last executing test programs: 12.24276596s ago: executing program 1 (id=575): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 11.781221144s ago: executing program 1 (id=578): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x21) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x4, &(0x7f0000000100)) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 11.489441469s ago: executing program 4 (id=580): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xb, 0x8b}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_int(r1, 0x1, 0x29, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x7) 10.48345124s ago: executing program 2 (id=581): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000040)="db", 0x1}], 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000002700)={0xffff, [[0x9, 0x1, 0x5, 0x5, 0x7, 0x10, 0x3, 0x400], [0x5, 0x401, 0x1a, 0x4, 0x8, 0x6, 0x3, 0x3], [0x4, 0x1, 0xd1af, 0xffffb3c0, 0x3, 0x9, 0x4d90, 0x7]], '\x00', [{0x5, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x401, 0xc, 0x0, 0x1}, {0x7, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x1, 0x1, 0x1}, {0x40, 0x7, 0x1, 0x0, 0x1}, {0xea, 0x101, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x100, 0x0, 0x1, 0x1}, {0x0, 0xff, 0x0, 0x0, 0x1, 0x1}, {0x4, 0x9, 0x1, 0x1}, {0x752, 0x5, 0x0, 0x1, 0x1}, {0x8, 0x8, 0x1, 0x1}, {0xa7, 0x1, 0x0, 0x1}], '\x00', 0x7}) close_range(r3, 0xffffffffffffffff, 0x0) 10.14384619s ago: executing program 1 (id=582): socket(0xa, 0x3, 0x1003a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socket$netlink(0x10, 0x3, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f00000003c0)={0x19980330, r1}, &(0x7f0000000400)={0x4, 0x14, 0x9, 0x8, 0x2, 0xfffffff7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x22) connect$unix(r2, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00250e00000000000000000c000080080021007a87a1b50b1000"], 0x1c}], 0x1}, 0x0) 9.989507397s ago: executing program 2 (id=583): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x4, 0x9}, 0x50) close(0x3) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r3, 0x5608) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c72fffffffffffffff5000007000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 9.823528289s ago: executing program 4 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf) 9.744485423s ago: executing program 0 (id=585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.057002551s ago: executing program 2 (id=587): syz_usb_ep_read(0xffffffffffffffff, 0xbf, 0x4a, &(0x7f0000000240)=""/74) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write(0xffffffffffffffff, &(0x7f0000004940), 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) mount$afs(&(0x7f0000000700), &(0x7f0000000740)='./file1\x00', &(0x7f0000000780), 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="65a6746f63656c6c2c666c6f636b3d6c6f63616c2c7375626a5f726f6c653d2c61756469742c646466636f6e746578743d73797361646d5f752c7375626a5f74792c05b2d1504c002c7063723d30303030303030303030303030303030303033342c00"]) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=@getchain={0x44, 0x66, 0x8, 0x70bd27, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, {0xffea, 0xfff2}, {0x9, 0x8}, {0x3, 0x10}}, [{0x8, 0xb, 0xb7}, {0x8}, {0x8, 0xb, 0xff7fffff}, {0x8, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000050}, 0x10) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) r5 = syz_open_dev$usbfs(0x0, 0x4, 0x8401) syz_open_dev$usbmon(0x0, 0x7, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f00000004c0)=""/73, &(0x7f0000000540)=0x49) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f00000002c0)=@urb_type_iso={0x0, {0x2, 0x1}, 0x54, 0x0, &(0x7f00000001c0), 0x0, 0x36f4, 0x91, 0x1e, 0xbedf, 0x0, &(0x7f0000000240), [{0x6, 0x5, 0x7}, {0x9, 0x3, 0xa}, {0x3, 0x0, 0x7c}, {0xd6, 0x7, 0x7}, {0xe, 0x4, 0xff}, {0xfffffff9, 0xe792, 0x80}, {0x0, 0x3, 0x78b}, {0xcad0, 0x100}, {0x6, 0x2361, 0xfffffffd}, {0x8, 0xdfc59a1}, {0x800, 0x1, 0x8}, {0xd, 0xe0000}, {0x3, 0x0, 0x1}, {0x6, 0x1, 0x3}, {0xffffe3f7, 0x7f, 0x5c}, {0x3, 0xf, 0xf}, {0x972, 0xdcbe, 0x8}, {0x5, 0x7ff, 0x2}, {0xffffffff, 0xa9e3, 0x77feddc0}, {0x0, 0x80, 0x3}, {0x4, 0xf9, 0x5}, {0x4, 0xfff, 0x2}, {0x4, 0x1, 0x6}, {0x8, 0x4, 0x7}, {0xfffffffa, 0x79a, 0x8}, {0x60000000, 0x5, 0x10}, {0xfffffff8, 0xffffff81, 0x6}, {0x5, 0xeb5, 0xc35}, {0x0, 0xf, 0xc}, {0x9, 0x0, 0x2300}]}) 7.973729088s ago: executing program 0 (id=588): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) 7.956127208s ago: executing program 4 (id=589): socket$inet6_tcp(0xa, 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x28) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6.538790903s ago: executing program 0 (id=591): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r3, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x80020, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@uname={'uname', 0x3d, '/dev/cpu/#/msr\x00'}}, {@access_any}, {@cache_mmap}], [{@fsname={'fsname', 0x3d, '),.'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/cpu/#/msr\x00'}}]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x18, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x700}, 0x8004) 6.514991939s ago: executing program 1 (id=592): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="1b0000001e", 0x5}], 0x1}, 0x40400) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001114100026bd7000fcdbdf25080003000300000008004f000400000008004f000000000008004b002800000008004b0000000000080003000400000008004a00008000000800010001000000679b6a6b4a3cef62bddf02f13b3f03d16323788affbf446128075a820c65db2fc7aa9eda6135e96e6218cb0b2f37f81808ee37fbcea04a2193ec9fcfbebd0471d894768ac9e45e9209ad9d8acf6b46020000006919cfd7a38f0e4985e8334a72239a3f82ca234e956e884567b8c26a5a37bcca7e945524f3d349bb0f59e779ca216bb228b4dba5f352c7a6f65937586e7c075ac2fc81fe24a755e7b318daae6bac818531e652a91d"], 0x50}, 0x1, 0x0, 0x0, 0x40400c5}, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_open_dev$sndmidi(0x0, 0x80000001, 0x439143) r4 = dup(0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001b00)={0x1c, 0x6a, 0xfcdfa0f79c183163, 0x0, 0x25dfdbfc, "", [@nested={0xc, 0x9e, 0x0, 0x1, [@nested={0x8, 0xe0, 0x0, 0x1, [@nested={0x4, 0x12b}]}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x48000}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0xfffffb07, @remote, 0x680}, 0x1c) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[], 0x40}}, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 6.197962676s ago: executing program 3 (id=593): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000040)="db", 0x1}], 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000002700)={0xffff, [[0x9, 0x1, 0x5, 0x5, 0x7, 0x10, 0x3, 0x400], [0x5, 0x401, 0x1a, 0x4, 0x8, 0x6, 0x3, 0x3], [0x4, 0x1, 0xd1af, 0xffffb3c0, 0x3, 0x9, 0x4d90, 0x7]], '\x00', [{0x5, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x401, 0xc, 0x0, 0x1}, {0x7, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x1, 0x1, 0x1}, {0x40, 0x7, 0x1, 0x0, 0x1}, {0xea, 0x101, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x100, 0x0, 0x1, 0x1}, {0x0, 0xff, 0x0, 0x0, 0x1, 0x1}, {0x4, 0x9, 0x1, 0x1}, {0x752, 0x5, 0x0, 0x1, 0x1}, {0x8, 0x8, 0x1, 0x1}, {0xa7, 0x1, 0x0, 0x1}], '\x00', 0x7}) close_range(r3, 0xffffffffffffffff, 0x0) 5.231658678s ago: executing program 2 (id=594): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.213831157s ago: executing program 0 (id=595): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0x403, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) fsync(r0) syz_usb_disconnect(0xffffffffffffffff) 5.045535825s ago: executing program 4 (id=596): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000340), &(0x7f0000000380)=0x4) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}], [{@euid_lt}, {@permit_directio}], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) epoll_create(0x400) write$eventfd(0xffffffffffffffff, &(0x7f00000000c0)=0x2b952170, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) 5.044909975s ago: executing program 3 (id=597): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x4, 0x9}, 0x50) close(0x3) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r3, 0x5608) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c72fffffffffffffff5000007000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 3.929792069s ago: executing program 3 (id=598): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000740)={0x1, 0x0, 0x201e, 0x81db, 0x9, 0x8, 0x45}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0e00000004000000040000000200020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001640)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) openat$adsp1(0xffffffffffffff9c, 0x0, 0x40800, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) 3.173011301s ago: executing program 0 (id=599): socket$inet(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xfb, 0x8a, 0x54, 0x8, 0xb48, 0x1006, 0xb77d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0xf5, 0xa0, 0x9b, [{{0x9, 0x4, 0x46, 0x0, 0x0, 0xd6, 0x2c, 0x3e, 0x4}}]}}]}}, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) 3.169547451s ago: executing program 3 (id=600): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x90, 0x1e, 0x109, 0x0, 0xfffffffe, {}, [{0x7c, 0x1, [@m_ct={0x78, 0xc, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "240f6bd39baa40cc4284547234bf0d50"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @multicast2}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "cfc11146aa6a7b5dc6e34631ba00aa90"}, @TCA_CT_ZONE={0x6, 0x4, 0x81}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x90}, 0x1, 0x2b1e}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000040)) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x10}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x80000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000004) 1.880179909s ago: executing program 3 (id=601): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) 1.665513963s ago: executing program 4 (id=602): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) madvise(&(0x7f0000514000/0x2000)=nil, 0x2000, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) signalfd4(r0, &(0x7f0000000140)={[0x8000000000000000]}, 0x8, 0x0) 1.481042847s ago: executing program 3 (id=603): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x206) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) signalfd4(r4, &(0x7f00000000c0)={[0x48dc7c62]}, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000200)=0x8001100) 1.440578739s ago: executing program 1 (id=604): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000007c0)={0x2, 0x0, @ioapic={0x4000, 0xb, 0xfffffffe, 0xfffffffc, 0x0, [{0xc, 0x5, 0x8, '\x00', 0xb4}, {0x83, 0xd, 0x4, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0x40}, {0x0, 0x9, 0x40, '\x00', 0x7}, {0x8, 0x10, 0x8, '\x00', 0xa8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x8c, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xdc, 0x6, '\x00', 0x4}, {0x1, 0xd, 0x15, '\x00', 0x8}, {0x8, 0x7, 0x6, '\x00', 0x7}, {0x4, 0x8a, 0x80, '\x00', 0xdd}, {0x3, 0xf1, 0x6, '\x00', 0x9}, {0x7, 0x65, 0x0, '\x00', 0xfd}, {0x6, 0x9b, 0x42, '\x00', 0x23}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xef, 0x6, 0x9, '\x00', 0x4}, {0xf, 0x6, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x3, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x15, 0xfd, 0x9, '\x00', 0x2}, {0x92, 0x6, 0xfa, '\x00', 0x42}]}}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x82) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x4, 0x4, 0xfffe}) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) socket$inet(0x2, 0x3, 0x7f) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x24044884) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000200)=""/247, 0xf7}], 0x1, 0x1000a2, 0x0) 1.291785456s ago: executing program 2 (id=605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "36771f"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 434.981196ms ago: executing program 4 (id=606): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000001000/0x400000)=nil) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="deaa00000000000071101b000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000004c0)={{0x1, 0x1, 0x80000001, 0x0, 0xfff}}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, &(0x7f0000000300)) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000240)={0x3, 0xf8, 0x200}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x3, 0xe691, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0xfffffffffffffffe, 0x7fffffffffffffff, 0x80000000, 0x3, 0x7, 0x4, 0x80000000, 0xfffffffffffffffb], 0xab000, 0x1100}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 53.176323ms ago: executing program 0 (id=607): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000000340)=0x8) 49.799644ms ago: executing program 2 (id=608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000003050001000600000005000400000000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274000000000c000780050015"], 0x58}, 0x1, 0x0, 0x0, 0xc5dff1b4c279acea}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x1009, 0x0) r1 = memfd_secret(0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x7, 0x2, 0x1, 0x4, 'syz1\x00'}, 0x5, 0x100, 0x1, 0x0, 0x1, 0x3, 'syz1\x00', &(0x7f0000000040)=['/dev/sequencer\x00'], 0xf}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000001000)=""/91) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 0s ago: executing program 1 (id=609): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts. [ 87.236824][ T5822] cgroup: Unknown subsys name 'net' [ 87.412746][ T5822] cgroup: Unknown subsys name 'cpuset' [ 87.422330][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.098842][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.459395][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.467660][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.478742][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.487174][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.500110][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.514621][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.523891][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.583135][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.591769][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.605952][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.644580][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.658465][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.666341][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.674894][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.683120][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.786445][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.794848][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.803123][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.811615][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.823053][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.832528][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.841238][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.850019][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.875108][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.889078][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.349092][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 94.436077][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 94.582275][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 94.713553][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.721319][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.729194][ T5836] bridge_slave_0: entered allmulticast mode [ 94.737705][ T5836] bridge_slave_0: entered promiscuous mode [ 94.801575][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.809229][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.816455][ T5836] bridge_slave_1: entered allmulticast mode [ 94.825774][ T5836] bridge_slave_1: entered promiscuous mode [ 94.834461][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 94.904137][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.911539][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.919620][ T5832] bridge_slave_0: entered allmulticast mode [ 94.927038][ T5832] bridge_slave_0: entered promiscuous mode [ 94.934862][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 94.967081][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.976850][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.984434][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.992016][ T5832] bridge_slave_1: entered allmulticast mode [ 94.999797][ T5832] bridge_slave_1: entered promiscuous mode [ 95.057941][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.091332][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.099085][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.106424][ T5840] bridge_slave_0: entered allmulticast mode [ 95.114376][ T5840] bridge_slave_0: entered promiscuous mode [ 95.171550][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.178914][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.186226][ T5840] bridge_slave_1: entered allmulticast mode [ 95.195035][ T5840] bridge_slave_1: entered promiscuous mode [ 95.225631][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.239057][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.279089][ T5836] team0: Port device team_slave_0 added [ 95.335791][ T5836] team0: Port device team_slave_1 added [ 95.374770][ T5832] team0: Port device team_slave_0 added [ 95.405087][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.430294][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.437980][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.445628][ T5846] bridge_slave_0: entered allmulticast mode [ 95.453531][ T5846] bridge_slave_0: entered promiscuous mode [ 95.464979][ T5832] team0: Port device team_slave_1 added [ 95.498937][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.506155][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.513848][ T5844] bridge_slave_0: entered allmulticast mode [ 95.522265][ T5844] bridge_slave_0: entered promiscuous mode [ 95.534552][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.560113][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.567192][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.593973][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.606034][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.616340][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.623861][ T5846] bridge_slave_1: entered allmulticast mode [ 95.632936][ T5846] bridge_slave_1: entered promiscuous mode [ 95.655122][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.662592][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.669558][ T5839] Bluetooth: hci1: command tx timeout [ 95.675043][ T5844] bridge_slave_1: entered allmulticast mode [ 95.675562][ T5839] Bluetooth: hci0: command tx timeout [ 95.684343][ T5844] bridge_slave_1: entered promiscuous mode [ 95.723589][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.730735][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.749399][ T5155] Bluetooth: hci2: command tx timeout [ 95.758137][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.796602][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.803898][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.830201][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.843373][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.850432][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.876404][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.908894][ T5839] Bluetooth: hci3: command tx timeout [ 95.915214][ T5155] Bluetooth: hci4: command tx timeout [ 95.927754][ T5840] team0: Port device team_slave_0 added [ 95.957959][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.970946][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.983203][ T5840] team0: Port device team_slave_1 added [ 95.992138][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.005390][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.121992][ T5836] hsr_slave_0: entered promiscuous mode [ 96.129416][ T5836] hsr_slave_1: entered promiscuous mode [ 96.151820][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.159663][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.186685][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.220827][ T5846] team0: Port device team_slave_0 added [ 96.232549][ T5844] team0: Port device team_slave_0 added [ 96.241402][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.248560][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.275215][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.301547][ T5846] team0: Port device team_slave_1 added [ 96.314258][ T5832] hsr_slave_0: entered promiscuous mode [ 96.321766][ T5832] hsr_slave_1: entered promiscuous mode [ 96.329046][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.336887][ T5832] Cannot create hsr debugfs directory [ 96.369107][ T5844] team0: Port device team_slave_1 added [ 96.511274][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.518526][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.545364][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.584966][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.592148][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.620045][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.647688][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.655174][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.681490][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.715257][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.725955][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.753400][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.813333][ T5840] hsr_slave_0: entered promiscuous mode [ 96.820045][ T5840] hsr_slave_1: entered promiscuous mode [ 96.826260][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.834202][ T5840] Cannot create hsr debugfs directory [ 96.991373][ T5844] hsr_slave_0: entered promiscuous mode [ 96.997996][ T5844] hsr_slave_1: entered promiscuous mode [ 97.008039][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.018891][ T5844] Cannot create hsr debugfs directory [ 97.075544][ T5846] hsr_slave_0: entered promiscuous mode [ 97.083128][ T5846] hsr_slave_1: entered promiscuous mode [ 97.090054][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.097915][ T5846] Cannot create hsr debugfs directory [ 97.373014][ T24] cfg80211: failed to load regulatory.db [ 97.507732][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.544774][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.556167][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.588174][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.671969][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.687194][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.701950][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.714582][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.748711][ T5839] Bluetooth: hci1: command tx timeout [ 97.754352][ T5155] Bluetooth: hci0: command tx timeout [ 97.804217][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.828957][ T5155] Bluetooth: hci2: command tx timeout [ 97.844033][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.861456][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.897276][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.988727][ T5839] Bluetooth: hci3: command tx timeout [ 97.994306][ T5155] Bluetooth: hci4: command tx timeout [ 98.017612][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.031036][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.045893][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.060445][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.207601][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.236200][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.263138][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.274461][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.287462][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.314483][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.354061][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.384773][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.392388][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.433641][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.441067][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.470394][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.487264][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.513512][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.521563][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.573911][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.600093][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.607381][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.623812][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.631691][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.671399][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.678661][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.795558][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.910633][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.951626][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.959628][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.002194][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.009487][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.042383][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.160200][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.185031][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.252233][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.259503][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.317409][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.324745][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.525395][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.534070][ T5832] veth0_vlan: entered promiscuous mode [ 99.583949][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.596105][ T5832] veth1_vlan: entered promiscuous mode [ 99.723702][ T5840] veth0_vlan: entered promiscuous mode [ 99.762892][ T5840] veth1_vlan: entered promiscuous mode [ 99.784280][ T5832] veth0_macvtap: entered promiscuous mode [ 99.826425][ T5832] veth1_macvtap: entered promiscuous mode [ 99.832901][ T5155] Bluetooth: hci0: command tx timeout [ 99.838559][ T5155] Bluetooth: hci1: command tx timeout [ 99.904984][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.913723][ T5839] Bluetooth: hci2: command tx timeout [ 99.963201][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.972540][ T5836] veth0_vlan: entered promiscuous mode [ 99.998023][ T5840] veth0_macvtap: entered promiscuous mode [ 100.035752][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.045430][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.058000][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.067157][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.076852][ T5839] Bluetooth: hci4: command tx timeout [ 100.076863][ T5155] Bluetooth: hci3: command tx timeout [ 100.096630][ T5840] veth1_macvtap: entered promiscuous mode [ 100.121657][ T5836] veth1_vlan: entered promiscuous mode [ 100.174881][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.184671][ T5836] veth0_macvtap: entered promiscuous mode [ 100.222338][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.242604][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.261375][ T5836] veth1_macvtap: entered promiscuous mode [ 100.302863][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.377579][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.390866][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.400090][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.410394][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.419489][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.451120][ T2125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.460808][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.481582][ T2125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.512070][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.523898][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.534014][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.543252][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.577959][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.603744][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.646169][ T5846] veth0_vlan: entered promiscuous mode [ 100.753287][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.800107][ T5846] veth1_vlan: entered promiscuous mode [ 100.878125][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.898715][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.006043][ T2125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.030081][ T2125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.058600][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.062738][ T5846] veth0_macvtap: entered promiscuous mode [ 101.066471][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.107558][ T5846] veth1_macvtap: entered promiscuous mode [ 101.164193][ T4591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.174741][ T4591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.186341][ T5844] veth0_vlan: entered promiscuous mode [ 101.234853][ T5953] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.257824][ T5844] veth1_vlan: entered promiscuous mode [ 101.258797][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.293389][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.323368][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.350039][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.362586][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.374042][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.384387][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.439367][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 101.464879][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.495252][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.501063][ T5844] veth0_macvtap: entered promiscuous mode [ 101.540535][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.561909][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.573166][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.585538][ T5844] veth1_macvtap: entered promiscuous mode [ 101.598011][ T10] usb 1-1: config 0 descriptor?? [ 101.725229][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.793852][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.814009][ T2125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.845550][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.863589][ T2125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.870229][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.885595][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.895200][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.902668][ T5960] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.917652][ T5155] Bluetooth: hci1: command tx timeout [ 101.919617][ T5839] Bluetooth: hci0: command tx timeout [ 102.066615][ T10] microsoft 0003:045E:07DA.0001: unknown main item tag 0x2 [ 102.075321][ T5839] Bluetooth: hci2: command tx timeout [ 102.120027][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.151634][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.154991][ T5155] Bluetooth: hci4: command tx timeout [ 102.173255][ T5839] Bluetooth: hci3: command tx timeout [ 102.190869][ T10] microsoft 0003:045E:07DA.0001: unknown main item tag 0x6 [ 102.470212][ T5965] vxfs: WRONG superblock magic 00000000 at 1 [ 102.478664][ T5965] vxfs: WRONG superblock magic 00000000 at 8 [ 102.484775][ T5965] vxfs: can't find superblock. [ 102.968405][ T10] microsoft 0003:045E:07DA.0001: unknown main item tag 0x3 [ 102.987476][ T10] microsoft 0003:045E:07DA.0001: reserved main item tag 0xe [ 103.000411][ T10] microsoft 0003:045E:07DA.0001: invalid report_count 2105992910 [ 103.008292][ T10] microsoft 0003:045E:07DA.0001: item 0 4 1 9 parsing failed [ 103.016566][ T10] microsoft 0003:045E:07DA.0001: parse failed [ 103.022954][ T10] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 103.061541][ T10] usb 1-1: USB disconnect, device number 2 [ 103.182022][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.226875][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.264674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.320649][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 103.469513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.776821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.037890][ T2125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.078138][ T2125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.284668][ T5938] IPVS: starting estimator thread 0... [ 104.303489][ T5983] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11'. [ 104.430404][ T5988] IPVS: using max 23 ests per chain, 55200 per kthread [ 104.558595][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.566642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.575435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.108717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 105.116999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 105.407304][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.455097][ T24] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 105.478585][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.532137][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 105.606814][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 105.651506][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.680989][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.698400][ T24] usb 2-1: Product: syz [ 105.711814][ T24] usb 2-1: Manufacturer: syz [ 105.743088][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 105.768407][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 105.801691][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 105.826990][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 106.284445][ T6003] netlink: 'syz.3.17': attribute type 10 has an invalid length. [ 106.322593][ T6003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.357358][ T6003] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 106.441642][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17'. [ 106.450832][ T6003] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17'. [ 106.563743][ T6003] Zero length message leads to an empty skb [ 106.644304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.708804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.746580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.885251][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 106.892647][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 106.899728][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 106.906549][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 106.913195][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 106.919949][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 106.926502][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 106.933731][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 106.941036][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 106.947876][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 106.956791][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 106.963755][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 106.971204][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 106.977962][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 106.984474][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 106.992000][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 106.999617][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 107.006461][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 107.013071][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 107.019828][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 107.027612][ T5885] usb 2-1: USB disconnect, device number 2 [ 107.027674][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 107.121708][ T6003] syz.3.17 (6003) used greatest stack depth: 19080 bytes left [ 109.152383][ T6020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21'. [ 110.983837][ T6035] syzkaller0: create flow: hash 3351587731 index 1 [ 112.112445][ T6034] syzkaller0: entered promiscuous mode [ 112.117992][ T6034] syzkaller0: entered allmulticast mode [ 112.219284][ T6047] block nbd1: shutting down sockets [ 112.556767][ T6032] syzkaller0: delete flow: hash 3351587731 index 1 [ 114.746334][ T6073] syz.1.33: attempt to access beyond end of device [ 114.746334][ T6073] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 114.764054][ T6073] syz.1.33: attempt to access beyond end of device [ 114.764054][ T6073] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 114.778757][ T6073] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 114.790594][ T6073] syz.1.33: attempt to access beyond end of device [ 114.790594][ T6073] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 114.804956][ T6073] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 114.831245][ T6073] syz.1.33: attempt to access beyond end of device [ 114.831245][ T6073] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 114.850203][ T6073] syz.1.33: attempt to access beyond end of device [ 114.850203][ T6073] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 114.866099][ T6073] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 114.892205][ T6073] syz.1.33: attempt to access beyond end of device [ 114.892205][ T6073] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 114.905504][ T6073] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 114.925214][ T6073] syz.1.33: attempt to access beyond end of device [ 114.925214][ T6073] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 114.939011][ T6073] syz.1.33: attempt to access beyond end of device [ 114.939011][ T6073] nbd1: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 114.955184][ T6073] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 114.968268][ T6073] syz.1.33: attempt to access beyond end of device [ 114.968268][ T6073] nbd1: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 114.984008][ T6073] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 114.994031][ T6073] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 117.682233][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 117.749545][ T5155] Bluetooth: hci4: command 0x0405 tx timeout [ 117.912264][ T6091] ======================================================= [ 117.912264][ T6091] WARNING: The mand mount option has been deprecated and [ 117.912264][ T6091] and is ignored by this kernel. Remove the mand [ 117.912264][ T6091] option from the mount to silence this warning. [ 117.912264][ T6091] ======================================================= [ 119.378843][ T6111] syz.3.46 uses obsolete (PF_INET,SOCK_PACKET) [ 122.786180][ T5920] IPVS: starting estimator thread 0... [ 122.923332][ T6135] netlink: 128 bytes leftover after parsing attributes in process `syz.3.53'. [ 122.971673][ T6136] IPVS: using max 36 ests per chain, 86400 per kthread [ 124.933601][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 124.942997][ T6166] netlink: 20 bytes leftover after parsing attributes in process `syz.2.63'. [ 125.241528][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 125.301850][ T6166] netlink: 20 bytes leftover after parsing attributes in process `syz.2.63'. [ 127.049153][ T6179] ubi31: attaching mtd0 [ 127.062257][ T6179] ubi31: scanning is finished [ 127.067199][ T6179] ubi31: empty MTD device detected [ 127.407894][ T6185] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.417366][ T6185] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.426415][ T6185] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.439193][ T6185] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.658516][ T6179] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 127.720660][ T6189] netlink: 328 bytes leftover after parsing attributes in process `syz.4.72'. [ 127.783267][ T6179] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 127.794693][ T6179] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 127.808163][ T6179] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 127.817423][ T6179] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 127.852424][ T6179] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 127.908853][ T6179] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 594187833 [ 127.980459][ T6179] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 128.218658][ T6187] ubi31: background thread "ubi_bgt31d" started, PID 6187 [ 129.439446][ T6207] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 130.290159][ T6214] overlayfs: overlapping lowerdir path [ 130.816867][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 131.083570][ T6230] 9pnet_fd: Insufficient options for proto=fd [ 135.711006][ T6240] svc: failed to register nfsdv3 RPC service (errno 512). [ 135.949477][ T6240] svc: failed to register nfsaclv3 RPC service (errno 512). [ 136.408098][ T6264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.90'. [ 138.318735][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.328837][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.631203][ T6274] 9pnet_fd: Insufficient options for proto=fd [ 139.726350][ T6284] tipc: Started in network mode [ 139.731578][ T6284] tipc: Node identity 4, cluster identity 4711 [ 139.738061][ T6284] tipc: Node number set to 4 [ 139.894206][ T6283] netlink: 'syz.2.96': attribute type 3 has an invalid length. [ 140.445247][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 141.240905][ T44] IPVS: starting estimator thread 0... [ 141.348562][ T6292] IPVS: using max 24 ests per chain, 57600 per kthread [ 142.818337][ T5920] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 143.670961][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.748601][ T5920] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 143.767230][ T5920] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 143.778271][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.786330][ T5920] usb 3-1: Product: syz [ 143.802046][ T5920] usb 3-1: Manufacturer: syz [ 143.806967][ T5920] usb 3-1: SerialNumber: syz [ 143.823570][ T5920] usb 3-1: config 0 descriptor?? [ 144.013837][ T30] audit: type=1326 audit(1755883991.487:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e538ebe9 code=0x7ffc0000 [ 144.244063][ T30] audit: type=1326 audit(1755883991.487:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f53e538ebe9 code=0x7ffc0000 [ 144.302378][ T6316] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 144.348557][ T6316] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 144.367499][ T30] audit: type=1326 audit(1755883991.487:4): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e538ebe9 code=0x7ffc0000 [ 144.500612][ T30] audit: type=1326 audit(1755883991.487:5): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f53e538ebe9 code=0x7ffc0000 [ 145.992378][ T30] audit: type=1326 audit(1755883991.507:6): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e538ebe9 code=0x7ffc0000 [ 145.992975][ T6316] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 146.021441][ T30] audit: type=1326 audit(1755883991.527:7): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6317 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f53e53c14a5 code=0x7ffc0000 [ 146.183386][ T6316] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.310870][ T6316] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 146.318609][ T30] audit: type=1326 audit(1755883991.547:8): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e538ebe9 code=0x7ffc0000 [ 146.428601][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.507650][ T30] audit: type=1326 audit(1755883991.557:9): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f53e538ebe9 code=0x7ffc0000 [ 146.529913][ T30] audit: type=1326 audit(1755883991.557:10): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e538ebe9 code=0x7ffc0000 [ 146.563545][ T30] audit: type=1326 audit(1755883991.557:11): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53e538ebe9 code=0x7ffc0000 [ 147.086767][ T6316] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 147.104738][ T24] usb 3-1: USB disconnect, device number 2 [ 147.200370][ T6316] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 147.206492][ T6316] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.307346][ T6316] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.351215][ T6316] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.392725][ T6316] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 147.506820][ T6316] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 147.539932][ T6316] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 147.547753][ T6316] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 147.593003][ T6316] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 147.615618][ T6342] 9pnet_fd: Insufficient options for proto=fd [ 147.992264][ T6349] netlink: 'syz.2.114': attribute type 10 has an invalid length. [ 148.014790][ T44] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 148.171692][ T6349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.230395][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.388553][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 148.454258][ T6349] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 148.468452][ T5155] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.512904][ T44] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 148.867576][ T44] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 148.887366][ T44] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 148.908285][ T44] usb 5-1: Product: syz [ 148.912746][ T44] usb 5-1: Manufacturer: syz [ 148.917417][ T44] usb 5-1: SerialNumber: syz [ 148.947142][ T44] usb 5-1: config 0 descriptor?? [ 148.956476][ T6340] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 148.967595][ T44] hub 5-1:0.0: bad descriptor, ignoring hub [ 148.974079][ T44] hub 5-1:0.0: probe with driver hub failed with error -5 [ 149.278386][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.292862][ T10] usb 5-1: USB disconnect, device number 2 [ 149.318919][ T5935] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 149.428858][ T5155] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.504457][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.516873][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.528627][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.542352][ T5935] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.556083][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.575663][ T5935] usb 3-1: config 0 descriptor?? [ 149.588497][ T5155] Bluetooth: hci4: command 0x0405 tx timeout [ 150.028691][ T5935] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 150.058818][ T5935] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 150.155252][ T5935] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 150.184664][ T5935] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 150.201721][ T5935] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 150.236995][ T5935] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 150.426730][ T6380] pim6reg: entered allmulticast mode [ 150.428377][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.552759][ T5155] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.661260][ T5935] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 150.668549][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 150.668574][ T30] audit: type=1326 audit(1755883998.037:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17058ebe9 code=0x7ffc0000 [ 150.679741][ T5935] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 150.738378][ T5935] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 150.763645][ T5935] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 150.811052][ T5935] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 150.815661][ T30] audit: type=1326 audit(1755883998.037:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17058ebe9 code=0x7ffc0000 [ 150.845747][ T5935] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 150.910430][ T5935] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 150.934013][ T30] audit: type=1326 audit(1755883998.037:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fc17058ebe9 code=0x7ffc0000 [ 150.998520][ T5935] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 151.160143][ T5935] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 151.174685][ T30] audit: type=1326 audit(1755883998.037:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17058ebe9 code=0x7ffc0000 [ 151.240053][ T5935] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 151.253094][ T30] audit: type=1326 audit(1755883998.037:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17058ebe9 code=0x7ffc0000 [ 151.349459][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.499329][ T5935] usb 3-1: USB disconnect, device number 3 [ 151.508586][ T5155] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.512467][ T30] audit: type=1326 audit(1755883998.037:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc17058ebe9 code=0x7ffc0000 [ 151.678530][ T5155] Bluetooth: hci4: command 0x0405 tx timeout [ 151.742730][ T30] audit: type=1326 audit(1755883998.037:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17058ebe9 code=0x7ffc0000 [ 151.838408][ T30] audit: type=1326 audit(1755883998.037:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17058ebe9 code=0x7ffc0000 [ 152.000974][ T30] audit: type=1326 audit(1755883998.037:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc17058ebe9 code=0x7ffc0000 [ 152.139581][ T6388] fido_id[6388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 152.154205][ T30] audit: type=1326 audit(1755883998.037:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17058ebe9 code=0x7ffc0000 [ 152.468900][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.779192][ T6395] tipc: Started in network mode [ 152.784232][ T6395] tipc: Node identity 4, cluster identity 4711 [ 152.790627][ T6395] tipc: Node number set to 4 [ 153.430969][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.588414][ T5155] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.698861][ T6397] netlink: 'syz.2.128': attribute type 10 has an invalid length. [ 153.756788][ T5155] Bluetooth: hci4: command 0x0405 tx timeout [ 154.895275][ T6407] capability: warning: `syz.3.127' uses 32-bit capabilities (legacy support in use) [ 155.069290][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 155.784928][ T6422] process 'syz.1.135' launched '/dev/fd/3' with NULL argv: empty string added [ 158.093149][ T6439] tipc: Started in network mode [ 158.098163][ T6439] tipc: Node identity 4, cluster identity 4711 [ 158.104513][ T6439] tipc: Node number set to 4 [ 159.023858][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'. [ 161.178899][ T5935] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 161.818362][ T5935] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 161.851841][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.864366][ T5935] usb 4-1: Product: syz [ 161.963144][ T5935] usb 4-1: Manufacturer: syz [ 162.000813][ T5935] usb 4-1: SerialNumber: syz [ 162.041567][ T5935] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 162.093441][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 162.302610][ T6471] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 163.128536][ T5935] usb 4-1: USB disconnect, device number 2 [ 163.759640][ T10] usb 4-1: Service connection timeout for: 256 [ 163.779601][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 163.807596][ T10] ath9k_htc: Failed to initialize the device [ 163.900250][ T5935] usb 4-1: ath9k_htc: USB layer deinitialized [ 165.153562][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.155'. [ 165.172145][ T6485] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 167.174327][ T6508] tipc: Started in network mode [ 167.179427][ T6508] tipc: Node identity 4, cluster identity 4711 [ 167.185698][ T6508] tipc: Node number set to 4 [ 170.149066][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 170.154463][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 170.170800][ T6523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.166'. [ 170.662229][ T6527] netlink: 'syz.1.166': attribute type 21 has an invalid length. [ 171.128560][ T44] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 171.788497][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 171.813415][ T44] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 171.829437][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.849530][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.885098][ T44] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.912382][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.942517][ T44] usb 5-1: Product: syz [ 171.950180][ T44] usb 5-1: Manufacturer: syz [ 171.965330][ T44] usb 5-1: SerialNumber: syz [ 172.458873][ T5938] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 172.531836][ T44] usb 5-1: 0:2 : does not exist [ 173.171040][ T5938] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 173.231857][ T5938] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 173.325721][ T5938] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 173.435642][ T5938] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 173.470038][ T44] usb 5-1: USB disconnect, device number 3 [ 173.500114][ T5938] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 173.686053][ T5938] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 173.771509][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 173.796308][ T5938] usb 2-1: Product: syz [ 173.802407][ T5938] usb 2-1: Manufacturer: syz [ 173.861865][ T5938] cdc_wdm 2-1:1.0: skipping garbage [ 173.871336][ T5938] cdc_wdm 2-1:1.0: skipping garbage [ 173.933739][ T5938] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 173.976623][ T5938] cdc_wdm 2-1:1.0: Unknown control protocol [ 174.118909][ T5938] usb 2-1: USB disconnect, device number 3 [ 182.647553][ T6641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.200'. [ 187.398634][ T5938] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 187.620557][ T5938] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 187.629783][ T5938] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 187.856187][ T5938] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 187.866420][ T5938] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 187.878464][ T5938] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 187.892914][ T5938] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 187.902713][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 187.911391][ T5938] usb 2-1: Product: syz [ 187.915710][ T5938] usb 2-1: Manufacturer: syz [ 187.959993][ T5938] cdc_wdm 2-1:1.0: skipping garbage [ 187.980815][ T5938] cdc_wdm 2-1:1.0: skipping garbage [ 188.226596][ T5938] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 188.234906][ T5938] cdc_wdm 2-1:1.0: Unknown control protocol [ 188.988542][ T5938] usb 2-1: USB disconnect, device number 4 [ 190.747220][ T6719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.223'. [ 190.850107][ T6720] netlink: 128 bytes leftover after parsing attributes in process `syz.3.224'. [ 194.323969][ T6744] 9pnet_fd: Insufficient options for proto=fd [ 199.171651][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888056200000: rx timeout, send abort [ 199.680890][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888056200000: abort rx timeout. Force session deactivation [ 199.793176][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.799958][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.888035][ T6798] 9pnet_fd: Insufficient options for proto=fd [ 203.235854][ T6854] warning: `syz.0.255' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 204.717159][ T6867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.259'. [ 206.392686][ T6886] netlink: 165 bytes leftover after parsing attributes in process `syz.1.266'. [ 208.037362][ T6903] netlink: 128 bytes leftover after parsing attributes in process `syz.4.270'. [ 210.080451][ T6921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.275'. [ 211.378446][ T44] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 211.640479][ T44] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 211.650597][ T44] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 211.661932][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 211.672271][ T44] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 211.869832][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 211.892084][ T44] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 211.919478][ T44] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 211.930809][ T44] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 211.941972][ T44] usb 2-1: Product: syz [ 211.946319][ T44] usb 2-1: Manufacturer: syz [ 211.984284][ T44] cdc_wdm 2-1:1.0: skipping garbage [ 211.989868][ T44] cdc_wdm 2-1:1.0: skipping garbage [ 212.015028][ T44] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 212.021318][ T44] cdc_wdm 2-1:1.0: Unknown control protocol [ 212.283760][ T44] usb 2-1: USB disconnect, device number 5 [ 213.608088][ T6948] netlink: 165 bytes leftover after parsing attributes in process `syz.4.284'. [ 214.704848][ T6957] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 214.808383][ T5920] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 215.138425][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 215.145496][ T5920] usb 2-1: config 179 has an invalid interface number: 97 but max is 0 [ 215.157762][ T5920] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 215.199448][ T5920] usb 2-1: config 179 has no interface number 0 [ 215.217199][ T5920] usb 2-1: config 179 interface 97 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 215.298499][ T5920] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.ce [ 215.375188][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.644112][ T5920] usb 2-1: USB disconnect, device number 6 [ 219.989865][ T5920] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 220.180205][ T5920] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 220.294123][ T5920] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 220.978291][ T5920] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 220.994049][ T5920] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 221.005116][ T5920] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 221.116075][ T5920] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 221.160141][ T7007] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 221.165602][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 221.215210][ T5920] usb 1-1: Product: syz [ 221.225285][ T5920] usb 1-1: Manufacturer: syz [ 221.291571][ T5920] cdc_wdm 1-1:1.0: skipping garbage [ 221.368672][ T5920] cdc_wdm 1-1:1.0: skipping garbage [ 221.447709][ T5920] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 221.467695][ T5920] cdc_wdm 1-1:1.0: Unknown control protocol [ 221.719557][ T5920] usb 1-1: USB disconnect, device number 3 [ 225.128406][ T5971] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 225.342296][ T5971] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 225.384555][ T5971] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 225.418344][ T5971] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 225.438653][ T5971] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 225.468418][ T5971] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 225.529154][ T5971] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 225.558682][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 225.622395][ T5971] usb 4-1: Product: syz [ 225.647639][ T5971] usb 4-1: Manufacturer: syz [ 225.690905][ T5971] cdc_wdm 4-1:1.0: skipping garbage [ 225.696162][ T5971] cdc_wdm 4-1:1.0: skipping garbage [ 225.748614][ T5971] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 225.763731][ T5971] cdc_wdm 4-1:1.0: Unknown control protocol [ 225.845666][ T7049] netlink: 165 bytes leftover after parsing attributes in process `syz.2.316'. [ 225.952198][ C0] wdm_int_callback: 2 callbacks suppressed [ 225.952218][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 225.964695][ C0] wdm_int_callback: 2 callbacks suppressed [ 225.964711][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 225.976797][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.983438][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 225.990061][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 225.997427][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 226.004082][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 226.010754][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 226.017388][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 226.023774][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 226.030430][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 226.036854][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 226.043485][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 226.050101][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 226.056713][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 226.063510][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 226.070172][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 226.076790][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 226.083463][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 226.089854][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 226.096479][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 226.123561][ T24] usb 4-1: USB disconnect, device number 3 [ 226.123705][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 228.345340][ T7064] netlink: 'syz.4.319': attribute type 10 has an invalid length. [ 228.502527][ T7064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.539302][ T7064] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 228.700214][ T7064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.319'. [ 228.713500][ T7064] netlink: 32 bytes leftover after parsing attributes in process `syz.4.319'. [ 231.065280][ T7064] syz.4.319 (7064) used greatest stack depth: 18848 bytes left [ 233.368433][ T44] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 233.718375][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 233.864829][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 233.882622][ T44] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 233.894979][ T44] usb 2-1: config 1 has no interface number 1 [ 233.903531][ T44] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 233.931878][ T44] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.949018][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888034f33c00: rx timeout, send abort [ 233.980882][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.012901][ T44] usb 2-1: Product: syz [ 234.032081][ T44] usb 2-1: Manufacturer: syz [ 234.050904][ T44] usb 2-1: SerialNumber: syz [ 234.388882][ T44] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 234.414351][ T44] usb 2-1: 2:1 : sample bitwidth 100 in over sample bytes 2 [ 234.457430][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888034f33c00: abort rx timeout. Force session deactivation [ 234.482665][ T44] usb 2-1: 2:1: cannot set freq 16101201 to ep 0x82 [ 234.615576][ T44] usb 2-1: USB disconnect, device number 7 [ 234.828460][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 235.841723][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 236.069284][ T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 236.109640][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 236.223153][ T7116] netlink: 'syz.4.336': attribute type 10 has an invalid length. [ 236.290219][ T7116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.336'. [ 236.299340][ T7116] netlink: 32 bytes leftover after parsing attributes in process `syz.4.336'. [ 236.434989][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 236.502104][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.591354][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 236.654541][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 236.694880][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 236.734748][ T24] usb 1-1: Product: syz [ 236.744123][ T24] usb 1-1: Manufacturer: syz [ 236.804372][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 236.825665][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 236.854306][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 236.883078][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 237.129906][ T24] usb 1-1: USB disconnect, device number 4 [ 239.648364][ T5885] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 239.867372][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888057a8b000: rx timeout, send abort [ 239.875910][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888057a8b800: rx timeout, send abort [ 239.888343][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888057a8b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 239.904012][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888057a8b800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 240.750121][ T5885] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 240.763289][ T5885] usb 3-1: config 0 has no interface number 0 [ 240.780679][ T5885] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 240.836723][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.867401][ T5885] usb 3-1: config 0 descriptor?? [ 240.895368][ T5885] usb 3-1: selecting invalid altsetting 1 [ 240.915451][ T5885] dvb_ttusb_budget: ttusb_init_controller: error [ 240.956221][ T5885] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 241.028390][ T44] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 241.370246][ T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.984463][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 242.403795][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 242.446529][ T7163] netlink: 165 bytes leftover after parsing attributes in process `syz.4.351'. [ 242.498355][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.548076][ T5885] DVB: Unable to find symbol cx22700_attach() [ 242.596337][ T44] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.756782][ T5885] DVB: Unable to find symbol tda10046_attach() [ 242.765927][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.808032][ T5885] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 242.899748][ T44] usb 4-1: config 0 descriptor?? [ 243.031087][ T5885] usb 3-1: USB disconnect, device number 4 [ 243.468055][ T44] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 243.579672][ T44] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 244.376151][ T10] usb 4-1: USB disconnect, device number 4 [ 244.448429][ T5920] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 244.600293][ T5920] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 244.643945][ T5920] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 244.721663][ T5920] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 244.734886][ T5920] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 244.886326][ T5920] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 244.904716][ T5920] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 245.037399][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 245.064433][ T5920] usb 3-1: Product: syz [ 245.083092][ T5920] usb 3-1: Manufacturer: syz [ 245.128411][ T5920] cdc_wdm 3-1:1.0: skipping garbage [ 245.148369][ T5920] cdc_wdm 3-1:1.0: skipping garbage [ 245.246514][ T5920] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 245.265279][ T5920] cdc_wdm 3-1:1.0: Unknown control protocol [ 245.395197][ C0] wdm_int_callback: 112 callbacks suppressed [ 245.395217][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 245.407885][ C0] wdm_int_callback: 112 callbacks suppressed [ 245.407901][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 245.428572][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 245.435245][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 245.442193][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 245.448827][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 245.455228][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 245.461850][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 245.468128][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 245.474759][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 245.481127][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 245.487830][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 245.494296][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 245.501019][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 245.508157][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 245.514930][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 245.521672][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 245.528403][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 245.534747][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 245.541412][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 245.712064][ T7188] capability: warning: `syz.0.357' uses deprecated v2 capabilities in a way that may be insecure [ 245.744133][ T44] usb 3-1: USB disconnect, device number 5 [ 245.744141][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 247.758445][ T5971] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 247.930604][ T5971] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 247.959112][ T5971] usb 1-1: config 0 has no interface number 0 [ 247.966389][ T5971] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 248.591444][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.611703][ T5971] usb 1-1: config 0 descriptor?? [ 248.621423][ T5971] usb 1-1: selecting invalid altsetting 1 [ 248.648370][ T5971] dvb_ttusb_budget: ttusb_init_controller: error [ 248.654902][ T5971] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 249.578349][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 249.771232][ T5971] DVB: Unable to find symbol cx22700_attach() [ 249.798317][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 249.832121][ T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 249.935250][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 54240, setting to 1024 [ 250.077191][ T5971] DVB: Unable to find symbol tda10046_attach() [ 250.094914][ T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 250.104417][ T5971] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 250.186492][ T7219] sctp: [Deprecated]: syz.0.364 (pid 7219) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.186492][ T7219] Use struct sctp_sack_info instead [ 250.384515][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.404562][ T5155] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 250.404640][ T5155] Bluetooth: hci0: Unknown advertising packet type: 0x5d [ 250.418559][ T5155] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 250.432812][ T5155] Bluetooth: hci0: Unknown advertising packet type: 0x60 [ 250.450439][ T5155] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 250.458431][ T5155] Bluetooth: hci0: Malformed LE Event: 0x0d [ 250.475538][ T5971] usb 1-1: USB disconnect, device number 5 [ 252.118753][ T5971] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 252.205543][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 253.248482][ T5971] usb 4-1: device descriptor read/64, error -32 [ 253.498401][ T5971] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 253.717617][ T7228] cgroup: fork rejected by pids controller in /syz1 [ 255.588477][ T5155] Bluetooth: hci4: command 0x0405 tx timeout [ 256.795453][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 256.837763][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.862495][ T24] usb 3-1: can't set config #1, error -71 [ 256.881383][ T24] usb 3-1: USB disconnect, device number 6 [ 256.918740][ T5971] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 257.110411][ T44] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 257.130620][ T5971] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 257.159242][ T5971] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 257.190333][ T5971] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 257.211826][ T5971] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 257.237003][ T5971] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 257.253858][ T5971] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 257.268054][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 257.288982][ T44] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 257.290314][ T5971] usb 1-1: Product: syz [ 257.297040][ T44] usb 4-1: config 0 has no interface number 0 [ 257.311967][ T5971] usb 1-1: Manufacturer: syz [ 257.322745][ T44] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 257.340559][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.351136][ T5971] cdc_wdm 1-1:1.0: skipping garbage [ 257.376040][ T5971] cdc_wdm 1-1:1.0: skipping garbage [ 257.395672][ T5971] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 257.426067][ T44] usb 4-1: config 0 descriptor?? [ 257.565875][ T7364] netlink: 128 bytes leftover after parsing attributes in process `syz.4.379'. [ 257.648119][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.674005][ T5971] cdc_wdm 1-1:1.0: Unknown control protocol [ 257.678122][ T44] usb 4-1: selecting invalid altsetting 1 [ 257.972599][ T44] dvb_ttusb_budget: ttusb_init_controller: error [ 257.982094][ T5971] usb 1-1: USB disconnect, device number 6 [ 257.986947][ T44] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 258.221762][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.374227][ T44] DVB: Unable to find symbol cx22700_attach() [ 258.397262][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.613200][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.674579][ T44] DVB: Unable to find symbol tda10046_attach() [ 258.694388][ T44] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 258.981052][ T44] usb 4-1: USB disconnect, device number 7 [ 260.456435][ T7389] syz.0.386: attempt to access beyond end of device [ 260.456435][ T7389] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 260.470781][ T7389] FAT-fs (loop1): unable to read boot sector [ 261.193091][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.200881][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.352581][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.081787][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.118542][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.129393][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.137925][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.307370][ T37] bridge_slave_1: left allmulticast mode [ 262.328741][ T37] bridge_slave_1: left promiscuous mode [ 262.342764][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.391734][ T37] bridge_slave_0: left allmulticast mode [ 262.420743][ T37] bridge_slave_0: left promiscuous mode [ 262.483226][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.791404][ T7403] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 264.138324][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 264.238523][ T5155] Bluetooth: hci2: command tx timeout [ 264.328378][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.383043][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 264.409336][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.437397][ T24] usb 4-1: config 0 descriptor?? [ 264.455918][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 264.748341][ T5971] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 265.342749][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 265.360089][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 265.482317][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 265.499382][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 265.511372][ T5971] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 265.529631][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 265.537224][ T5971] usb 1-1: config 0 has no interface number 0 [ 265.550314][ T5971] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 265.562672][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 265.573857][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 265.586175][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 265.588257][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.619495][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 265.634233][ T7418] vivid-000: disconnect [ 265.641563][ T5971] usb 1-1: config 0 descriptor?? [ 265.662298][ T5971] usb 1-1: selecting invalid altsetting 1 [ 265.849250][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 266.000523][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 266.054654][ T7418] vivid-000: reconnect [ 266.130452][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 266.236690][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 266.308364][ T5155] Bluetooth: hci2: command tx timeout [ 266.359911][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 266.447722][ T5971] dvb_ttusb_budget: ttusb_init_controller: error [ 266.454923][ T5971] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 266.479595][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 266.551982][ T24] pwc: Registered as video103. [ 266.576374][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 266.718358][ T24] usb 4-1: USB disconnect, device number 8 [ 266.977099][ T7432] netlink: 165 bytes leftover after parsing attributes in process `syz.3.398'. [ 266.986399][ T5971] DVB: Unable to find symbol cx22700_attach() [ 268.132770][ T5971] DVB: Unable to find symbol tda10046_attach() [ 268.181192][ T5971] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 268.240044][ T5971] usb 1-1: USB disconnect, device number 7 [ 268.388366][ T5155] Bluetooth: hci2: command tx timeout [ 268.521930][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.977584][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.090989][ T37] bond0 (unregistering): Released all slaves [ 269.236175][ T7449] netlink: 128 bytes leftover after parsing attributes in process `syz.3.402'. [ 269.723718][ T7435] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 269.966130][ T37] tipc: Left network mode [ 270.236467][ T7461] 9pnet_fd: Insufficient options for proto=fd [ 270.473505][ T5155] Bluetooth: hci2: command tx timeout [ 271.393011][ T37] hsr_slave_0: left promiscuous mode [ 271.433701][ T37] hsr_slave_1: left promiscuous mode [ 271.511872][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.532467][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.553427][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.571493][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.719592][ T37] veth1_macvtap: left promiscuous mode [ 271.744102][ T37] veth0_macvtap: left promiscuous mode [ 271.754737][ T37] veth1_vlan: left promiscuous mode [ 271.772549][ T37] veth0_vlan: left promiscuous mode [ 271.928668][ T5920] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 272.112179][ T5920] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.148060][ T5920] usb 5-1: config 0 has no interface number 0 [ 272.181114][ T5920] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 272.222154][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.381577][ T5920] usb 5-1: config 0 descriptor?? [ 272.415521][ T5920] usb 5-1: selecting invalid altsetting 1 [ 272.447194][ T5920] dvb_ttusb_budget: ttusb_init_controller: error [ 272.486456][ T5920] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 273.233518][ T5920] DVB: Unable to find symbol cx22700_attach() [ 273.388274][ T5920] DVB: Unable to find symbol tda10046_attach() [ 273.418316][ T5920] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 273.439702][ T5920] usb 5-1: USB disconnect, device number 4 [ 274.428651][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 274.622692][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 274.639017][ T24] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 274.654915][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 274.670991][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 274.692275][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 274.726990][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 274.737148][ T37] team0 (unregistering): Port device team_slave_1 removed [ 274.748658][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 274.756734][ T24] usb 3-1: Product: syz [ 274.770998][ T24] usb 3-1: Manufacturer: syz [ 274.781944][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 274.792001][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 274.800501][ T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 274.806652][ T24] cdc_wdm 3-1:1.0: Unknown control protocol [ 274.915327][ T37] team0 (unregistering): Port device team_slave_0 removed [ 275.076797][ C1] wdm_int_callback: 845 callbacks suppressed [ 275.076829][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 275.089508][ C1] wdm_int_callback: 845 callbacks suppressed [ 275.089530][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 275.102899][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 275.109561][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 275.116625][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 275.123379][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 275.129749][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 275.136666][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 275.143079][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 275.149724][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 275.156157][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 275.162798][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 275.169242][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 275.175885][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 275.182274][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 275.188998][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 275.199167][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 275.205835][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 275.212905][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 275.219559][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 275.338484][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 275.347723][ T24] usb 3-1: USB disconnect, device number 7 [ 276.086916][ T7393] chnl_net:caif_netlink_parms(): no params data found [ 276.592141][ T7520] netlink: 128 bytes leftover after parsing attributes in process `syz.0.415'. [ 279.189431][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 279.189451][ T30] audit: type=1326 audit(1755884126.817:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7523 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff432f8ebe9 code=0x7ffc0000 [ 279.357792][ T30] audit: type=1326 audit(1755884126.847:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7523 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff432f8ebe9 code=0x7ffc0000 [ 280.118607][ T30] audit: type=1326 audit(1755884126.887:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7523 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ff432f8ebe9 code=0x7ffc0000 [ 280.157437][ T7548] 9pnet_fd: Insufficient options for proto=fd [ 280.247182][ T30] audit: type=1326 audit(1755884126.887:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7523 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff432f8ebe9 code=0x7ffc0000 [ 280.315203][ T30] audit: type=1326 audit(1755884126.887:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7523 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff432f8ebe9 code=0x7ffc0000 [ 280.340239][ T7539] pim6reg: entered allmulticast mode [ 280.461701][ T30] audit: type=1326 audit(1755884126.887:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7523 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff432f8ebe9 code=0x7ffc0000 [ 280.530100][ T7393] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.563065][ T30] audit: type=1326 audit(1755884126.887:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7523 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff432f8ebe9 code=0x7ffc0000 [ 280.598824][ T7393] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.633684][ T7393] bridge_slave_0: entered allmulticast mode [ 280.670213][ T7393] bridge_slave_0: entered promiscuous mode [ 280.676336][ T30] audit: type=1326 audit(1755884126.897:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7523 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff432f8ebe9 code=0x7ffc0000 [ 280.715371][ T7393] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.738055][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.750461][ T7393] bridge_slave_1: entered allmulticast mode [ 280.760605][ T30] audit: type=1326 audit(1755884126.897:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7523 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff432f8ebe9 code=0x7ffc0000 [ 280.797219][ T7393] bridge_slave_1: entered promiscuous mode [ 280.883628][ T30] audit: type=1326 audit(1755884127.127:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7523 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff432f8ebe9 code=0x7ffc0000 [ 281.079387][ T7393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.335326][ T7393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.594909][ T7393] team0: Port device team_slave_0 added [ 281.725804][ T7393] team0: Port device team_slave_1 added [ 282.043143][ T7393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.094080][ T7393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.296684][ T7393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.381484][ T7393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.413126][ T7393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.646471][ T7393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.613808][ T7393] hsr_slave_0: entered promiscuous mode [ 283.622670][ T7393] hsr_slave_1: entered promiscuous mode [ 283.632524][ T7393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.642862][ T7393] Cannot create hsr debugfs directory [ 283.661274][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 283.872070][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 283.961086][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 284.038666][ T7583] netlink: 128 bytes leftover after parsing attributes in process `syz.2.429'. [ 284.459133][ T5920] IPVS: starting estimator thread 0... [ 284.475215][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 284.507964][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 284.558306][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 284.581447][ T7584] IPVS: using max 28 ests per chain, 67200 per kthread [ 284.634782][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 284.648239][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.690593][ T10] usb 4-1: Product: syz [ 284.694874][ T10] usb 4-1: Manufacturer: syz [ 284.742643][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 284.747955][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 284.785563][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 284.827034][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 285.042966][ C1] wdm_int_callback: 561 callbacks suppressed [ 285.042993][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 285.055930][ C1] wdm_int_callback: 561 callbacks suppressed [ 285.055948][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 285.074486][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 285.081200][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 285.088319][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 285.094973][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 285.101537][ T24] usb 4-1: USB disconnect, device number 9 [ 285.107542][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 285.107570][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 285.107587][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 287.787727][ T7393] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 288.046821][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 288.046864][ T30] audit: type=1326 audit(1755884135.647:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7612 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e538ebe9 code=0x7ffc0000 [ 288.077222][ T7393] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 288.180595][ T7615] pim6reg: entered allmulticast mode [ 288.190954][ T7393] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 288.375386][ T7393] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 288.488517][ T30] audit: type=1326 audit(1755884135.647:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7612 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e538ebe9 code=0x7ffc0000 [ 288.684366][ T30] audit: type=1326 audit(1755884135.647:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7612 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f53e538ebe9 code=0x7ffc0000 [ 288.750600][ T30] audit: type=1326 audit(1755884135.647:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7612 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e538ebe9 code=0x7ffc0000 [ 289.088513][ T30] audit: type=1326 audit(1755884135.647:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7612 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f53e538ebe9 code=0x7ffc0000 [ 289.151141][ T30] audit: type=1326 audit(1755884135.647:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7612 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e538ebe9 code=0x7ffc0000 [ 289.297537][ T30] audit: type=1326 audit(1755884135.647:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7612 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53e538ebe9 code=0x7ffc0000 [ 289.396197][ T30] audit: type=1326 audit(1755884135.647:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7612 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e538ebe9 code=0x7ffc0000 [ 289.502110][ T30] audit: type=1326 audit(1755884135.647:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7612 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53e538ebe9 code=0x7ffc0000 [ 289.567506][ T7393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.574559][ T30] audit: type=1326 audit(1755884135.647:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7612 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e538ebe9 code=0x7ffc0000 [ 289.783341][ T7393] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.901091][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.908893][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.036348][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.043645][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.148389][ T7649] netlink: 128 bytes leftover after parsing attributes in process `syz.4.441'. [ 291.470394][ T7667] netlink: 'syz.2.445': attribute type 12 has an invalid length. [ 291.479593][ T7667] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.445'. [ 292.637046][ T7676] tipc: Started in network mode [ 292.642168][ T7676] tipc: Node identity 4, cluster identity 4711 [ 292.648639][ T7676] tipc: Node number set to 4 [ 293.398538][ T7393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.169961][ T7393] veth0_vlan: entered promiscuous mode [ 294.216901][ T7393] veth1_vlan: entered promiscuous mode [ 294.323558][ T7393] veth0_macvtap: entered promiscuous mode [ 294.354088][ T7393] veth1_macvtap: entered promiscuous mode [ 294.795706][ T7393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.823204][ T7393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.861470][ T7393] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.882845][ T7393] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.912590][ T7393] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.931992][ T7393] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.255517][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.289685][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.653937][ T6405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.690043][ T6405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.812628][ T7726] netlink: 80 bytes leftover after parsing attributes in process `syz.2.459'. [ 298.917049][ T7743] 9pnet_fd: Insufficient options for proto=fd [ 306.500614][ T7800] 9pnet_fd: Insufficient options for proto=fd [ 306.949559][ T927] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 307.280221][ T927] usb 5-1: Using ep0 maxpacket: 16 [ 307.342547][ T927] usb 5-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 307.366209][ T927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.410656][ T927] usb 5-1: config 0 descriptor?? [ 307.902936][ T927] a4tech 0003:09DA:0006.0004: unknown main item tag 0x0 [ 307.928289][ T927] a4tech 0003:09DA:0006.0004: unknown main item tag 0x0 [ 307.935373][ T927] a4tech 0003:09DA:0006.0004: unknown main item tag 0x0 [ 308.936828][ T927] a4tech 0003:09DA:0006.0004: unknown main item tag 0x0 [ 308.954368][ T927] a4tech 0003:09DA:0006.0004: unknown main item tag 0x0 [ 308.967855][ T927] a4tech 0003:09DA:0006.0004: unknown main item tag 0x0 [ 308.993424][ T927] a4tech 0003:09DA:0006.0004: hidraw0: USB HID v0.05 Device [HID 09da:0006] on usb-dummy_hcd.4-1/input0 [ 309.008772][ T927] usb 5-1: USB disconnect, device number 5 [ 309.041717][ T7829] veth1_to_bond: entered allmulticast mode [ 309.617502][ T7832] veth1_to_bond: left allmulticast mode [ 310.376573][ T7836] fido_id[7836]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 311.857036][ T7851] 9pnet_fd: Insufficient options for proto=fd [ 312.774229][ T7865] mmap: syz.0.493 (7865) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 312.909062][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 313.368540][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 313.368561][ T30] audit: type=1800 audit(1755884160.947:84): pid=7845 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.486" name="/" dev="9p" ino=2 res=0 errno=0 [ 313.420390][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 313.429651][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 313.520408][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 313.542157][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 314.152396][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 314.186290][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 314.195997][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 314.283554][ T10] usb 4-1: Product: syz [ 314.336009][ T10] usb 4-1: Manufacturer: syz [ 314.397685][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 314.422529][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 314.479193][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 314.487184][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 314.791973][ T10] usb 4-1: USB disconnect, device number 10 [ 316.803380][ T7894] 9pnet_fd: Insufficient options for proto=fd [ 319.231859][ T7910] netlink: 165 bytes leftover after parsing attributes in process `syz.1.507'. [ 320.652396][ T7936] 9pnet_fd: Insufficient options for proto=fd [ 321.114944][ T7943] tipc: Started in network mode [ 321.120049][ T7943] tipc: Node identity 4, cluster identity 4711 [ 321.126340][ T7943] tipc: Node number set to 4 [ 322.725951][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.732551][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.096491][ T7970] netlink: 165 bytes leftover after parsing attributes in process `syz.2.525'. [ 328.558869][ T8009] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 328.665957][ T8009] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 328.680365][ T8009] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 328.697942][ T8009] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 328.707181][ T8009] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 328.836586][ T8009] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 328.872702][ T8009] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 328.898397][ T8023] netlink: 165 bytes leftover after parsing attributes in process `syz.2.538'. [ 328.912792][ T8009] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 328.934938][ T8009] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 329.007861][ T8009] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 330.351320][ T5155] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 330.431837][ T8035] 9pnet_fd: Insufficient options for proto=fd [ 332.106674][ T5906] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 332.145747][ T8057] netlink: 165 bytes leftover after parsing attributes in process `syz.4.551'. [ 332.248433][ T5906] usb 4-1: device descriptor read/64, error -71 [ 332.303475][ T8068] 9pnet_fd: Insufficient options for proto=fd [ 332.528449][ T5906] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 332.785687][ T8074] tipc: Enabled bearer , priority 0 [ 332.793370][ T5906] usb 4-1: device descriptor read/64, error -71 [ 332.818984][ T8074] syzkaller0: entered promiscuous mode [ 332.877772][ T8074] syzkaller0: entered allmulticast mode [ 332.908687][ T5906] usb usb4-port1: attempt power cycle [ 334.167533][ T8074] tipc: Resetting bearer [ 334.532179][ T8071] tipc: Resetting bearer [ 334.760516][ T8071] tipc: Disabling bearer [ 337.066261][ T8114] block device autoloading is deprecated and will be removed. [ 337.229888][ T8114] syz.3.569: attempt to access beyond end of device [ 337.229888][ T8114] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 338.068858][ T8126] netlink: 'syz.4.572': attribute type 10 has an invalid length. [ 338.805617][ T927] kernel read not supported for file /admmidi2 (pid: 927 comm: kworker/1:2) [ 343.240162][ T8186] vivid-000: disconnect [ 343.338663][ T8188] afs: Unknown parameter 'eŠtocell' [ 344.339453][ T8182] vivid-000: reconnect [ 346.068579][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 346.726580][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.829046][ T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 346.855525][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.927937][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.944557][ T10] usb 3-1: Product: syz [ 346.999722][ T10] usb 3-1: Manufacturer: syz [ 347.047958][ T10] usb 3-1: SerialNumber: syz [ 347.086283][ T10] cdc_mbim 3-1:1.0: skipping garbage [ 347.295709][ T8202] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 348.152251][ T8202] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 348.308798][ T10] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 348.316483][ T10] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 348.623205][ T10] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 348.685172][ T10] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 348.738361][ T5971] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 348.776285][ T10] wwan wwan0: port wwan0mbim0 attached [ 348.818488][ T30] audit: type=1800 audit(1755884196.427:85): pid=8212 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.596" name="/" dev="9p" ino=2 res=0 errno=0 [ 348.998384][ T5971] usb 1-1: Using ep0 maxpacket: 8 [ 349.016144][ T5971] usb 1-1: config 9 has an invalid interface number: 70 but max is 0 [ 349.034055][ T5971] usb 1-1: config 9 has no interface number 0 [ 349.073204][ T5971] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=b7.7d [ 349.107539][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.133304][ T5971] usb 1-1: Product: syz [ 349.148346][ T5971] usb 1-1: Manufacturer: syz [ 349.153109][ T5971] usb 1-1: SerialNumber: syz [ 349.192076][ T10] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 12:18:d6:b6:f0:d4 [ 349.316546][ T10] usb 3-1: USB disconnect, device number 8 [ 349.347939][ T10] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 350.164132][ T5971] ttusb_dec_send_command: command bulk message failed: error -22 [ 350.173997][ T10] wwan wwan0: port wwan0mbim0 disconnected [ 350.194026][ T5971] ttusb-dec 1-1:9.70: probe with driver ttusb-dec failed with error -22 [ 350.377389][ T5971] usb 1-1: USB disconnect, device number 8 [ 351.299181][ T8262] ------------[ cut here ]------------ [ 351.299275][ T8262] WARNING: CPU: 1 PID: 8262 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 351.299328][ T8262] Modules linked in: [ 351.299402][ T8262] CPU: 1 UID: 0 PID: 8262 Comm: syz.4.606 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 351.299431][ T8262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.299452][ T8262] RIP: 0010:folio_memcg+0x1a8/0x310 [ 351.299486][ T8262] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 351.299508][ T8262] RSP: 0018:ffffc9000ff87250 EFLAGS: 00010287 [ 351.299532][ T8262] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 351.299550][ T8262] RDX: ffffc90013331000 RSI: 0000000000036f27 RDI: 0000000000036f28 [ 351.299569][ T8262] RBP: 0000000000000000 R08: ffffea000164df47 R09: 1ffffd40002c9be8 [ 351.299587][ T8262] R10: dffffc0000000000 R11: fffff940002c9be9 R12: ffffea000164df70 [ 351.299607][ T8262] R13: dffffc0000000000 R14: ffff8880322ac000 R15: 0000000000000002 [ 351.299626][ T8262] FS: 00007fc16df6e6c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 351.299654][ T8262] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.299672][ T8262] CR2: 0000000000000000 CR3: 000000002718a000 CR4: 00000000003526f0 [ 351.299693][ T8262] Call Trace: [ 351.299708][ T8262] [ 351.299726][ T8262] workingset_activation+0x5f/0x4a0 [ 351.299760][ T8262] ? folio_mark_accessed+0x361/0x4a0 [ 351.299802][ T8262] folio_mark_accessed+0x3b5/0x4a0 [ 351.299846][ T8262] kvm_release_page_clean+0x9a/0xe0 [ 351.299877][ T8262] kvm_tdp_page_fault+0x2dd/0x370 [ 351.299918][ T8262] kvm_mmu_do_page_fault+0x2c5/0x640 [ 351.299962][ T8262] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 351.300015][ T8262] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 351.300048][ T8262] kvm_mmu_page_fault+0x22f/0xb70 [ 351.300093][ T8262] ? __pfx_handle_ept_violation+0x10/0x10 [ 351.300127][ T8262] vmx_handle_exit+0x1090/0x18a0 [ 351.300155][ T8262] ? vcpu_run+0x361c/0x6f70 [ 351.300193][ T8262] ? preempt_schedule_thunk+0x16/0x30 [ 351.300238][ T8262] vcpu_run+0x432e/0x6f70 [ 351.300292][ T8262] ? vcpu_run+0x361c/0x6f70 [ 351.300378][ T8262] ? __pfx_vcpu_run+0x10/0x10 [ 351.300407][ T8262] ? irqentry_exit+0x74/0x90 [ 351.300433][ T8262] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.300484][ T8262] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 351.300529][ T8262] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 351.300561][ T8262] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 351.300599][ T8262] ? rcu_is_watching+0x15/0xb0 [ 351.300632][ T8262] ? register_lock_class+0x51/0x320 [ 351.300684][ T8262] ? preempt_schedule+0xae/0xc0 [ 351.300711][ T8262] ? preempt_schedule_common+0x83/0xd0 [ 351.300737][ T8262] ? preempt_schedule+0xae/0xc0 [ 351.300760][ T8262] ? __pfx_preempt_schedule+0x10/0x10 [ 351.300809][ T8262] kvm_vcpu_ioctl+0x95c/0xe90 [ 351.300848][ T8262] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 351.300876][ T8262] ? __lock_acquire+0xab9/0xd20 [ 351.300903][ T8262] ? __asan_memset+0x22/0x50 [ 351.300938][ T8262] ? smack_file_ioctl+0x302/0x340 [ 351.300966][ T8262] ? __pfx_smack_file_ioctl+0x10/0x10 [ 351.301003][ T8262] ? __fget_files+0x2a/0x420 [ 351.301030][ T8262] ? __fget_files+0x3a0/0x420 [ 351.301057][ T8262] ? __fget_files+0x2a/0x420 [ 351.301089][ T8262] ? bpf_lsm_file_ioctl+0x9/0x20 [ 351.301118][ T8262] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 351.301149][ T8262] __se_sys_ioctl+0xfc/0x170 [ 351.301190][ T8262] do_syscall_64+0xfa/0x3b0 [ 351.301220][ T8262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.301244][ T8262] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 351.301269][ T8262] ? clear_bhb_loop+0x60/0xb0 [ 351.301299][ T8262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.301329][ T8262] RIP: 0033:0x7fc17058ebe9 [ 351.301358][ T8262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.301379][ T8262] RSP: 002b:00007fc16df6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.301406][ T8262] RAX: ffffffffffffffda RBX: 00007fc1707b6360 RCX: 00007fc17058ebe9 [ 351.301425][ T8262] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 351.301441][ T8262] RBP: 00007fc170611e19 R08: 0000000000000000 R09: 0000000000000000 [ 351.301457][ T8262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.301473][ T8262] R13: 00007fc1707b63f8 R14: 00007fc1707b6360 R15: 00007fff95926e38 [ 351.301512][ T8262] [ 351.301525][ T8262] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 351.301542][ T8262] CPU: 1 UID: 0 PID: 8262 Comm: syz.4.606 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 351.301568][ T8262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.301582][ T8262] Call Trace: [ 351.301592][ T8262] [ 351.301602][ T8262] dump_stack_lvl+0x99/0x250 [ 351.301630][ T8262] ? __asan_memcpy+0x40/0x70 [ 351.301680][ T8262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.301707][ T8262] ? __pfx__printk+0x10/0x10 [ 351.301754][ T8262] panic+0x2db/0x790 [ 351.301787][ T8262] ? __pfx_panic+0x10/0x10 [ 351.301835][ T8262] __warn+0x31b/0x4b0 [ 351.301859][ T8262] ? folio_memcg+0x1a8/0x310 [ 351.301892][ T8262] ? folio_memcg+0x1a8/0x310 [ 351.301923][ T8262] report_bug+0x2be/0x4f0 [ 351.301945][ T8262] ? folio_memcg+0x1a8/0x310 [ 351.301976][ T8262] ? folio_memcg+0x1a8/0x310 [ 351.302006][ T8262] ? folio_memcg+0x1aa/0x310 [ 351.302036][ T8262] handle_bug+0x84/0x160 [ 351.302067][ T8262] exc_invalid_op+0x1a/0x50 [ 351.302096][ T8262] asm_exc_invalid_op+0x1a/0x20 [ 351.302118][ T8262] RIP: 0010:folio_memcg+0x1a8/0x310 [ 351.302148][ T8262] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 351.302167][ T8262] RSP: 0018:ffffc9000ff87250 EFLAGS: 00010287 [ 351.302188][ T8262] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 351.302204][ T8262] RDX: ffffc90013331000 RSI: 0000000000036f27 RDI: 0000000000036f28 [ 351.302221][ T8262] RBP: 0000000000000000 R08: ffffea000164df47 R09: 1ffffd40002c9be8 [ 351.302238][ T8262] R10: dffffc0000000000 R11: fffff940002c9be9 R12: ffffea000164df70 [ 351.302256][ T8262] R13: dffffc0000000000 R14: ffff8880322ac000 R15: 0000000000000002 [ 351.302283][ T8262] ? folio_memcg+0x1a7/0x310 [ 351.302327][ T8262] workingset_activation+0x5f/0x4a0 [ 351.302357][ T8262] ? folio_mark_accessed+0x361/0x4a0 [ 351.302398][ T8262] folio_mark_accessed+0x3b5/0x4a0 [ 351.302440][ T8262] kvm_release_page_clean+0x9a/0xe0 [ 351.302470][ T8262] kvm_tdp_page_fault+0x2dd/0x370 [ 351.302509][ T8262] kvm_mmu_do_page_fault+0x2c5/0x640 [ 351.302552][ T8262] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 351.302604][ T8262] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 351.302636][ T8262] kvm_mmu_page_fault+0x22f/0xb70 [ 351.302685][ T8262] ? __pfx_handle_ept_violation+0x10/0x10 [ 351.302718][ T8262] vmx_handle_exit+0x1090/0x18a0 [ 351.302745][ T8262] ? vcpu_run+0x361c/0x6f70 [ 351.302780][ T8262] ? preempt_schedule_thunk+0x16/0x30 [ 351.302824][ T8262] vcpu_run+0x432e/0x6f70 [ 351.302876][ T8262] ? vcpu_run+0x361c/0x6f70 [ 351.302960][ T8262] ? __pfx_vcpu_run+0x10/0x10 [ 351.302987][ T8262] ? irqentry_exit+0x74/0x90 [ 351.303012][ T8262] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.303061][ T8262] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 351.303105][ T8262] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 351.303136][ T8262] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 351.303173][ T8262] ? rcu_is_watching+0x15/0xb0 [ 351.303228][ T8262] ? register_lock_class+0x51/0x320 [ 351.303271][ T8262] ? preempt_schedule+0xae/0xc0 [ 351.303297][ T8262] ? preempt_schedule_common+0x83/0xd0 [ 351.303340][ T8262] ? preempt_schedule+0xae/0xc0 [ 351.303362][ T8262] ? __pfx_preempt_schedule+0x10/0x10 [ 351.303409][ T8262] kvm_vcpu_ioctl+0x95c/0xe90 [ 351.303447][ T8262] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 351.303473][ T8262] ? __lock_acquire+0xab9/0xd20 [ 351.303500][ T8262] ? __asan_memset+0x22/0x50 [ 351.303533][ T8262] ? smack_file_ioctl+0x302/0x340 [ 351.303560][ T8262] ? __pfx_smack_file_ioctl+0x10/0x10 [ 351.303596][ T8262] ? __fget_files+0x2a/0x420 [ 351.303621][ T8262] ? __fget_files+0x3a0/0x420 [ 351.303657][ T8262] ? __fget_files+0x2a/0x420 [ 351.303688][ T8262] ? bpf_lsm_file_ioctl+0x9/0x20 [ 351.303717][ T8262] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 351.303746][ T8262] __se_sys_ioctl+0xfc/0x170 [ 351.303785][ T8262] do_syscall_64+0xfa/0x3b0 [ 351.303813][ T8262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.303836][ T8262] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 351.303860][ T8262] ? clear_bhb_loop+0x60/0xb0 [ 351.303889][ T8262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.303913][ T8262] RIP: 0033:0x7fc17058ebe9 [ 351.303932][ T8262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.303952][ T8262] RSP: 002b:00007fc16df6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.303976][ T8262] RAX: ffffffffffffffda RBX: 00007fc1707b6360 RCX: 00007fc17058ebe9 [ 351.303993][ T8262] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 351.304008][ T8262] RBP: 00007fc170611e19 R08: 0000000000000000 R09: 0000000000000000 [ 351.304023][ T8262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.304037][ T8262] R13: 00007fc1707b63f8 R14: 00007fc1707b6360 R15: 00007fff95926e38 [ 351.304075][ T8262] [ 351.304288][ T8262] Kernel Offset: disabled