeb7be9786fb304af7035a31bc19662bb260d731ff89d618ce41d08655f4502b01ab543f89fc03cbd6ea3a0616ae134d3fce8a7be47d5b9ccfaf21f4642cabd5122ad2c238702edf9222217d205b4bbd9748e1a4f64f6a2a99397ce5e0581af5f92ac772b0d2cd53181e6eb1a277c5e614b83280d44b343d1d58255f2f7da4aa7c", 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f0000000340), 0x11000) vmsplice(r10, &(0x7f0000000280)=[{&(0x7f0000000080)="a5", 0x1}], 0x1, 0x0) 2.827749237s ago: executing program 0 (id=1123): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) dup(0xffffffffffffffff) ioctl$RTC_AIE_OFF(r0, 0x7002) 2.110998546s ago: executing program 4 (id=1124): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.903660892s ago: executing program 0 (id=1125): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) 1.807522043s ago: executing program 1 (id=1126): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000862000/0x3000)=nil, &(0x7f0000af8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f00004e5000/0x1000)=nil, &(0x7f000065e000/0x3000)=nil, &(0x7f0000540000/0x3000)=nil, &(0x7f00004e3000/0x3000)=nil, &(0x7f000089d000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0xfffffcda}, 0x68) setuid(r1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.381533126s ago: executing program 4 (id=1127): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@remote, r2}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'virt_wifi0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES32=r3], 0x20}}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f000000aa80)={@remote, r3}, 0x14) 1.36217097s ago: executing program 1 (id=1128): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0xffff, 0x0, "fffffffffffff1ff"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xa) 1.133428859s ago: executing program 4 (id=1130): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000080)=0x80000049, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss, @sack_perm, @window={0x3, 0x74a}, @timestamp, @mss, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="6534d06531cfe2b1", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000440)="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", 0x579}], 0x1}}], 0x2, 0x800) 1.132453402s ago: executing program 2 (id=1140): syz_open_dev$video(0x0, 0x485, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) socket$inet_udp(0x2, 0x2, 0x0) sendto$isdn(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8aa4819727cacc018737f83d6c14cb9b8997873a31631743b066331848b50fc922028117d48bb949623e158c16fc00"/57], 0x39, 0x8800, &(0x7f0000000080)={0x22, 0x1, 0xd3, 0x1, 0x8}, 0x6) r4 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0x0, 0xffffffffffffffff) r5 = fcntl$getown(0xffffffffffffffff, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab08", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6], 0x20000600}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 840.150187ms ago: executing program 2 (id=1131): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1, 0x0, r3}}, 0x40) 798.847302ms ago: executing program 4 (id=1132): syz_open_dev$video(0x0, 0x485, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) socket$inet_udp(0x2, 0x2, 0x0) sendto$isdn(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8aa4819727cacc018737f83d6c14cb9b8997873a31631743b066331848b50fc922028117d48bb949623e158c16fc00"/57], 0x39, 0x8800, &(0x7f0000000080)={0x22, 0x1, 0xd3, 0x1, 0x8}, 0x6) r4 = add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0x0, 0xffffffffffffffff) r5 = fcntl$getown(0xffffffffffffffff, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab08", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6], 0x20000600}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 743.569527ms ago: executing program 0 (id=1133): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000200)=@req3={0x3, 0x100, 0xf6f5, 0xfffffc01, 0x0, 0x2a2f, 0x6}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x3, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022ff00000000"}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = socket$unix(0x1, 0x1, 0x0) close(r3) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000180)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r4, &(0x7f00000002c0)={0x2c, 0x8, r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$can_j1939(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)="c1e4956af0cf4b69e0f39e34725fe822d17c780895bceb8e55e2cefeb7be9786fb304af7035a31bc19662bb260d731ff89d618ce41d08655f4502b01ab543f89fc03cbd6ea3a0616ae134d3fce8a7be47d5b9ccfaf21f4642cabd5122ad2c238702edf9222217d205b4bbd9748e1a4f64f6a2a99397ce5e0581af5f92ac772b0d2cd53181e6eb1a277c5e614b83280d44b343d1d58255f2f7da4aa7c", 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000340), 0x11000) vmsplice(r7, &(0x7f0000000280)=[{&(0x7f0000000080)="a5", 0x1}], 0x1, 0x0) 738.857901ms ago: executing program 3 (id=1134): syz_open_dev$video(0x0, 0x485, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) socket$inet_udp(0x2, 0x2, 0x0) sendto$isdn(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8aa4819727cacc018737f83d6c14cb9b8997873a31631743b066331848b50fc922028117d48bb949623e158c16fc00"/57], 0x39, 0x8800, &(0x7f0000000080)={0x22, 0x1, 0xd3, 0x1, 0x8}, 0x6) r4 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0x0, 0xffffffffffffffff) r5 = fcntl$getown(0xffffffffffffffff, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab08", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6], 0x20000600}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 190.680963ms ago: executing program 4 (id=1135): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 119.363188ms ago: executing program 3 (id=1136): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="601606000000cfae"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000440)={0x40, 0x1, 0x2, "b7e0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=1137): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/176, 0xb0}], 0x1}, 0x6e}], 0x1, 0x2, 0x0) r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) kernel console output (not intermixed with test programs): 72947][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.287351][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.291972][ T5137] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.295474][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.302608][ T5137] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.323907][ T5137] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.331744][ T5137] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.340855][ T5137] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.717594][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 79.875812][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 79.891465][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 80.013034][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.024881][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.032959][ T5825] bridge_slave_0: entered allmulticast mode [ 80.040050][ T5825] bridge_slave_0: entered promiscuous mode [ 80.096472][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 80.117049][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.124240][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.131837][ T5825] bridge_slave_1: entered allmulticast mode [ 80.138792][ T5825] bridge_slave_1: entered promiscuous mode [ 80.152085][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 80.230186][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.238225][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.245544][ T5824] bridge_slave_0: entered allmulticast mode [ 80.252914][ T5824] bridge_slave_0: entered promiscuous mode [ 80.300258][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.308029][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.315278][ T5824] bridge_slave_1: entered allmulticast mode [ 80.322781][ T5824] bridge_slave_1: entered promiscuous mode [ 80.335762][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.394686][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.404626][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.415448][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.423499][ T5828] bridge_slave_0: entered allmulticast mode [ 80.430820][ T5828] bridge_slave_0: entered promiscuous mode [ 80.474323][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.482266][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.490524][ T5828] bridge_slave_1: entered allmulticast mode [ 80.498145][ T5828] bridge_slave_1: entered promiscuous mode [ 80.512679][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.522367][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.529952][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.537370][ T5831] bridge_slave_0: entered allmulticast mode [ 80.544477][ T5831] bridge_slave_0: entered promiscuous mode [ 80.553368][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.560912][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.568417][ T5831] bridge_slave_1: entered allmulticast mode [ 80.575476][ T5831] bridge_slave_1: entered promiscuous mode [ 80.596635][ T5825] team0: Port device team_slave_0 added [ 80.625103][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.651513][ T5825] team0: Port device team_slave_1 added [ 80.680563][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.737668][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.747495][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.754801][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.762702][ T5840] bridge_slave_0: entered allmulticast mode [ 80.771358][ T5840] bridge_slave_0: entered promiscuous mode [ 80.788931][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.798983][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.805977][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.832675][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.864437][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.872055][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.880030][ T5840] bridge_slave_1: entered allmulticast mode [ 80.887207][ T5840] bridge_slave_1: entered promiscuous mode [ 80.909116][ T5824] team0: Port device team_slave_0 added [ 80.917066][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.927413][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.934434][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.961841][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.976947][ T5828] team0: Port device team_slave_0 added [ 80.993172][ T5824] team0: Port device team_slave_1 added [ 81.018450][ T5828] team0: Port device team_slave_1 added [ 81.027783][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.040346][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.071720][ T5831] team0: Port device team_slave_0 added [ 81.126363][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.133994][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.160491][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.175671][ T5831] team0: Port device team_slave_1 added [ 81.195123][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.205657][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.232427][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.245551][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.253084][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.279512][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.293981][ T5840] team0: Port device team_slave_0 added [ 81.304676][ T5840] team0: Port device team_slave_1 added [ 81.311616][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.318886][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.345511][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.364628][ T5829] Bluetooth: hci3: command tx timeout [ 81.366752][ T5137] Bluetooth: hci1: command tx timeout [ 81.425123][ T5824] hsr_slave_0: entered promiscuous mode [ 81.432284][ T5824] hsr_slave_1: entered promiscuous mode [ 81.438595][ T5137] Bluetooth: hci2: command tx timeout [ 81.438606][ T5829] Bluetooth: hci4: command tx timeout [ 81.439061][ T5829] Bluetooth: hci0: command tx timeout [ 81.462184][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.469275][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.496037][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.510954][ T5825] hsr_slave_0: entered promiscuous mode [ 81.518947][ T5825] hsr_slave_1: entered promiscuous mode [ 81.525047][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.534093][ T5825] Cannot create hsr debugfs directory [ 81.561984][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.569122][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.595934][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.608824][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.615900][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.642893][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.671225][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.680657][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.707209][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.778259][ T5828] hsr_slave_0: entered promiscuous mode [ 81.784726][ T5828] hsr_slave_1: entered promiscuous mode [ 81.791381][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.799187][ T5828] Cannot create hsr debugfs directory [ 81.925460][ T5840] hsr_slave_0: entered promiscuous mode [ 81.932950][ T5840] hsr_slave_1: entered promiscuous mode [ 81.939383][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.947506][ T5840] Cannot create hsr debugfs directory [ 81.961722][ T5831] hsr_slave_0: entered promiscuous mode [ 81.968476][ T5831] hsr_slave_1: entered promiscuous mode [ 81.974557][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.982752][ T5831] Cannot create hsr debugfs directory [ 82.333223][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.356755][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.367931][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.394632][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.444143][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.461065][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.475316][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.489368][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.567477][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.577991][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.611096][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.633858][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.703005][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.755978][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.765123][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.779987][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.812267][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.891993][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.905161][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.924275][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.951483][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.961920][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.969438][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.981396][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.020648][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.050223][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.057471][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.088151][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.119799][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.134059][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.141237][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.156127][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.163498][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.255503][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.271528][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.308065][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.315225][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.356179][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.363869][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.383099][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.432986][ T5824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.444366][ T5829] Bluetooth: hci3: command tx timeout [ 83.448358][ T5834] Bluetooth: hci1: command tx timeout [ 83.463020][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.516103][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.523454][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.528460][ T5834] Bluetooth: hci2: command tx timeout [ 83.536210][ T5834] Bluetooth: hci4: command tx timeout [ 83.536668][ T5829] Bluetooth: hci0: command tx timeout [ 83.544756][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.554783][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.693719][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.719358][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.830372][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.900674][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.907989][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.938266][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.945455][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.045073][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.150887][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.229743][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.252806][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.289286][ T5825] veth0_vlan: entered promiscuous mode [ 84.331204][ T5824] veth0_vlan: entered promiscuous mode [ 84.342188][ T5825] veth1_vlan: entered promiscuous mode [ 84.392629][ T5824] veth1_vlan: entered promiscuous mode [ 84.467259][ T5825] veth0_macvtap: entered promiscuous mode [ 84.500226][ T5824] veth0_macvtap: entered promiscuous mode [ 84.509549][ T5831] veth0_vlan: entered promiscuous mode [ 84.520091][ T5824] veth1_macvtap: entered promiscuous mode [ 84.535317][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.544200][ T5825] veth1_macvtap: entered promiscuous mode [ 84.568466][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.589022][ T5828] veth0_vlan: entered promiscuous mode [ 84.600693][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.623633][ T5831] veth1_vlan: entered promiscuous mode [ 84.636085][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.647347][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.657566][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.667078][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.695363][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.708090][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.721079][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.743345][ T5828] veth1_vlan: entered promiscuous mode [ 84.760398][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.771447][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.784327][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.835168][ T5840] veth0_vlan: entered promiscuous mode [ 84.852058][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.864443][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.874044][ T5825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.884693][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.909380][ T5828] veth0_macvtap: entered promiscuous mode [ 84.930323][ T5831] veth0_macvtap: entered promiscuous mode [ 84.944731][ T5840] veth1_vlan: entered promiscuous mode [ 84.955348][ T5828] veth1_macvtap: entered promiscuous mode [ 84.969193][ T5831] veth1_macvtap: entered promiscuous mode [ 85.011933][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.023635][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.034082][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.045753][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.057829][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.092718][ T5840] veth0_macvtap: entered promiscuous mode [ 85.095908][ T3604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.123471][ T3604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.133520][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.146133][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.161111][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.174108][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.185427][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.218280][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.228828][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.238404][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.247522][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.266416][ T5840] veth1_macvtap: entered promiscuous mode [ 85.276117][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.290869][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.300879][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.315273][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.325450][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.336225][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.348054][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.387978][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.400914][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.421442][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.432183][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.443686][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.454329][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.464561][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.475320][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.487682][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.517326][ T5829] Bluetooth: hci1: command tx timeout [ 85.517480][ T5834] Bluetooth: hci3: command tx timeout [ 85.530864][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.542496][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.549944][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.551585][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.566440][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.575869][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.596858][ T5834] Bluetooth: hci4: command tx timeout [ 85.597523][ T5829] Bluetooth: hci2: command tx timeout [ 85.602332][ T5137] Bluetooth: hci0: command tx timeout [ 85.642545][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.654622][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.673422][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.685725][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.698439][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.708432][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.719402][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.729813][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.740710][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.752110][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.789699][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.817968][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.834114][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.861540][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.872634][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.883705][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.894165][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.906272][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.930077][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.177398][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.178528][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.203428][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.209415][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.217985][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.312606][ T5915] cgroup: none used incorrectly [ 86.458787][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.542476][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.595949][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.988887][ T5915] orangefs_mount: mount request failed with -4 [ 87.354614][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.376363][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.506154][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.607374][ T5834] Bluetooth: hci1: command tx timeout [ 87.613974][ T5834] Bluetooth: hci3: command tx timeout [ 87.617636][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.677315][ T5834] Bluetooth: hci2: command tx timeout [ 87.682464][ T5137] Bluetooth: hci4: command tx timeout [ 87.683034][ T5829] Bluetooth: hci0: command tx timeout [ 88.120389][ T3604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.120417][ T3604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.325264][ T5924] loop5: detected capacity change from 0 to 6 [ 88.862778][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.862807][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.007039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.012264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.090773][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.090801][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.296704][ T5936] warning: `syz.4.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.846804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.855521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.864230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.907377][ T29] audit: type=1326 audit(1737766559.982:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5941 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04698cd29 code=0x7fc00000 [ 92.270436][ T58] cfg80211: failed to load regulatory.db [ 92.380118][ T5957] Zero length message leads to an empty skb [ 93.163730][ T5960] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.197264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.572474][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.692436][ T5960] Illegal XDP return value 3460246554 on prog (id 6) dev N/A, expect packet loss! [ 94.352523][ T9] kernel write not supported for file /8/projid_map (pid: 9 comm: kworker/0:1) [ 94.374986][ T29] audit: type=1326 audit(1737766563.312:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5941 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe04698cd29 code=0x7fc00000 [ 95.255942][ T5973] block device autoloading is deprecated and will be removed. [ 95.513488][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13'. [ 96.237877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 96.396852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.337550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.367363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 97.369873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.233959][ T5999] Bluetooth: MGMT ver 1.23 [ 98.737607][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 99.297368][ T9] usb 1-1: device descriptor read/all, error -71 [ 99.378501][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 99.516728][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.425046][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 100.616295][ T6016] geneve2: entered promiscuous mode [ 100.621842][ T6016] geneve2: entered allmulticast mode [ 101.336838][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 101.442886][ T6014] xt_CT: No such helper "syz0" [ 102.244371][ T6012] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.668321][ T6024] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.854042][ T6024] Cannot find add_set index 0 as target [ 103.555537][ T25] usb 3-1: string descriptor 0 read error: -71 [ 103.574303][ T25] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 103.583534][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.626298][ T25] usb 3-1: config 0 descriptor?? [ 103.635436][ T25] usb 3-1: can't set config #0, error -71 [ 103.658145][ T25] usb 3-1: USB disconnect, device number 2 [ 105.020012][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.067872][ T6011] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 107.651725][ T6036] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 107.662164][ T6036] VFS: Can't find a romfs filesystem on dev nullb0. [ 107.662164][ T6036] [ 107.870821][ T6029] Process accounting resumed [ 108.186995][ T9] usb 5-1: device not accepting address 2, error -71 [ 108.827440][ T6058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.078602][ T63] Bluetooth: hci5: Frame reassembly failed (-84) [ 111.201901][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 113.206708][ T6064] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 113.214895][ T6064] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 113.223514][ T6064] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 113.231388][ T6064] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 113.262184][ T5834] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 115.808853][ T6100] mmap: syz.0.44 (6100) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.696979][ T6109] netlink: 277 bytes leftover after parsing attributes in process `syz.0.44'. [ 119.749312][ T6131] 9pnet: Unknown protocol version 9p200 [ 119.766280][ T6131] lo speed is unknown, defaulting to 1000 [ 119.772860][ T6131] lo speed is unknown, defaulting to 1000 [ 119.785410][ T6131] lo speed is unknown, defaulting to 1000 [ 119.811013][ T6131] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 119.854218][ T6131] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 120.021428][ T6131] lo speed is unknown, defaulting to 1000 [ 120.034820][ T6131] lo speed is unknown, defaulting to 1000 [ 120.047735][ T6131] lo speed is unknown, defaulting to 1000 [ 120.060769][ T6131] lo speed is unknown, defaulting to 1000 [ 120.070159][ T6131] lo speed is unknown, defaulting to 1000 [ 120.474799][ T6131] syz.4.50 (6131) used greatest stack depth: 19136 bytes left [ 121.000665][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 121.021444][ T6153] ip6gretap1: entered allmulticast mode [ 121.446074][ T6154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.140535][ T6169] netlink: 'syz.4.67': attribute type 4 has an invalid length. [ 123.377698][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.716968][ T51] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.737326][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 123.752577][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.786698][ T8] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 123.795845][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.856049][ T8] usb 2-1: config 0 descriptor?? [ 123.896663][ T51] usb 3-1: Using ep0 maxpacket: 16 [ 123.913610][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.945523][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.958775][ T6178] team0: entered promiscuous mode [ 123.980511][ T51] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 123.996633][ T6178] team_slave_0: entered promiscuous mode [ 124.002712][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.043653][ T51] usb 3-1: config 0 descriptor?? [ 124.049255][ T6178] team_slave_1: entered promiscuous mode [ 124.382468][ T8] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 124.483446][ T51] elan 0003:04F3:0755.0002: unbalanced collection at end of report description [ 124.511754][ T51] elan 0003:04F3:0755.0002: Hid Parse failed [ 124.536781][ T51] elan 0003:04F3:0755.0002: probe with driver elan failed with error -22 [ 124.550015][ T8] usb 2-1: USB disconnect, device number 2 [ 124.607131][ T58] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 124.677139][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 124.701985][ T51] usb 3-1: USB disconnect, device number 3 [ 124.798647][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 124.824099][ T58] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c04, bcdDevice= 0.00 [ 124.844091][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.866440][ T58] usb 5-1: config 0 descriptor?? [ 124.875607][ T25] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 242, using maximum allowed: 30 [ 124.920286][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 124.934867][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.945154][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 242 [ 124.960203][ T25] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 124.971930][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.049600][ T25] usb 4-1: config 0 descriptor?? [ 125.083449][ T6198] input: syz0 as /devices/virtual/input/input5 [ 125.691118][ T58] corsair-psu 0003:1B1C:1C04.0003: unknown main item tag 0x0 [ 125.752495][ T58] corsair-psu 0003:1B1C:1C04.0003: unknown main item tag 0x0 [ 125.814487][ T58] corsair-psu 0003:1B1C:1C04.0003: hidraw0: USB HID vd.61 Device [HID 1b1c:1c04] on usb-dummy_hcd.4-1/input0 [ 125.997906][ T58] corsair-psu 0003:1B1C:1C04.0003: unable to initialize device (-38) [ 126.063363][ T58] corsair-psu 0003:1B1C:1C04.0003: probe with driver corsair-psu failed with error -38 [ 126.104023][ T25] corsair-cpro 0003:1B1C:0C10.0004: hidraw0: USB HID v0.03 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 126.208155][ T58] usb 5-1: USB disconnect, device number 4 [ 126.291709][ T25] corsair-cpro 0003:1B1C:0C10.0004: probe with driver corsair-cpro failed with error -71 [ 126.425831][ T25] usb 4-1: USB disconnect, device number 2 [ 127.038089][ T51] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.362205][ T51] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 127.376116][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.431150][ T6227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 128.387525][ T51] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 128.435403][ T51] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 128.475733][ T51] usb 2-1: Manufacturer: syz [ 128.513499][ T6231] netlink: 'syz.4.87': attribute type 10 has an invalid length. [ 128.522940][ T51] usb 2-1: config 0 descriptor?? [ 129.036661][ T51] rc_core: IR keymap rc-hauppauge not found [ 129.064944][ T51] Registered IR keymap rc-empty [ 129.192971][ T51] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 129.195970][ T6231] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 129.217672][ T51] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 129.242972][ T6231] team0: Port device wlan1 added [ 129.446833][ C1] igorplugusb 2-1:0.0: receive overflow, at least 4 lost [ 129.657368][ T5880] usb 2-1: USB disconnect, device number 3 [ 130.042705][ T29] audit: type=1400 audit(1737766598.982:4): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6255 comm="syz.4.93" saddr=172.30.0.5 daddr=172.20.20.170 netif=wpan0 [ 131.252171][ T6284] cgroup: none used incorrectly [ 131.920957][ T6284] orangefs_mount: mount request failed with -4 [ 132.212066][ T5880] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.384470][ T6294] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 132.427218][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 132.462890][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.485886][ T5880] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 132.509706][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.527984][ T5880] usb 2-1: Product: syz [ 132.533742][ T5880] usb 2-1: Manufacturer: syz [ 132.616618][ T5880] usb 2-1: SerialNumber: syz [ 132.642300][ T5880] usb 2-1: config 0 descriptor?? [ 132.669819][ T5880] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 132.886597][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 133.049189][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.095801][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.146695][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 133.173145][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 133.184984][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.201381][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.210288][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.216091][ T25] usb 3-1: config 0 descriptor?? [ 133.735326][ T25] wacom 0003:056A:0000.0005: unknown main item tag 0x0 [ 133.780254][ T25] wacom 0003:056A:0000.0005: unknown main item tag 0x0 [ 133.834957][ T25] wacom 0003:056A:0000.0005: unknown main item tag 0x0 [ 133.898377][ T25] wacom 0003:056A:0000.0005: unknown main item tag 0x0 [ 133.968826][ T5880] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 133.975830][ T5880] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 133.999635][ T5880] usb 2-1: USB disconnect, device number 4 [ 134.097185][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 134.459870][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 134.492606][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 134.506888][ T25] wacom 0003:056A:0000.0005: unknown main item tag 0x0 [ 134.517226][ T975] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.619189][ T6322] cgroup: none used incorrectly [ 134.664373][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.793912][ T975] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 134.855195][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.016660][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 135.353894][ T6322] orangefs_mount: mount request failed with -4 [ 135.361962][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 135.371304][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 135.382893][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.393283][ T975] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 135.405214][ T8] usb 4-1: config 0 descriptor?? [ 135.449750][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.496539][ T25] wacom 0003:056A:0000.0005: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 135.499395][ T975] usb 1-1: Product: syz [ 135.512124][ T25] wacom 0003:056A:0000.0005: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.2-1/input0 [ 135.533205][ T25] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0000.0005/input/input7 [ 135.551855][ T975] usb 1-1: Manufacturer: syz [ 135.574216][ T975] usb 1-1: SerialNumber: syz [ 135.589209][ T975] usb 1-1: config 0 descriptor?? [ 135.672693][ T6325] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 135.797412][ T25] usb 3-1: USB disconnect, device number 4 [ 135.895329][ T8] logitech 0003:046D:C286.0006: unknown main item tag 0x0 [ 135.976106][ T8] logitech 0003:046D:C286.0006: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.3-1/input0 [ 136.015838][ T8] logitech 0003:046D:C286.0006: no inputs found [ 136.105114][ T8] usb 4-1: USB disconnect, device number 3 [ 136.114246][ T6334] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.434553][ T6343] netlink: 'syz.4.131': attribute type 3 has an invalid length. [ 136.656616][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 136.836828][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 136.877397][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.991322][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1064, setting to 1024 [ 137.109381][ T25] usb 3-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 137.155723][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.273524][ T25] usb 3-1: config 0 descriptor?? [ 137.318720][ T6342] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.847910][ T58] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 138.169627][ T58] usb 4-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 138.216682][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.227766][ T25] usb 3-1: string descriptor 0 read error: -71 [ 138.300595][ T25] uclogic 0003:5543:3031.0007: failed retrieving string descriptor #200: -71 [ 138.313971][ T25] uclogic 0003:5543:3031.0007: failed retrieving pen parameters: -71 [ 138.325346][ T58] usb 4-1: config 0 descriptor?? [ 138.330918][ T25] uclogic 0003:5543:3031.0007: failed probing pen v2 parameters: -71 [ 138.448746][ T6368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 139.082125][ T5829] Bluetooth: Unexpected start frame (len 4) [ 139.108594][ T25] uclogic 0003:5543:3031.0007: failed probing parameters: -71 [ 139.120385][ T25] uclogic 0003:5543:3031.0007: probe with driver uclogic failed with error -71 [ 139.136832][ T25] usb 3-1: USB disconnect, device number 5 [ 139.180791][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 139.455478][ T58] logitech-djreceiver 0003:046D:C71C.0008: ignoring exceeding usage max [ 139.739071][ T5880] usb 4-1: USB disconnect, device number 4 [ 139.998134][ T6385] tipc: Started in network mode [ 140.003554][ T6385] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 140.016217][ T6385] tipc: Enabled bearer , priority 10 [ 141.037761][ T58] tipc: Node number set to 4269801488 [ 141.369438][ T5137] Bluetooth: hci5: command 0x1003 tx timeout [ 141.376146][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 141.693318][ T6399] cgroup: none used incorrectly [ 142.679451][ T6399] orangefs_mount: mount request failed with -4 [ 143.836593][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 144.021218][ T25] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 144.047561][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.083350][ T25] usb 3-1: config 0 descriptor?? [ 144.386876][ T58] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 144.534191][ T25] hackrf 3-1:0.0: Board ID: 00 [ 144.559566][ T25] hackrf 3-1:0.0: Firmware version: [ 144.600016][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 144.675404][ T25] hackrf 3-1:0.0: Registered as swradio24 [ 144.711216][ T58] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 144.750509][ T25] videodev: could not get a free minor [ 144.810997][ T25] hackrf 3-1:0.0: Failed to register as video device (-23) [ 144.828504][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.417078][ T58] usb 4-1: config 0 descriptor?? [ 145.437346][ T25] hackrf 3-1:0.0: probe with driver hackrf failed with error -23 [ 145.500115][ T25] usb 3-1: USB disconnect, device number 6 [ 145.898732][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 145.923414][ T5834] Bluetooth: hci4: unexpected event 0x03 length: 17 > 11 [ 146.027903][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 146.057072][ T58] usb 4-1: string descriptor 0 read error: -71 [ 146.077688][ T58] uclogic 0003:5543:004D.0009: failed retrieving string descriptor #200: -71 [ 146.123333][ T58] uclogic 0003:5543:004D.0009: failed retrieving pen parameters: -71 [ 146.147041][ T58] uclogic 0003:5543:004D.0009: failed probing pen v2 parameters: -71 [ 146.155516][ T58] uclogic 0003:5543:004D.0009: failed probing parameters: -71 [ 146.165387][ T58] uclogic 0003:5543:004D.0009: probe with driver uclogic failed with error -71 [ 146.185320][ T58] usb 4-1: USB disconnect, device number 5 [ 146.283134][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 146.300698][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 146.320986][ T25] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 146.343933][ T25] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 146.352799][ T25] usb 5-1: Product: syz [ 146.363340][ T25] usb 5-1: Manufacturer: syz [ 146.369032][ T25] usb 5-1: SerialNumber: syz [ 146.486806][ T5879] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 146.632879][ T25] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 146.664411][ T25] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 146.666706][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 146.678177][ T25] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 146.700837][ T25] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 146.715329][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.738368][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.752429][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 146.776064][ T5879] usb 3-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 146.785441][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.818535][ T5879] usb 3-1: config 0 descriptor?? [ 146.831362][ T25] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 146.933441][ T25] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 146.970166][ T25] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 147.078278][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.163407][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.230463][ T25] usb 5-1: USB disconnect, device number 5 [ 147.359980][ T25] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 147.464031][ T25] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 147.531330][ T25] visor 5-1:1.0: device disconnected [ 147.627033][ T5834] Bluetooth: hci0: command tx timeout [ 147.729307][ T5879] hid-generic 0003:045E:9994.000A: unknown main item tag 0x0 [ 147.768358][ T5879] hid-generic 0003:045E:9994.000A: unknown main item tag 0x0 [ 147.776011][ T5879] hid-generic 0003:045E:9994.000A: unknown main item tag 0x0 [ 147.834419][ T5879] hid-generic 0003:045E:9994.000A: unknown main item tag 0x0 [ 147.905302][ T5879] hid-generic 0003:045E:9994.000A: unknown main item tag 0x0 [ 147.927471][ T5834] Bluetooth: hci4: command tx timeout [ 147.976773][ T5879] hid-generic 0003:045E:9994.000A: unknown main item tag 0x0 [ 148.004702][ T5879] hid-generic 0003:045E:9994.000A: unknown main item tag 0x0 [ 148.027289][ T5879] hid-generic 0003:045E:9994.000A: unknown main item tag 0x0 [ 148.046734][ T5879] hid-generic 0003:045E:9994.000A: unbalanced collection at end of report description [ 148.062476][ T5879] hid-generic 0003:045E:9994.000A: probe with driver hid-generic failed with error -22 [ 148.081678][ T5879] usb 3-1: USB disconnect, device number 7 [ 148.622268][ T6394] syz.1.151 (6394): drop_caches: 1 [ 148.722588][ T6472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.928577][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 150.024818][ T5834] Bluetooth: hci4: command tx timeout [ 150.230764][ T6475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.183'. [ 150.285043][ T6475] gretap0: entered promiscuous mode [ 150.349129][ T6479] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.359361][ T6475] gretap0: left promiscuous mode [ 150.713130][ T8] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 150.731767][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.759203][ T8] usb 5-1: config 0 descriptor?? [ 150.798384][ T6485] netlink: 92 bytes leftover after parsing attributes in process `syz.3.187'. [ 150.802533][ T8] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 150.967367][ T6488] Cannot find add_set index 0 as target [ 151.056686][ T8] usb 5-1: USB disconnect, device number 6 [ 151.072055][ T29] audit: type=1400 audit(1737766620.002:5): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6467 comm="syz.4.181" saddr=172.30.0.5 daddr=172.20.20.170 netif=wpan0 [ 153.108919][ T6509] cgroup: none used incorrectly [ 154.172405][ T6509] orangefs_mount: mount request failed with -4 [ 154.874247][ T6517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.203925][ T6522] netlink: 56 bytes leftover after parsing attributes in process `syz.3.200'. [ 156.234188][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 156.784160][ T975] iguanair 1-1:0.0: failed to get version [ 156.798760][ T975] iguanair 1-1:0.0: probe with driver iguanair failed with error -110 [ 156.818206][ T975] usb 1-1: USB disconnect, device number 4 [ 156.856649][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 156.858072][ T6534] netlink: 40 bytes leftover after parsing attributes in process `syz.2.207'. [ 156.877058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.092380][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.124072][ T25] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 157.139167][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.167281][ T25] usb 4-1: config 0 descriptor?? [ 157.216701][ T975] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 157.396691][ T975] usb 1-1: Using ep0 maxpacket: 16 [ 157.409629][ T975] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.435805][ T975] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 157.474671][ T975] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 157.516253][ T975] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.532903][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.543216][ T975] usb 1-1: Product: syz [ 157.561750][ T975] usb 1-1: Manufacturer: syz [ 157.574978][ T975] usb 1-1: SerialNumber: syz [ 157.692961][ T25] kye 0003:0458:0138.000B: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.3-1/input0 [ 157.845027][ T5904] usb 4-1: USB disconnect, device number 6 [ 158.296672][ T58] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 158.501126][ T58] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 158.531621][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.540255][ T5904] usb 1-1: USB disconnect, device number 5 [ 158.564782][ T58] usb 2-1: config 0 descriptor?? [ 158.586726][ T58] gspca_main: spca508-2.14.0 probing 8086:0110 [ 158.613312][ T6570] netlink: 36 bytes leftover after parsing attributes in process `syz.3.222'. [ 158.793159][ T58] gspca_spca508: reg_read err -32 [ 158.807586][ T58] gspca_spca508: reg_read err -32 [ 159.019637][ T58] gspca_spca508: reg_read err -71 [ 159.057619][ T58] gspca_spca508: reg_read err -71 [ 159.095495][ T58] gspca_spca508: reg write: error -71 [ 159.180265][ T58] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 159.241810][ T58] usb 2-1: USB disconnect, device number 5 [ 160.403174][ T6600] rtc_cmos 00:00: Alarms can be up to one day in the future [ 160.403934][ T6597] kernel profiling enabled (shift: 63) [ 160.429694][ T6594] rtc_cmos 00:00: Alarms can be up to one day in the future [ 160.453522][ T6597] profiling shift: 63 too large [ 160.867577][ T6614] syz.1.239 (6614) used greatest stack depth: 18904 bytes left [ 160.997643][ T5904] rtc_cmos 00:00: Alarms can be up to one day in the future [ 161.006926][ T5904] rtc_cmos 00:00: Alarms can be up to one day in the future [ 161.014805][ T5904] rtc_cmos 00:00: Alarms can be up to one day in the future [ 161.046435][ T5904] rtc_cmos 00:00: Alarms can be up to one day in the future [ 161.056194][ T5904] rtc rtc0: __rtc_set_alarm: err=-22 [ 161.525248][ T6624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.893996][ T6627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.242'. [ 163.167184][ T58] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 163.494683][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 163.508010][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.490400][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.501186][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 164.514936][ T58] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 164.527337][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.548601][ T58] usb 5-1: config 0 descriptor?? [ 166.104395][ T58] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 166.206042][ T58] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000C/input/input11 [ 166.240653][ T58] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 166.494185][ T58] usb 5-1: USB disconnect, device number 7 [ 169.473731][ T6688] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 169.504354][ T6688] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 169.544667][ T6688] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 169.588562][ T6688] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 169.626421][ T6688] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 169.697202][ T6714] TCP: TCP_TX_DELAY enabled [ 169.707606][ T6688] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 169.750634][ T6688] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 169.764305][ T6688] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 169.789073][ T6688] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 169.806222][ T6688] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 169.814656][ T6688] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 169.837812][ T6688] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 169.962066][ T6688] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 169.981595][ T6688] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 170.059704][ T6688] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 170.131663][ T6688] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 170.812937][ T6722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.820723][ T6722] IPv6: NLM_F_CREATE should be set when creating new route [ 170.828170][ T6722] IPv6: NLM_F_CREATE should be set when creating new route [ 170.835433][ T6722] IPv6: NLM_F_CREATE should be set when creating new route [ 170.951112][ T5834] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 171.516615][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 171.597122][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.651020][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 172.657212][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 172.664095][ T5137] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.006107][ T6748] netlink: 'syz.3.281': attribute type 10 has an invalid length. [ 173.083566][ T6748] netlink: 152 bytes leftover after parsing attributes in process `syz.3.281'. [ 173.441393][ T6757] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.510335][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.517558][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.596945][ T5137] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.677548][ T5137] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.213636][ T6769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.290'. [ 174.270607][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 174.365845][ T29] audit: type=1326 audit(1737766643.312:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6774 comm="syz.1.292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cbd38cd29 code=0x0 [ 174.499107][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 174.511141][ T5137] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 174.716967][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.716978][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 174.717105][ T5137] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.676713][ T5137] Bluetooth: hci0: command 0x0c1a tx timeout [ 175.756892][ T5137] Bluetooth: hci1: command 0x0c1a tx timeout [ 176.687888][ T5137] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 176.881527][ T5137] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.888405][ T5137] Bluetooth: hci4: command 0x0c1a tx timeout [ 176.897224][ T5137] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.555987][ T5834] Bluetooth: hci0: connection err: -111 [ 177.953437][ T6837] ALSA: mixer_oss: invalid OSS volume 'ß' [ 178.959511][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 178.980615][ T6861] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 179.125773][ T6861] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.136390][ T6861] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.757293][ T58] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 180.827524][ T5904] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 180.946634][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 180.953843][ T58] usb 2-1: config 0 has an invalid interface number: 245 but max is 0 [ 180.964260][ T58] usb 2-1: config 0 has no interface number 0 [ 180.988675][ T58] usb 2-1: New USB device found, idVendor=07ab, idProduct=fccd, bcdDevice=1b.d7 [ 181.000602][ T5904] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 181.022590][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.036609][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.060076][ T58] usb 2-1: Product: syz [ 181.064922][ T58] usb 2-1: Manufacturer: syz [ 181.071394][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.088285][ T58] usb 2-1: SerialNumber: syz [ 181.104392][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 181.119616][ T58] usb 2-1: config 0 descriptor?? [ 181.137367][ T5904] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 181.158074][ T58] usb-storage 2-1:0.245: USB Mass Storage device detected [ 181.166919][ T5904] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 181.212300][ T5904] usb 4-1: Manufacturer: syz [ 181.233867][ T58] usb-storage 2-1:0.245: Quirks match for vid 07ab pid fccd: 10 [ 181.251206][ T5904] usb 4-1: config 0 descriptor?? [ 181.358091][ T58] usb 2-1: USB disconnect, device number 6 [ 181.738493][ T5904] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 181.747618][ T5904] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 181.771123][ T5904] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 182.096548][ T8] usb 4-1: USB disconnect, device number 7 [ 182.473337][ T6939] syz.2.352 uses obsolete (PF_INET,SOCK_PACKET) [ 182.513111][ T6939] syzkaller1: entered promiscuous mode [ 182.540538][ T6939] syzkaller1: entered allmulticast mode [ 183.082893][ T6952] input: syz0 as /devices/virtual/input/input12 [ 183.849668][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'. [ 183.936775][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 184.101921][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 184.123137][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.154685][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.186273][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 184.206730][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 184.229373][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.262857][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 184.287874][ T8] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 184.310440][ T8] usb 4-1: Manufacturer: syz [ 184.333940][ T8] usb 4-1: config 0 descriptor?? [ 184.670017][ T8] rc_core: IR keymap rc-hauppauge not found [ 184.676008][ T8] Registered IR keymap rc-empty [ 184.718780][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.758583][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.788260][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 184.807800][ T5880] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 184.828863][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 184.878675][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.901586][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.936820][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.967082][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.995684][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 185.007717][ T5880] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 185.017700][ T5880] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 185.028676][ T5880] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 185.038062][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 185.045479][ T5880] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 185.057185][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 185.064614][ T5880] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 185.077483][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 185.086997][ T5880] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 185.097300][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 185.105471][ T5880] usb 1-1: Product: syz [ 185.109887][ T5880] usb 1-1: Manufacturer: syz [ 185.124066][ T5880] cdc_wdm 1-1:1.0: skipping garbage [ 185.129582][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 185.146558][ T5880] cdc_wdm 1-1:1.0: skipping garbage [ 185.156885][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 185.179521][ T5880] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 185.185511][ T5880] cdc_wdm 1-1:1.0: Unknown control protocol [ 185.193488][ T8] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 185.211471][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 185.221060][ T8] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 185.247868][ T8] usb 4-1: USB disconnect, device number 8 [ 185.513711][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.383'. [ 187.540189][ T8] usb 1-1: USB disconnect, device number 6 [ 187.809649][ T7069] tipc: Started in network mode [ 187.841200][ T7069] tipc: Node identity 7, cluster identity 7 [ 187.905508][ T7069] tipc: Node number set to 7 [ 187.963954][ T7069] tipc: Cannot configure node identity twice [ 189.961151][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 189.985169][ T7114] loop2: detected capacity change from 0 to 7 [ 190.023999][ T7114] Dev loop2: unable to read RDB block 7 [ 190.054171][ T7114] loop2: AHDI p2 p3 [ 190.067416][ T7114] loop2: partition table partially beyond EOD, truncated [ 190.129596][ T7114] loop2: p2 start 131072 is beyond EOD, truncated [ 190.142431][ T8] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 190.186628][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.214461][ T8] usb 5-1: Product: syz [ 190.254967][ T8] usb 5-1: Manufacturer: syz [ 190.267077][ T8] usb 5-1: SerialNumber: syz [ 190.284552][ T8] usb 5-1: config 0 descriptor?? [ 190.309657][ T8] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 008 [ 190.487279][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 190.659419][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 190.681478][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 190.693400][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 190.722309][ T8] (null): failure reading functionality [ 190.745391][ T8] i2c i2c-1: failure reading functionality [ 190.752151][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.774404][ T8] i2c i2c-1: connected i2c-tiny-usb device [ 190.802420][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.825861][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.835017][ T8] usb 5-1: USB disconnect, device number 8 [ 190.850587][ T25] usb 2-1: config 0 descriptor?? [ 190.859947][ T7119] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 191.117554][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 191.319710][ T25] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 191.340408][ T25] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 191.516721][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 191.587437][ T25] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 191.638401][ T25] usb 2-1: USB disconnect, device number 7 [ 191.716632][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.733602][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.767378][ T8] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 191.792567][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.818066][ T8] usb 1-1: config 0 descriptor?? [ 192.193262][ T5911] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 192.388879][ T5911] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 192.407281][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.429479][ T5911] usb 3-1: config 0 descriptor?? [ 192.435151][ T8] usb 1-1: language id specifier not provided by device, defaulting to English [ 192.449118][ T5911] cp210x 3-1:0.0: cp210x converter detected [ 192.640200][ T8] letsketch 0003:6161:4D15.000F: Device info: ã°Š [ 192.885986][ T8] usb 1-1: Max retries (5) exceeded reading string descriptor 201 [ 192.916223][ T8] letsketch 0003:6161:4D15.000F: probe with driver letsketch failed with error -71 [ 192.925901][ T5911] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 192.964663][ T8] usb 1-1: USB disconnect, device number 7 [ 193.161991][ T5911] usb 3-1: cp210x converter now attached to ttyUSB0 [ 193.360694][ T5904] usb 3-1: USB disconnect, device number 8 [ 193.383471][ T5904] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 193.414421][ T5904] cp210x 3-1:0.0: device disconnected [ 194.125266][ T5137] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 194.387627][ T7198] netlink: 'syz.4.445': attribute type 10 has an invalid length. [ 194.423091][ T7198] syz_tun: entered promiscuous mode [ 194.478665][ T7198] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 194.639374][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.646333][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.916669][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 195.098960][ T8] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 195.118565][ T8] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 0 [ 195.136116][ T8] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.150438][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 195.237415][ T5904] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 195.287324][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 195.298185][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.306240][ T8] usb 4-1: Product: syz [ 195.311248][ T8] usb 4-1: Manufacturer: syz [ 195.316040][ T8] usb 4-1: SerialNumber: syz [ 195.407054][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 195.425975][ T5904] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 195.436222][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.491646][ T5904] usb 5-1: Product: syz [ 195.537310][ T5904] usb 5-1: Manufacturer: syz [ 195.571124][ T5904] usb 5-1: SerialNumber: syz [ 195.723767][ T7226] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÅ‚Ümý¼§6°'ßtÿT ð# [ 195.768157][ T5904] r8152-cfgselector 5-1: Unknown version 0x0000 [ 195.807699][ T5904] r8152-cfgselector 5-1: config 0 descriptor?? [ 195.988867][ T8] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 2 proto 1 vid 0x0525 pid 0xA4A8 [ 196.302163][ T5904] usb 4-1: USB disconnect, device number 9 [ 196.331862][ T58] r8152-cfgselector 5-1: USB disconnect, device number 9 [ 196.360597][ T5904] usblp0: removed [ 196.505960][ T7244] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 196.741434][ T7250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.464'. [ 196.824129][ T5137] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 198.801182][ T7271] capability: warning: `syz.2.470' uses 32-bit capabilities (legacy support in use) [ 198.826996][ T29] audit: type=1326 audit(1737766667.762:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.0.469" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9fb98cd29 code=0x0 [ 199.035907][ T7276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'. [ 199.447182][ T5911] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 199.617226][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 199.638539][ T5911] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 199.662352][ T5911] usb 5-1: config 0 has no interface number 0 [ 199.680314][ T5911] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 199.696425][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.732362][ T5911] usb 5-1: Product: syz [ 199.752240][ T5911] usb 5-1: Manufacturer: syz [ 199.787973][ T5911] usb 5-1: SerialNumber: syz [ 199.838245][ T5911] usb 5-1: config 0 descriptor?? [ 199.934081][ T5137] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 200.062299][ T5911] radio-si470x 5-1:0.35: this is not a si470x device. [ 200.264259][ T5911] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 200.287735][ T5911] usb 5-1: USB disconnect, device number 10 [ 201.115445][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.213910][ T7326] bridge_slave_1 (unregistering): left allmulticast mode [ 201.291286][ T7326] bridge_slave_1 (unregistering): left promiscuous mode [ 201.351341][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.962614][ T5879] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 202.000558][ T7345] Bluetooth: MGMT ver 1.23 [ 202.146622][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 202.168503][ T5879] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.196514][ T5879] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.208935][ T5879] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.223905][ T5879] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.256618][ T5879] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 202.272432][ T7351] syzkaller1: entered promiscuous mode [ 202.286340][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.298532][ T7351] syzkaller1: entered allmulticast mode [ 202.538036][ T5879] usb 4-1: usb_control_msg returned -32 [ 202.559982][ T5879] usbtmc 4-1:16.0: can't read capabilities [ 202.577139][ T5904] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 202.771488][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.786843][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.797857][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.811071][ T5904] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.820988][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.856161][ T5904] usb 1-1: config 0 descriptor?? [ 202.950527][ T7362] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -32 [ 203.141313][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.508'. [ 203.292486][ T5904] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 203.332767][ T5904] plantronics 0003:047F:FFFF.0010: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 203.489134][ T25] usb 1-1: USB disconnect, device number 8 [ 204.806163][ T58] usb 4-1: USB disconnect, device number 10 [ 205.363380][ T58] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 205.417759][ T7416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.537146][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 205.544811][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.587220][ T58] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 205.596342][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.659599][ T58] usb 4-1: config 0 descriptor?? [ 205.712943][ T7423] team0: Device ipvlan2 failed to register rx_handler [ 205.887428][ T5904] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 206.057240][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 206.064398][ T5904] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 206.074770][ T5904] usb 3-1: config 0 has no interface number 0 [ 206.217965][ T58] apple 0003:05AC:024B.0011: unknown main item tag 0x6 [ 207.087159][ T5904] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 207.098256][ T58] apple 0003:05AC:024B.0011: unknown main item tag 0x1 [ 207.105437][ T58] apple 0003:05AC:024B.0011: unknown main item tag 0xe [ 207.114574][ T5904] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 207.125385][ T58] apple 0003:05AC:024B.0011: bogus close delimiter [ 207.132848][ T5904] usb 3-1: config 0 interface 126 has no altsetting 0 [ 207.140427][ T58] apple 0003:05AC:024B.0011: item 0 0 2 10 parsing failed [ 207.149359][ T58] apple 0003:05AC:024B.0011: parse failed [ 207.155312][ T58] apple 0003:05AC:024B.0011: probe with driver apple failed with error -22 [ 207.168882][ T58] usb 4-1: USB disconnect, device number 11 [ 207.196364][ T5904] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 207.232792][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.253083][ T5904] usb 3-1: Product: syz [ 207.264085][ T5904] usb 3-1: Manufacturer: syz [ 207.269896][ T5904] usb 3-1: SerialNumber: syz [ 207.278497][ T5904] usb 3-1: config 0 descriptor?? [ 207.284528][ T7421] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 207.313632][ T7421] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 207.750706][ T5904] ir_usb 3-1:0.126: IR Dongle converter detected [ 207.973230][ T5904] usb 3-1: IRDA class descriptor not found, device not bound [ 208.094777][ T5137] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 208.238020][ T5879] usb 3-1: USB disconnect, device number 9 [ 208.432144][ T7458] input: syz0 as /devices/virtual/input/input15 [ 208.787457][ T5879] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 208.958693][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 208.977970][ T5879] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.020964][ T5879] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.065261][ T5879] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.085498][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.122516][ T5879] usb 1-1: Product: syz [ 209.136780][ T5879] usb 1-1: Manufacturer: syz [ 209.141468][ T5879] usb 1-1: SerialNumber: syz [ 209.603147][ T5879] usb 1-1: 0:2 : does not exist [ 209.659261][ T5880] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 209.717140][ T7500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.866975][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.893419][ T7504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.901096][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.919455][ T5880] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 209.919974][ T7506] lo speed is unknown, defaulting to 1000 [ 209.946698][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.991331][ T5880] usb 5-1: config 0 descriptor?? [ 210.286213][ T5911] usb 1-1: USB disconnect, device number 9 [ 210.449475][ T5880] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 210.475902][ T5880] cp2112 0003:10C4:EA90.0012: item fetching failed at offset 5/7 [ 210.503115][ T5880] cp2112 0003:10C4:EA90.0012: parse failed [ 210.523463][ T5880] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -22 [ 210.687578][ T7493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.707443][ T7493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.151633][ T7506] IPVS: You probably need to specify IP address on multicast interface. [ 211.167427][ T7506] IPVS: Error connecting to the multicast addr [ 212.086653][ T5880] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 212.159199][ T5137] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 212.168313][ T5137] Bluetooth: hci2: Injecting HCI hardware error event [ 212.179231][ T5834] Bluetooth: hci2: hardware error 0x00 [ 212.278809][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.290779][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.303688][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.317502][ T5880] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.327085][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.347400][ T5880] usb 4-1: config 0 descriptor?? [ 212.477958][ T5879] usb 5-1: USB disconnect, device number 11 [ 212.563728][ T29] audit: type=1326 audit(1737766681.492:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7557 comm="syz.0.580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9fb98cd29 code=0x0 [ 212.769989][ T5880] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 213.465850][ T5880] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 213.526896][ T5879] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 213.988787][ T5880] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 214.077047][ T5911] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 214.157980][ T5879] usb 5-1: config 0 has no interfaces? [ 214.172746][ T5879] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 214.191866][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.197693][ T5879] usb 5-1: config 0 descriptor?? [ 214.247901][ T5834] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 214.263163][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 214.263206][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 214.263236][ T5911] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.263277][ T5911] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.263302][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.265443][ T5911] usb 1-1: config 0 descriptor?? [ 214.266075][ T7577] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 214.418713][ T7567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.420970][ T7567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.423002][ T7567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.423283][ T7567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.425902][ T5879] usb 5-1: USB disconnect, device number 12 [ 214.701517][ T5911] plantronics 0003:047F:FFFF.0014: unknown main item tag 0xd [ 214.703050][ T5911] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 214.724122][ T5911] plantronics 0003:047F:FFFF.0014: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 214.876754][ T5879] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 214.955020][ T5904] usb 4-1: USB disconnect, device number 12 [ 214.979956][ T975] usb 1-1: USB disconnect, device number 10 [ 215.038485][ T5879] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.038520][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.040417][ T5879] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 215.040450][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.040474][ T5879] usb 5-1: Product: syz [ 215.040492][ T5879] usb 5-1: Manufacturer: syz [ 215.040509][ T5879] usb 5-1: SerialNumber: syz [ 215.132019][ T7594] smb3: Unknown parameter 'rdma ' [ 215.315671][ T5879] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 215.320223][ T5879] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 215.357378][ T5879] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 215.396599][ T5879] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 215.406927][ T5879] usb 5-1: USB disconnect, device number 13 [ 215.611977][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.849327][ T7619] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.201636][ T7631] kernel read not supported for file /rmdF¼ì (pid: 7631 comm: syz.2.602) [ 217.239668][ T29] audit: type=1800 audit(1737766686.192:9): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.602" name=726D64461716BCEC dev="mqueue" ino=15134 res=0 errno=0 [ 217.876682][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 218.056853][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 218.067940][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.085722][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 218.093882][ T8] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 218.108323][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.122023][ T8] usb 4-1: config 0 descriptor?? [ 218.616698][ T8] hid (null): report_id 3328464267 is invalid [ 218.624272][ T8] hid (null): unknown global tag 0x1c [ 218.635194][ T8] hid (null): unknown global tag 0xe [ 218.654199][ T8] hid (null): global environment stack underflow [ 218.662066][ T8] hid (null): unknown global tag 0xe [ 218.670054][ T8] hid (null): unknown global tag 0xe [ 218.681608][ T8] hid (null): unknown global tag 0xe [ 218.687779][ T8] hid (null): invalid report_count 1640429044 [ 218.698331][ T8] hid (null): report_id 2384115945 is invalid [ 218.716924][ T8] hid (null): unknown global tag 0xd [ 218.729308][ T8] cougar 0003:060B:500A.0015: unknown main item tag 0x6 [ 218.736795][ T8] cougar 0003:060B:500A.0015: report_id 3328464267 is invalid [ 218.744536][ T8] cougar 0003:060B:500A.0015: item 0 4 1 8 parsing failed [ 218.752832][ T8] cougar 0003:060B:500A.0015: parse failed [ 218.759273][ T8] cougar 0003:060B:500A.0015: probe with driver cougar failed with error -22 [ 219.005862][ T975] usb 4-1: USB disconnect, device number 13 [ 221.053196][ T7680] syz.4.621: attempt to access beyond end of device [ 221.053196][ T7680] loop4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 221.196858][ T58] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 221.397441][ T58] usb 3-1: Using ep0 maxpacket: 16 [ 221.405330][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.420862][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.444516][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 221.463236][ T58] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 221.473180][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.484386][ T58] usb 3-1: config 0 descriptor?? [ 222.654119][ T58] usbhid 3-1:0.0: can't add hid device: -71 [ 222.661073][ T58] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 222.671106][ T58] usb 3-1: USB disconnect, device number 10 [ 227.948780][ T7775] netlink: 'syz.2.652': attribute type 2 has an invalid length. [ 227.968550][ T7775] netlink: 'syz.2.652': attribute type 2 has an invalid length. [ 227.997807][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 229.567181][ T5911] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 230.290170][ T7796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.684308][ T5911] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 230.757154][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 230.805016][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 230.844728][ T5911] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 230.887271][ T5911] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.912697][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.943368][ T5911] usb 1-1: config 0 descriptor?? [ 230.958757][ T7785] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 231.077430][ T7809] process 'syz.1.666' launched './file0' with NULL argv: empty string added [ 231.397234][ T7823] loop6: detected capacity change from 0 to 16384 [ 231.407646][ T5911] plantronics 0003:047F:FFFF.0016: unknown main item tag 0xd [ 231.463268][ T5911] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 231.482720][ T44] I/O error, dev loop6, sector 8 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 231.495222][ T5911] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 231.707800][ T5879] usb 1-1: USB disconnect, device number 11 [ 232.106613][ T975] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 232.140873][ T7845] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 232.282946][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.322953][ T975] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 232.372889][ T5834] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 232.384798][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.431127][ T975] usb 5-1: config 0 descriptor?? [ 232.857711][ T975] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 232.875463][ T975] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0017/input/input18 [ 233.247133][ T975] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 233.247323][ T7869] binder: 7868:7869 unknown command 0 [ 233.265539][ T7869] binder: 7868:7869 ioctl c0306201 20000080 returned -22 [ 233.409786][ T975] usb 5-1: USB disconnect, device number 14 [ 234.139272][ T7902] KVM: debugfs: duplicate directory 7902-4 [ 235.124076][ T7926] vivid-000: disconnect [ 235.149415][ T7926] vivid-000: reconnect [ 235.426693][ T975] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 235.580385][ T58] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 235.627068][ T975] usb 5-1: Using ep0 maxpacket: 8 [ 235.687286][ T5834] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 235.753651][ T975] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 236.079725][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.897305][ T58] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 236.911835][ T975] usb 5-1: Product: syz [ 236.919898][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.926271][ T975] usb 5-1: Manufacturer: syz [ 236.960732][ T58] usb 3-1: Product: syz [ 236.964966][ T58] usb 3-1: Manufacturer: syz [ 237.022573][ T58] usb 3-1: SerialNumber: syz [ 237.030422][ T58] usb 3-1: config 0 descriptor?? [ 237.287306][ T975] usb 5-1: SerialNumber: syz [ 237.295295][ T975] usb 5-1: config 0 descriptor?? [ 237.319053][ T5833] usb 3-1: USB disconnect, device number 11 [ 237.588994][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.734781][ T975] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 238.618714][ T975] gspca_sunplus: reg_w_riv err -71 [ 238.624095][ T975] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 238.712369][ T975] usb 5-1: USB disconnect, device number 15 [ 239.419783][ T5834] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 240.562745][ T8020] input: syz0 as /devices/virtual/input/input19 [ 241.686758][ T58] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 241.879675][ T58] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 122, changing to 7 [ 241.942079][ T58] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17352, setting to 1024 [ 241.980570][ T58] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.993978][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.005755][ T58] usb 3-1: Product: syz [ 242.095263][ T58] usb 3-1: Manufacturer: syz [ 242.109144][ T58] usb 3-1: SerialNumber: syz [ 242.586708][ T975] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 242.756651][ T975] usb 1-1: Using ep0 maxpacket: 8 [ 242.770554][ T975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.806556][ T975] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 242.815687][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.846093][ T975] usb 1-1: config 0 descriptor?? [ 242.869035][ T975] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 243.142244][ T58] cdc_ncm 3-1:1.0: bind() failure [ 243.171769][ T58] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 243.194313][ T58] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 243.207602][ T58] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 243.221005][ T58] usb 3-1: USB disconnect, device number 12 [ 243.684898][ T975] gspca_vc032x: reg_w err -71 [ 243.692892][ T975] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 243.732921][ T975] usb 1-1: USB disconnect, device number 12 [ 247.161285][ T5834] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 247.268398][ T8162] vlan2: entered promiscuous mode [ 247.279634][ T8162] team0: entered promiscuous mode [ 247.284860][ T8162] team_slave_0: entered promiscuous mode [ 247.295638][ T8162] team_slave_1: entered promiscuous mode [ 247.305053][ T8162] vlan2: entered allmulticast mode [ 247.332501][ T8162] team0: entered allmulticast mode [ 247.339594][ T8162] team_slave_0: entered allmulticast mode [ 247.345571][ T8162] team_slave_1: entered allmulticast mode [ 247.381466][ T8162] team0: left allmulticast mode [ 247.401998][ T8162] team_slave_0: left allmulticast mode [ 247.425675][ T8162] team_slave_1: left allmulticast mode [ 247.439746][ T8162] team0: left promiscuous mode [ 247.447493][ T8162] team_slave_0: left promiscuous mode [ 247.455806][ T8162] team_slave_1: left promiscuous mode [ 250.698798][ T8237] netlink: 'syz.4.803': attribute type 1 has an invalid length. [ 250.771968][ T8237] bond1: (slave gretap1): making interface the new active one [ 250.784819][ T8237] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 251.884818][ T8263] netlink: 256 bytes leftover after parsing attributes in process `syz.4.809'. [ 251.902781][ T8263] netlink: 24 bytes leftover after parsing attributes in process `syz.4.809'. [ 252.954550][ T8283] input: syz0 as /devices/virtual/input/input20 [ 253.639498][ T8298] geneve0: entered allmulticast mode [ 254.228939][ T8304] netlink: 'syz.3.824': attribute type 10 has an invalid length. [ 254.281313][ T8304] syz_tun: entered promiscuous mode [ 254.321476][ T8304] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 255.692292][ T8339] vxcan0: entered promiscuous mode [ 255.717380][ T8339] vlan2: entered promiscuous mode [ 255.722773][ T8339] vlan2: entered allmulticast mode [ 255.734188][ T8339] vxcan0: entered allmulticast mode [ 255.741951][ T8339] vxcan0: left allmulticast mode [ 255.773070][ T8339] vxcan0: left promiscuous mode [ 256.087128][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.093684][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.584849][ T8394] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.892287][ T8394] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.100446][ T8394] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.116079][ T29] audit: type=1326 audit(1737766728.062:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.2.847" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe04698cd29 code=0x0 [ 259.653323][ T8394] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.403547][ T8422] team0: Device ipvlan2 failed to register rx_handler [ 260.734928][ T8394] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.867832][ T8394] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.268903][ T8394] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.530722][ T8394] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.541227][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'. [ 262.444875][ T5137] Bluetooth: hci5: sending frame failed (-49) [ 262.453164][ T5834] Bluetooth: hci5: Entering manufacturer mode failed (-49) [ 263.196663][ T5879] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 263.523967][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 263.627185][ T5879] usb 5-1: unable to get BOS descriptor or descriptor too short [ 263.661109][ T5879] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 263.682520][ T5879] usb 5-1: can't read configurations, error -71 [ 263.786603][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 263.929484][ T8492] netlink: 'syz.0.884': attribute type 4 has an invalid length. [ 263.947917][ T8492] netlink: 'syz.0.884': attribute type 4 has an invalid length. [ 263.982351][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.007118][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.031956][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.048228][ T8] usb 3-1: Product: syz [ 264.052639][ T8] usb 3-1: Manufacturer: syz [ 264.057441][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 264.066142][ T8] usb 3-1: SerialNumber: syz [ 264.276211][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 264.305517][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 264.320891][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 264.339405][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.355517][ T8489] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 264.368077][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 264.675795][ T5904] usb 4-1: USB disconnect, device number 14 [ 265.317601][ T8] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 265.338532][ T8] cdc_ncm 3-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 265.345977][ T8] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 265.506789][ T5879] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 265.525651][ T8] cdc_ncm 3-1:1.0: setting tx_max = 16384 [ 265.567593][ T5911] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 265.594054][ T8] cdc_ncm 3-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 265.627333][ T8] usb 3-1: USB disconnect, device number 13 [ 265.787117][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 265.799123][ T5879] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 265.804147][ T5911] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 265.823031][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.840889][ T5911] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 265.858027][ T8] cdc_ncm 3-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 265.863505][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.884180][ T5911] usb 4-1: Product: syz [ 265.891902][ T5911] usb 4-1: Manufacturer: syz [ 265.904644][ T5911] usb 4-1: SerialNumber: syz [ 265.917602][ T5879] usb 1-1: config 0 descriptor?? [ 265.941555][ T5911] usb 4-1: config 0 descriptor?? [ 265.960845][ T5911] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 265.978027][ T5911] usb 4-1: Detected FT232R [ 266.187488][ T5911] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 266.212087][ T5879] usbhid 1-1:0.0: can't add hid device: -71 [ 266.241402][ T5879] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 266.268178][ T5879] usb 1-1: USB disconnect, device number 13 [ 266.592429][ T5911] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 266.687906][ T25] usb 4-1: USB disconnect, device number 15 [ 266.735114][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 266.776052][ T25] ftdi_sio 4-1:0.0: device disconnected [ 266.788253][ T8538] input: syz0 as /devices/virtual/input/input21 [ 268.987443][ T8588] netlink: 32 bytes leftover after parsing attributes in process `syz.1.910'. [ 269.549800][ T8605] input: syz0 as /devices/virtual/input/input22 [ 270.802217][ T8638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.151791][ T5834] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 271.736112][ T8662] input: syz0 as /devices/virtual/input/input23 [ 272.057393][ T5911] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 272.268138][ T5911] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 272.288210][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.323480][ T5911] usb 5-1: config 0 descriptor?? [ 272.620666][ T5911] usbhid 5-1:0.0: can't add hid device: -71 [ 272.620770][ T5911] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 272.649652][ T5911] usb 5-1: USB disconnect, device number 18 [ 275.198898][ T5834] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 275.201947][ T5834] Bluetooth: hci4: Injecting HCI hardware error event [ 275.228764][ T5137] Bluetooth: hci4: hardware error 0x00 [ 276.437330][ T8725] nbd2: detected capacity change from 0 to 12 [ 276.607777][ T5833] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 276.655707][ T5826] block nbd2: Send control failed (result -89) [ 276.674585][ T5826] block nbd2: Request send failed, requeueing [ 276.698151][ T5834] block nbd2: Receive control failed (result -32) [ 276.735378][ T59] block nbd2: Dead connection, failed to find a fallback [ 276.743760][ T59] block nbd2: shutting down sockets [ 276.750695][ T59] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.762855][ T59] Buffer I/O error on dev nbd2, logical block 0, async page read [ 276.778049][ T5826] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.808996][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.827392][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.845248][ T5826] Buffer I/O error on dev nbd2, logical block 0, async page read [ 276.850159][ T5833] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 276.868379][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.879313][ T5833] usb 4-1: config 0 descriptor?? [ 276.910602][ T5826] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.950708][ T5826] Buffer I/O error on dev nbd2, logical block 0, async page read [ 276.977115][ T5826] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.995121][ T5826] Buffer I/O error on dev nbd2, logical block 0, async page read [ 277.020161][ T5826] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.029997][ T5826] Buffer I/O error on dev nbd2, logical block 0, async page read [ 277.044150][ T5826] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.054270][ T5826] Buffer I/O error on dev nbd2, logical block 0, async page read [ 277.063942][ T5826] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.074747][ T5826] Buffer I/O error on dev nbd2, logical block 0, async page read [ 277.086783][ T5826] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.097552][ T5826] Buffer I/O error on dev nbd2, logical block 0, async page read [ 277.105460][ T5826] ldm_validate_partition_table(): Disk read failed. [ 277.118087][ T5826] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.130857][ T5826] Buffer I/O error on dev nbd2, logical block 0, async page read [ 277.156763][ T5826] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.171654][ T5826] Buffer I/O error on dev nbd2, logical block 0, async page read [ 277.181527][ T5826] Dev nbd2: unable to read RDB block 0 [ 277.188161][ T5826] nbd2: unable to read partition table [ 277.194138][ T5826] nbd2: partition table beyond EOD, truncated [ 277.244543][ T5826] ldm_validate_partition_table(): Disk read failed. [ 277.277866][ T5137] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 277.278032][ T5826] Dev nbd2: unable to read RDB block 0 [ 277.338448][ T5833] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 277.345904][ T5833] cp2112 0003:10C4:EA90.0018: item fetching failed at offset 5/7 [ 277.362392][ T5833] cp2112 0003:10C4:EA90.0018: parse failed [ 277.370469][ T5833] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -22 [ 277.424324][ T5826] nbd2: unable to read partition table [ 277.461432][ T5826] nbd2: partition table beyond EOD, truncated [ 277.589497][ T8730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.646968][ T8730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.907877][ T5833] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 277.919897][ T8762] syz.2.963: attempt to access beyond end of device [ 277.919897][ T8762] loop2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 278.069175][ T5833] usb 1-1: config 0 has no interfaces? [ 278.079859][ T5833] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 278.100735][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.149960][ T5833] usb 1-1: config 0 descriptor?? [ 278.498634][ T8756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.519183][ T8756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.578712][ T8756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.608668][ T8756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.632659][ T5879] usb 1-1: USB disconnect, device number 14 [ 279.250742][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 279.518147][ T5879] usb 4-1: USB disconnect, device number 16 [ 279.665627][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.109018][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 280.185495][ T8] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 280.202785][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.225936][ T8] usb 1-1: Product: syz [ 280.230531][ T8800] nbd3: detected capacity change from 0 to 12 [ 280.252828][ T8] usb 1-1: Manufacturer: syz [ 280.267282][ T8] usb 1-1: SerialNumber: syz [ 280.319017][ T5826] block nbd3: Send control failed (result -89) [ 280.346169][ T5826] block nbd3: Request send failed, requeueing [ 280.369846][ T5137] block nbd3: Receive control failed (result -32) [ 280.369999][ T44] block nbd3: Dead connection, failed to find a fallback [ 280.386918][ T44] block nbd3: shutting down sockets [ 280.412422][ T5826] ldm_validate_partition_table(): Disk read failed. [ 280.440347][ T5826] Dev nbd3: unable to read RDB block 0 [ 280.446392][ T5826] nbd3: unable to read partition table [ 280.456182][ T5826] nbd3: partition table beyond EOD, truncated [ 280.460548][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.974'. [ 280.474443][ T5826] ldm_validate_partition_table(): Disk read failed. [ 280.487577][ T5826] Dev nbd3: unable to read RDB block 0 [ 280.493575][ T5826] nbd3: unable to read partition table [ 280.544729][ T5826] nbd3: partition table beyond EOD, truncated [ 280.567250][ T8] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 280.618781][ T8] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 280.704672][ T8] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 280.752583][ T8] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 280.769941][ T8] usb 1-1: USB disconnect, device number 15 [ 280.780820][ T5137] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 280.798383][ T8818] syz.3.976: attempt to access beyond end of device [ 280.798383][ T8818] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 281.066857][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 281.076596][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.287651][ T5911] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 282.450159][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.493689][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.514517][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.547968][ T5911] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.563424][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.585233][ T5911] usb 5-1: config 0 descriptor?? [ 283.006364][ T5911] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 283.019424][ T5911] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 283.279454][ T5911] usb 5-1: USB disconnect, device number 19 [ 283.621041][ T5833] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 283.637330][ T25] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 283.780517][ T5833] usb 1-1: Using ep0 maxpacket: 16 [ 283.789472][ T25] usb 4-1: config 0 has no interfaces? [ 283.795081][ T25] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 283.804980][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.817155][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.826184][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.838986][ T25] usb 4-1: config 0 descriptor?? [ 283.844164][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 283.858350][ T5833] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 283.871355][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.914521][ T5833] usb 1-1: config 0 descriptor?? [ 284.101470][ T8880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.112986][ T8880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.133022][ T8880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.145811][ T8880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.162904][ T5911] usb 4-1: USB disconnect, device number 17 [ 284.178605][ T5834] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 284.348753][ T5833] HID 045e:07da: Invalid code 65791 type 1 [ 284.360198][ T5833] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001A/input/input24 [ 284.380740][ T5833] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 284.568168][ T5833] usb 1-1: USB disconnect, device number 16 [ 284.619213][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 284.717271][ T5137] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 284.789671][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.800136][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.812221][ T9] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 284.822126][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.831912][ T9] usb 4-1: Product: syz [ 284.836215][ T9] usb 4-1: Manufacturer: syz [ 284.841079][ T9] usb 4-1: SerialNumber: syz [ 285.078602][ T9] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 285.141510][ T9] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 285.171663][ T9] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 285.183870][ T9] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 285.200637][ T9] usb 4-1: USB disconnect, device number 18 [ 285.413162][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.369604][ T8954] vlan2: entered promiscuous mode [ 288.388381][ T8954] team0: entered promiscuous mode [ 288.411952][ T8954] team_slave_0: entered promiscuous mode [ 288.432631][ T8954] team_slave_1: entered promiscuous mode [ 288.460281][ T8954] vlan2: entered allmulticast mode [ 288.510854][ T8954] team0: entered allmulticast mode [ 288.605377][ T8954] team_slave_0: entered allmulticast mode [ 288.637562][ T8954] team_slave_1: entered allmulticast mode [ 289.267685][ T29] audit: type=1326 audit(1737766758.212:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8967 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85bfb8cd29 code=0x7ffc0000 [ 289.343508][ T29] audit: type=1326 audit(1737766758.222:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8967 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85bfb8cd29 code=0x7ffc0000 [ 289.431295][ T29] audit: type=1326 audit(1737766758.222:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8967 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85bfb8cd29 code=0x7ffc0000 [ 289.561522][ T29] audit: type=1326 audit(1737766758.222:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8967 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85bfb8cd29 code=0x7ffc0000 [ 289.633291][ T29] audit: type=1326 audit(1737766758.222:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8967 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85bfb8cd29 code=0x7ffc0000 [ 289.735978][ T29] audit: type=1326 audit(1737766758.242:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8967 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85bfb8cd29 code=0x7ffc0000 [ 289.801025][ T8977] bond0: (slave syz_tun): Releasing backup interface [ 289.877207][ T29] audit: type=1326 audit(1737766758.242:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8967 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85bfb8cd29 code=0x7ffc0000 [ 289.997714][ T29] audit: type=1326 audit(1737766758.242:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8967 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85bfb8cd29 code=0x7ffc0000 [ 290.097209][ T29] audit: type=1326 audit(1737766758.242:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8967 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85bfb8cd29 code=0x7ffc0000 [ 290.169520][ T29] audit: type=1326 audit(1737766758.242:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8967 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85bfb8cd29 code=0x7ffc0000 [ 293.517803][ T9004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.966933][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 294.138839][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.164508][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 294.189329][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.222629][ T9] usb 3-1: config 0 descriptor?? [ 294.793668][ T9] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 294.842942][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001B/input/input25 [ 294.970316][ T9] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 295.323046][ T8] usb 3-1: USB disconnect, device number 14 [ 295.787211][ T9048] loop6: detected capacity change from 0 to 16384 [ 296.030815][ T9053] blk_print_req_error: 60 callbacks suppressed [ 296.030837][ T9053] I/O error, dev loop6, sector 32 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 296.066583][ T9053] I/O error, dev loop6, sector 32 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 297.396776][ T5911] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 297.607016][ T5911] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 297.652765][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.697334][ T5911] usb 4-1: config 0 descriptor?? [ 297.714060][ T5911] gspca_main: spca508-2.14.0 probing 8086:0110 [ 297.930239][ T5911] gspca_spca508: reg_read err -32 [ 297.937791][ T5911] gspca_spca508: reg_read err -32 [ 297.947395][ T5911] gspca_spca508: reg_read err -32 [ 297.976875][ T5911] gspca_spca508: reg_read err -32 [ 297.996789][ T5911] gspca_spca508: reg_read err -32 [ 298.131973][ T9098] loop6: detected capacity change from 0 to 16384 [ 298.209084][ T5911] gspca_spca508: reg write: error -71 [ 298.214603][ T5911] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 298.228413][ T9102] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 298.268599][ T5911] usb 4-1: USB disconnect, device number 19 [ 300.636585][ T5904] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 300.788929][ T5904] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 300.805007][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.869868][ T5904] usb 1-1: config 0 descriptor?? [ 300.934755][ T5904] gspca_main: spca508-2.14.0 probing 8086:0110 [ 301.117732][ T5904] gspca_spca508: reg_read err -32 [ 301.147927][ T5904] gspca_spca508: reg_read err -32 [ 301.178333][ T5904] gspca_spca508: reg_read err -32 [ 301.184794][ T5904] gspca_spca508: reg_read err -32 [ 301.190990][ T5904] gspca_spca508: reg_read err -32 [ 301.404646][ T5904] gspca_spca508: reg write: error -71 [ 301.425178][ T5904] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 301.455932][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 301.455950][ T29] audit: type=1804 audit(1737766770.402:29): pid=9152 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1081" name="/" dev="pidfs" ino=9153 res=1 errno=0 [ 301.483616][ T5904] usb 1-1: USB disconnect, device number 17 [ 301.606912][ T9157] input: syz0 as /devices/virtual/input/input26 [ 304.903613][ T9212] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 305.688620][ T9226] IPVS: Scheduler module ip_vs_sip not found [ 305.806556][ T5904] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 305.976539][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 305.983453][ T5904] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 306.007116][ T5904] usb 5-1: config 0 has no interface number 0 [ 306.024404][ T5904] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 306.039515][ T5904] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 306.057624][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.080656][ T5904] usb 5-1: Product: syz [ 306.084990][ T5904] usb 5-1: Manufacturer: syz [ 306.113357][ T5904] usb 5-1: SerialNumber: syz [ 306.137351][ T5904] usb 5-1: config 0 descriptor?? [ 306.143879][ T9229] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 306.154310][ T5904] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 306.164501][ T5904] em28xx 5-1:0.132: Video interface 132 found: bulk [ 306.582661][ T5904] em28xx 5-1:0.132: chip ID is em28174 [ 307.388946][ T5904] em28xx 5-1:0.132: failed to read eeprom (err=-110) [ 307.407339][ T5904] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 307.656595][ T5904] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 308.011406][ T5904] em28xx 5-1:0.132: analog set to bulk mode. [ 308.041878][ T25] em28xx 5-1:0.132: Registering V4L2 extension [ 308.078835][ T5904] usb 5-1: USB disconnect, device number 20 [ 308.125610][ T5904] em28xx 5-1:0.132: Disconnecting em28xx [ 308.689221][ T25] usb 5-1: Decoder not found [ 308.697948][ T25] em28xx 5-1:0.132: failed to create media graph [ 308.704394][ T25] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 308.847030][ T25] em28xx 5-1:0.132: Remote control support is not available for this card. [ 308.864576][ T5904] em28xx 5-1:0.132: Closing input extension [ 308.897248][ T5904] em28xx 5-1:0.132: Freeing device [ 389.226602][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.526398][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 415.533482][ C0] rcu: 1-...!: (1 GPs behind) idle=b33c/1/0x4000000000000000 softirq=28492/28494 fqs=13 [ 415.545193][ C0] rcu: (detected by 0, t=10505 jiffies, g=33805, q=206 ncpus=2) [ 415.553530][ C0] Sending NMI from CPU 0 to CPUs 1: [ 415.553578][ C1] NMI backtrace for cpu 1 [ 415.553623][ C1] CPU: 1 UID: 0 PID: 5831 Comm: syz-executor Not tainted 6.13.0-syzkaller-06074-g2c8d2a510c15 #0 [ 415.553644][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 415.553658][ C1] RIP: 0010:lock_release+0x109/0xa30 [ 415.553692][ C1] Code: 38 84 c0 4c 8b 74 24 18 0f 85 1a 06 00 00 83 3d 1c ba 7f 0e 00 0f 84 55 05 00 00 65 8b 05 cf b3 67 7e 85 c0 0f 85 46 05 00 00 <65> 48 8b 04 25 80 d4 03 00 48 89 44 24 20 48 8d 98 dc 0a 00 00 48 [ 415.553707][ C1] RSP: 0018:ffffc90000a18b20 EFLAGS: 00000046 [ 415.553724][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff819ad660 [ 415.553735][ C1] RDX: 0000000000000000 RSI: ffffffff8c5f5400 RDI: ffffffff8c5f53c0 [ 415.553747][ C1] RBP: ffffc90000a18c60 R08: ffffffff901a5e37 R09: 1ffffffff2034bc6 [ 415.553759][ C1] R10: dffffc0000000000 R11: fffffbfff2034bc7 R12: 1ffff92000143170 [ 415.553772][ C1] R13: ffffffff89edf462 R14: ffffffff8e93a020 R15: dffffc0000000000 [ 415.553784][ C1] FS: 000055555d499500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 415.553799][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.553811][ C1] CR2: 00007f7cbd579ef8 CR3: 0000000064744000 CR4: 00000000003526f0 [ 415.553825][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 415.553835][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 415.553852][ C1] Call Trace: [ 415.553861][ C1] [ 415.553870][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 415.553900][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 415.553923][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 415.553949][ C1] ? nmi_handle+0x2a/0x5a0 [ 415.553980][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 415.554000][ C1] ? nmi_handle+0x14f/0x5a0 [ 415.554022][ C1] ? nmi_handle+0x2a/0x5a0 [ 415.554046][ C1] ? lock_release+0x109/0xa30 [ 415.554066][ C1] ? default_do_nmi+0x63/0x160 [ 415.554091][ C1] ? exc_nmi+0x123/0x1f0 [ 415.554115][ C1] ? end_repeat_nmi+0xf/0x53 [ 415.554139][ C1] ? advance_sched+0xa02/0xca0 [ 415.554169][ C1] ? lock_release+0xb0/0xa30 [ 415.554190][ C1] ? lock_release+0x109/0xa30 [ 415.554211][ C1] ? lock_release+0x109/0xa30 [ 415.554233][ C1] ? lock_release+0x109/0xa30 [ 415.554254][ C1] [ 415.554259][ C1] [ 415.554267][ C1] ? advance_sched+0xa02/0xca0 [ 415.554293][ C1] ? __netif_schedule+0xc4/0x310 [ 415.554315][ C1] ? __pfx_lock_release+0x10/0x10 [ 415.554336][ C1] ? __pfx___netif_schedule+0x10/0x10 [ 415.554361][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 415.554378][ C1] ? taprio_set_budgets+0x333/0x370 [ 415.554404][ C1] ? advance_sched+0xa02/0xca0 [ 415.554429][ C1] ? advance_sched+0xa02/0xca0 [ 415.554454][ C1] advance_sched+0xb32/0xca0 [ 415.554481][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 415.554499][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 415.554521][ C1] ? __pfx_advance_sched+0x10/0x10 [ 415.554546][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 415.554581][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 415.554606][ C1] ? sched_clock+0x4a/0x70 [ 415.554625][ C1] ? read_tsc+0x9/0x20 [ 415.554641][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 415.554666][ C1] hrtimer_interrupt+0x403/0xa40 [ 415.554703][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 415.554730][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 415.554750][ C1] [ 415.554755][ C1] [ 415.554761][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.554786][ C1] RIP: 0010:lock_release+0x19d/0xa30 [ 415.554807][ C1] Code: 3b 00 74 08 4c 89 f7 e8 61 8e 88 00 4c 89 6c 24 50 48 c7 84 24 b0 00 00 00 00 00 00 00 9c 8f 84 24 b0 00 00 00 42 80 3c 3b 00 <74> 08 4c 89 f7 e8 49 8d 88 00 48 8b 9c 24 b0 00 00 00 fa 48 c7 c7 [ 415.554848][ C1] RSP: 0018:ffffc90003f270a0 EFLAGS: 00000246 [ 415.554863][ C1] RAX: ffffffff93e31710 RBX: 1ffff920007e4e2a RCX: ffffffff819ad660 [ 415.554875][ C1] RDX: 0000000000000000 RSI: ffffffff8c5f5400 RDI: ffffffff8c5f53c0 [ 415.554888][ C1] RBP: ffffc90003f271e0 R08: ffffffff901a5e37 R09: 1ffffffff2034bc6 [ 415.554900][ C1] R10: dffffc0000000000 R11: fffffbfff2034bc7 R12: 1ffff920007e4e20 [ 415.554913][ C1] R13: ffffffff822eed27 R14: ffffc90003f27150 R15: dffffc0000000000 [ 415.554926][ C1] ? page_ext_put+0x97/0xc0 [ 415.554947][ C1] ? lock_release+0xb0/0xa30 [ 415.554971][ C1] ? __pfx_lock_release+0x10/0x10 [ 415.554995][ C1] ? page_ext_put+0x97/0xc0 [ 415.555012][ C1] ? __pfx_lock_release+0x10/0x10 [ 415.555037][ C1] ? page_ext_get+0x20/0x2a0 [ 415.555054][ C1] ? page_ext_get+0x1d6/0x2a0 [ 415.555074][ C1] page_ext_put+0xa3/0xc0 [ 415.555092][ C1] __page_table_check_ptes_set+0x30f/0x410 [ 415.555114][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 415.555137][ C1] ? __folio_rmap_sanity_checks+0x15d/0x3a0 [ 415.555157][ C1] copy_pmd_range+0x450f/0x77a0 [ 415.555199][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 415.555226][ C1] ? mark_lock+0x9a/0x360 [ 415.555251][ C1] ? __lock_acquire+0x1397/0x2100 [ 415.555300][ C1] copy_page_range+0x99f/0xe90 [ 415.555329][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 415.555350][ C1] ? __pfx_up_write+0x10/0x10 [ 415.555365][ C1] ? __rb_insert_augmented+0x2a4/0x6b0 [ 415.555385][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 415.555408][ C1] ? vma_interval_tree_augment_rotate+0x1b4/0x1c0 [ 415.555432][ C1] copy_mm+0x1279/0x2110 [ 415.555461][ C1] ? __pfx_copy_mm+0x10/0x10 [ 415.555486][ C1] ? __init_rwsem+0x122/0x160 [ 415.555512][ C1] ? copy_signal+0x51c/0x640 [ 415.555530][ C1] copy_process+0x1845/0x3d50 [ 415.555555][ C1] ? copy_process+0x9fa/0x3d50 [ 415.555577][ C1] ? __pfx_copy_process+0x10/0x10 [ 415.555614][ C1] ? kernel_clone+0x1f9/0x870 [ 415.555636][ C1] kernel_clone+0x223/0x870 [ 415.555657][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 415.555689][ C1] __x64_sys_clone+0x258/0x2a0 [ 415.555710][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 415.555728][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 415.555756][ C1] ? exc_page_fault+0x590/0x8b0 [ 415.555776][ C1] ? do_syscall_64+0xb6/0x230 [ 415.555797][ C1] do_syscall_64+0xf3/0x230 [ 415.555818][ C1] ? clear_bhb_loop+0x35/0x90 [ 415.555848][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.555871][ C1] RIP: 0033:0x7fdc62383593 [ 415.555892][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 415.555905][ C1] RSP: 002b:00007ffefbb98dc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 415.555921][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdc62383593 [ 415.555932][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 415.555942][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 415.555951][ C1] R10: 000055555d4997d0 R11: 0000000000000246 R12: 0000000000000000 [ 415.555962][ C1] R13: 000000000004bb55 R14: 00007ffefbb98f50 R15: 00000000000000c9 [ 415.555981][ C1] [ 415.556571][ C0] rcu: rcu_preempt kthread starved for 10440 jiffies! g33805 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 416.259289][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 416.269392][ C0] rcu: RCU grace-period kthread stack dump: [ 416.275329][ C0] task:rcu_preempt state:R running task stack:26104 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 416.287128][ C0] Call Trace: [ 416.290430][ C0] [ 416.293398][ C0] __schedule+0x181a/0x4b90 [ 416.297943][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 416.303972][ C0] ? __pfx___schedule+0x10/0x10 [ 416.308853][ C0] ? __pfx_lock_release+0x10/0x10 [ 416.313922][ C0] ? __pfx___mod_timer+0x10/0x10 [ 416.318912][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 416.325287][ C0] ? schedule+0x90/0x320 [ 416.329566][ C0] schedule+0x14b/0x320 [ 416.333752][ C0] schedule_timeout+0x15a/0x290 [ 416.338666][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 416.344346][ C0] ? __pfx_process_timeout+0x10/0x10 [ 416.349690][ C0] ? prepare_to_swait_event+0x330/0x350 [ 416.355626][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 416.360598][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 416.373836][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 416.380114][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 416.385429][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 416.391366][ C0] ? finish_swait+0xd4/0x1e0 [ 416.396159][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 416.401441][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 416.406172][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 416.411429][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 416.417358][ C0] ? __kthread_parkme+0x169/0x1d0 [ 416.422680][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 416.427914][ C0] kthread+0x7a9/0x920 [ 416.432023][ C0] ? __pfx_kthread+0x10/0x10 [ 416.436739][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 416.441972][ C0] ? __pfx_kthread+0x10/0x10 [ 416.446599][ C0] ? __pfx_kthread+0x10/0x10 [ 416.451312][ C0] ? __pfx_kthread+0x10/0x10 [ 416.455946][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.461167][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 416.466393][ C0] ? __pfx_kthread+0x10/0x10 [ 416.471025][ C0] ret_from_fork+0x4b/0x80 [ 416.475472][ C0] ? __pfx_kthread+0x10/0x10 [ 416.480092][ C0] ret_from_fork_asm+0x1a/0x30 [ 416.484988][ C0] [ 416.488041][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 416.494393][ C0] CPU: 0 UID: 0 PID: 9324 Comm: syz.4.1135 Not tainted 6.13.0-syzkaller-06074-g2c8d2a510c15 #0 [ 416.504752][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 416.514877][ C0] RIP: 0010:smp_call_function_many_cond+0x1ba4/0x2d30 [ 416.521681][ C0] Code: 03 84 c0 75 7e 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 90 e8 0b 00 41 83 e4 01 4c 8b 64 24 68 75 07 e8 40 e4 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00 [ 416.541938][ C0] RSP: 0018:ffffc90003d17880 EFLAGS: 00000293 [ 416.548231][ C0] RAX: ffffffff81b363c5 RBX: 1ffff110170e88b9 RCX: ffff88802b881e00 [ 416.556251][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 416.564261][ C0] RBP: ffffc90003d17a80 R08: ffffffff81b36390 R09: 1ffffffff2858308 [ 416.572444][ C0] R10: dffffc0000000000 R11: fffffbfff2858309 R12: ffff8880b863f948 [ 416.581054][ C0] R13: ffff8880b87445c8 R14: ffff8880b863f940 R15: 0000000000000001 [ 416.589446][ C0] FS: 0000555590f45500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 416.598837][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.605724][ C0] CR2: 0000000020349000 CR3: 0000000032832000 CR4: 00000000003526f0 [ 416.613815][ C0] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 416.621816][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 416.629984][ C0] Call Trace: [ 416.633288][ C0] [ 416.636162][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 416.642542][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 416.648227][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 416.654157][ C0] ? cgroup_rstat_updated+0x13b/0xc30 [ 416.659754][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 416.666024][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 416.671467][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 416.677148][ C0] ? update_process_times+0x242/0x2f0 [ 416.682570][ C0] ? tick_nohz_handler+0x37c/0x500 [ 416.687800][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 416.693374][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 416.698809][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 416.704560][ C0] ? sched_clock+0x4a/0x70 [ 416.709001][ C0] ? read_tsc+0x9/0x20 [ 416.713098][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 416.719202][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 416.724371][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 416.730567][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 416.736410][ C0] [ 416.739360][ C0] [ 416.742399][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 416.748708][ C0] ? smp_call_function_many_cond+0x1b90/0x2d30 [ 416.754893][ C0] ? smp_call_function_many_cond+0x1bc5/0x2d30 [ 416.761091][ C0] ? smp_call_function_many_cond+0x1ba4/0x2d30 [ 416.767390][ C0] ? trace_sys_enter+0x1e/0x120 [ 416.772286][ C0] ? trace_sys_enter+0x1e/0x120 [ 416.777178][ C0] ? __pfx___text_poke+0x10/0x10 [ 416.782210][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 416.788601][ C0] ? __pfx___might_resched+0x10/0x10 [ 416.794039][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 416.799974][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 416.805025][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 416.810202][ C0] text_poke_bp_batch+0x352/0xb30 [ 416.815283][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 416.821405][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 416.827689][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 416.832835][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 416.838500][ C0] ? text_poke_queue+0x46/0x180 [ 416.843394][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 416.849717][ C0] ? __jump_label_update+0x379/0x3a0 [ 416.855044][ C0] text_poke_finish+0x30/0x50 [ 416.859839][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 416.865938][ C0] static_key_disable_cpuslocked+0xd2/0x1c0 [ 416.872147][ C0] static_key_disable+0x1a/0x20 [ 416.877064][ C0] tracepoint_probe_unregister+0x83c/0xa10 [ 416.882918][ C0] bpf_raw_tp_link_release+0x45/0x70 [ 416.888242][ C0] bpf_link_free+0xfd/0x3a0 [ 416.892776][ C0] bpf_link_release+0x78/0x90 [ 416.897478][ C0] ? __pfx_bpf_link_release+0x10/0x10 [ 416.902882][ C0] __fput+0x3e9/0x9f0 [ 416.906913][ C0] task_work_run+0x24f/0x310 [ 416.911543][ C0] ? _raw_spin_unlock+0x28/0x50 [ 416.916434][ C0] ? __pfx_task_work_run+0x10/0x10 [ 416.922115][ C0] ? syscall_exit_to_user_mode+0xa3/0x340 [ 416.927868][ C0] syscall_exit_to_user_mode+0x13f/0x340 [ 416.933551][ C0] do_syscall_64+0x100/0x230 [ 416.938176][ C0] ? clear_bhb_loop+0x35/0x90 [ 416.942903][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.948938][ C0] RIP: 0033:0x7f85bfb8cd29 [ 416.953380][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.973018][ C0] RSP: 002b:00007fff1d414a58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 416.981469][ C0] RAX: 0000000000000000 RBX: 000000000004bc27 RCX: 00007f85bfb8cd29 [ 416.989466][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 416.997551][ C0] RBP: 00007f85bfda7ba0 R08: 0000000000000001 R09: 00007fff1d414d4f [ 417.005560][ C0] R10: 00007f85bfa00000 R11: 0000000000000246 R12: 000000000004bc7e [ 417.013555][ C0] R13: 00007f85bfda5fa0 R14: 0000000000000032 R15: ffffffffffffffff [ 417.021658][ C0]