last executing test programs: 2m39.612064314s ago: executing program 3 (id=1585): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121140, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_pts(r4, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2m36.420940317s ago: executing program 3 (id=1600): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000540)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0xe99e}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000000000000290000000b000000ffffffff0001000010000000"], 0x30}}], 0x1, 0x0) 2m33.121445438s ago: executing program 3 (id=1612): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x78}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m32.890342899s ago: executing program 3 (id=1613): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 2m31.854352463s ago: executing program 3 (id=1616): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = dup2(r0, r0) write$P9_RMKDIR(r1, &(0x7f00000004c0)={0x14, 0x49, 0x1, {0x8, 0x1, 0x7}}, 0x14) 2m31.554385353s ago: executing program 3 (id=1618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shutdown(r1, 0x0) 2m16.371590838s ago: executing program 32 (id=1618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shutdown(r1, 0x0) 11.328887401s ago: executing program 0 (id=2175): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_clone3(&(0x7f00000005c0)={0x44000, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000380), {0x19}, &(0x7f0000000440)=""/121, 0x79, &(0x7f00000004c0)=""/249, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x396a) getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f00000002c0)={0x3f}) sendto$unix(r3, &(0x7f0000000180)="678684af11", 0x5, 0x800, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e21}, 0x6e) write$uinput_user_dev(r5, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) 8.558206567s ago: executing program 2 (id=2180): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1], 0x44}}, 0x0) 8.502196387s ago: executing program 4 (id=2181): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') setpgid(0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 8.47979526s ago: executing program 1 (id=2182): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x48000024, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r4}, 0x18) syz_emit_ethernet(0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="010000000000e600aaaaaa2386dd603000bb00082b00fc022100000000000000000000000000fe800000000000000000000000000000089078"], 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',']) r5 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x20000000) 8.315502494s ago: executing program 4 (id=2183): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4044844}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x16) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlink(&(0x7f0000000580)='./bus\x00') 8.250753812s ago: executing program 2 (id=2184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40081) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000480), 0x400034f, 0x2, 0x0) pread64(r4, &(0x7f0000000080)=""/75, 0x8e, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text32={0x20, &(0x7f00000001c0)="b8f40000000f23c00f21f835010006000f23f8f74ab800800000643e67670f01c90f20c035100000000f22c0c4c11df8f566b819008ee00f78e50f09b9bd0a0000b8c0000000ba000000000f30c744240005000000c744240200000000c7442406000000000f011c24", 0x69}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000340)={0x74, 0x0, 0x4c}) 7.249753988s ago: executing program 1 (id=2185): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000001380)=0x9) 5.942819574s ago: executing program 4 (id=2187): syz_usb_connect(0x5, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x310, 0x8a, 0xef, 0xdc, 0x20, 0x4e6, 0x6, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x12245aefcaf4f665, 0x5, [{{0x9, 0x4, 0xe1, 0x4b, 0x2, 0xdb, 0x71, 0x91, 0x7, [], [{{0x9, 0x5, 0x8, 0x2, 0x200, 0x2, 0x80, 0x8}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x6, 0x9, 0x1}}]}}]}}]}}, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}) 5.433901595s ago: executing program 1 (id=2188): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 5.43178693s ago: executing program 5 (id=2189): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r1, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4010) 3.847066445s ago: executing program 5 (id=2190): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) 3.694444954s ago: executing program 0 (id=2191): r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x707b, 0x0, 0xfffffffd, 0x28c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.076547225s ago: executing program 2 (id=2192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612cc792fbaa584a323461d64a706f72743d30322c00bb4fb37263ba48ac028276ec411a8846b389587dcb5a0bfdb07d359d06eb856928d1954d8290f349f265b4eaa6d2214c95880061444f043e2c18fbea8037aff4457244a6377800c3bf7798370000000000000000955e6556ad0b20a5a5ae0000"]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = syz_open_procfs(r2, &(0x7f00000003c0)='net/mcfilter6\x00') socket(0x2a, 0x3, 0x9) preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.075616748s ago: executing program 1 (id=2193): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') setpgid(0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 2.892905966s ago: executing program 5 (id=2194): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1], 0x44}}, 0x0) 2.700225235s ago: executing program 4 (id=2195): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x20000000) 2.067516585s ago: executing program 1 (id=2196): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}, [@RTA_TABLE={0x8, 0xf, 0x81}]}, 0x24}}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.origin\x00', &(0x7f0000000280)=""/105, 0x69) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x1000400, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000040)='coredump_filter\x00') write$cgroup_int(r5, &(0x7f0000000180), 0x12) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r9, 0x6b, 0x3, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) sendmsg$nl_netfilter(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108"], 0x2cc}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="3504000040000511d25a35400c0002000200002037153e371d04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000a40)="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", 0x3c7}], 0x2}, 0x10049014) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.974767877s ago: executing program 2 (id=2197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000011000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.974232454s ago: executing program 0 (id=2198): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) 1.958282961s ago: executing program 4 (id=2199): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x891d, &(0x7f0000000080)={'veth0_vlan\x00', @ifru_flags=0x1000}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000640)={0x0, 0xd, 0x5, "1bff000000000000088b05000000000000000000000300", 0x32314d48}) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x402) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f00000000c0)) r5 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x0, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000103}) io_uring_enter(r5, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r8, &(0x7f0000000200)='~', 0x1) 1.819998476s ago: executing program 5 (id=2200): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r1, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4010) 1.819810175s ago: executing program 0 (id=2201): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000840000000000000000000003030004001800"], 0x30, 0x4800}], 0x1, 0x24004044) 896.612056ms ago: executing program 5 (id=2202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x38, 0x0, 0x0) 864.6115ms ago: executing program 0 (id=2203): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6624, @broadcast}, 0x10) 816.770855ms ago: executing program 4 (id=2204): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) epoll_create(0x10000e9) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xb82c, 0x80, 0xffffffff, 0x0, 0x0, r3}, 0x0, &(0x7f0000000280)) 710.4752ms ago: executing program 2 (id=2205): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) shutdown(r0, 0x0) recvfrom(r0, &(0x7f0000000240)=""/225, 0xe1, 0x40000120, 0x0, 0x0) 684.142505ms ago: executing program 1 (id=2206): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 677.419762ms ago: executing program 0 (id=2207): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet(0x2, 0x80001, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 37.796461ms ago: executing program 5 (id=2208): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0x4000000000042) 0s ago: executing program 2 (id=2209): r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x707b, 0x0, 0xfffffffd, 0x28c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.312997][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.330857][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.352035][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.375706][ T6888] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.392757][ T6888] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.423339][ T6888] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.433128][ T6888] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.443567][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 179.483189][ T5871] usb 1-1: config index 0 descriptor too short (expected 5138, got 18) [ 179.504006][ T5871] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.523811][ T5871] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 179.594681][ T5871] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 179.651042][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.673095][ T5871] usb 1-1: Product: syz [ 179.677312][ T5871] usb 1-1: Manufacturer: syz [ 179.681920][ T5871] usb 1-1: SerialNumber: syz [ 179.692629][ T5931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.707886][ T5931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.733387][ T5871] usb 1-1: config 0 descriptor?? [ 179.791373][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.835126][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.863727][ T5820] Bluetooth: hci4: command 0x0419 tx timeout [ 179.904168][ T5820] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 179.958387][ T5829] usb 1-1: USB disconnect, device number 6 [ 180.484293][ T7196] nft_compat: unsupported protocol 1 [ 180.675846][ T5820] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 180.737338][ T7195] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 180.780287][ T7195] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 180.820863][ T7195] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 180.854636][ T7195] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 180.886771][ T7195] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 180.903232][ T7195] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 180.943414][ T5820] Bluetooth: hci4: unexpected event 0x03 length: 17 > 11 [ 180.959532][ T7195] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 180.973944][ T7195] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 180.993181][ T5902] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 181.015451][ T7195] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 181.021394][ T7195] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 181.180577][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 181.196166][ T5902] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 181.233327][ T5902] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 181.271212][ T5902] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 181.315605][ T5902] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 181.367869][ T5902] usb 4-1: config 0 interface 0 has no altsetting 0 [ 181.394247][ T5902] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 181.413428][ T5902] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 181.428977][ T5902] usb 4-1: Product: syz [ 181.438066][ T5902] usb 4-1: Manufacturer: syz [ 181.450795][ T5902] usb 4-1: SerialNumber: syz [ 181.485908][ T5902] usb 4-1: config 0 descriptor?? [ 181.506448][ T5902] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 181.538838][ T5902] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 181.732587][ T5902] usb 4-1: USB disconnect, device number 7 [ 181.738584][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 181.776744][ T5902] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 185.178483][ T5902] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 185.363127][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 185.369977][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 185.409427][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 185.446195][ T5902] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 185.476783][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.497706][ T5902] usb 3-1: config 0 descriptor?? [ 185.515897][ T7318] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 185.539736][ T7345] netlink: 216 bytes leftover after parsing attributes in process `syz.1.452'. [ 185.559901][ T5902] hub 3-1:0.0: USB hub found [ 185.717559][ T7349] IPv6: NLM_F_REPLACE set, but no existing node found! [ 185.749092][ T5902] hub 3-1:0.0: 2 ports detected [ 185.750918][ T7352] kvm: emulating exchange as write [ 185.952467][ T5902] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 185.971217][ T5902] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 185.998574][ T5902] usbhid 3-1:0.0: can't add hid device: -71 [ 186.008513][ T5902] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 186.065185][ T5902] usb 3-1: USB disconnect, device number 10 [ 186.143150][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 186.143166][ T29] audit: type=1326 audit(1739293646.504:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7360 comm="syz.0.459" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce7178cde9 code=0x0 [ 186.257632][ T7371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.463'. [ 186.623248][ T5902] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 186.643937][ T5870] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 186.785082][ T5902] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 186.800697][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.813365][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 186.819625][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.832080][ T5870] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 186.840889][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 186.852860][ T5870] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 186.864263][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 186.891832][ T5870] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 186.903434][ T5870] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 186.916782][ T5902] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.925939][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.936207][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 186.965244][ T5902] usb 4-1: config 0 descriptor?? [ 186.970969][ T7376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 186.991821][ T5870] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 187.003831][ T5870] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 187.012962][ T5870] usb 5-1: Product: syz [ 187.017401][ T5870] usb 5-1: Manufacturer: syz [ 187.022113][ T5870] usb 5-1: SerialNumber: syz [ 187.027997][ T7399] netlink: 277 bytes leftover after parsing attributes in process `syz.2.477'. [ 187.039595][ T5870] usb 5-1: config 0 descriptor?? [ 187.048369][ T5870] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 187.064713][ T5870] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 187.254277][ T5869] usb 5-1: USB disconnect, device number 7 [ 187.260183][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 187.271374][ T5869] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 187.428696][ T5902] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 187.449872][ T5902] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 187.498871][ T5902] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 187.683446][ T5909] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 187.760714][ T5902] usb 4-1: USB disconnect, device number 8 [ 187.863241][ T5909] usb 1-1: Using ep0 maxpacket: 8 [ 187.875234][ T5909] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.894028][ T5909] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 187.914449][ T5909] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 187.941561][ T5909] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 187.977674][ T5909] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.005731][ T5909] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 188.092691][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.343602][ T5909] usb 1-1: GET_CAPABILITIES returned 0 [ 188.360347][ T5909] usbtmc 1-1:16.0: can't read capabilities [ 188.557409][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 188.570146][ T5869] usb 1-1: USB disconnect, device number 7 [ 189.048810][ T7457] netlink: 44 bytes leftover after parsing attributes in process `syz.2.504'. [ 189.114101][ T5869] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 190.169159][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 190.178294][ T5869] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 190.192325][ T5869] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 190.212113][ T5869] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 190.255478][ T5869] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 190.268921][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 190.296237][ T5869] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 190.303344][ T5871] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 190.341849][ T5869] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 190.361398][ T5869] usb 2-1: Product: syz [ 190.367708][ T5869] usb 2-1: Manufacturer: syz [ 190.372475][ T5869] usb 2-1: SerialNumber: syz [ 190.415608][ T5869] usb 2-1: config 0 descriptor?? [ 190.455754][ T5869] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 190.487004][ T5869] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 190.513369][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 190.685162][ T5871] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.686002][ T5869] usb 2-1: USB disconnect, device number 7 [ 190.695779][ T5871] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 190.710777][ T5871] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 190.722126][ T5871] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 190.728867][ T5869] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 190.734271][ T5871] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 190.763722][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.803280][ T5829] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 191.003632][ T5829] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 191.024388][ T5871] hub 5-1:1.0: bad descriptor, ignoring hub [ 191.113027][ T5871] hub 5-1:1.0: probe with driver hub failed with error -5 [ 191.147893][ T5829] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 191.269105][ T5871] cdc_wdm 5-1:1.0: skipping garbage [ 191.319898][ T5829] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 191.438747][ T5871] cdc_wdm 5-1:1.0: skipping garbage [ 191.444267][ T5829] usb 1-1: config 250 has no interface number 0 [ 191.450564][ T5829] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 64 [ 191.463600][ T5829] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 191.483259][ T5871] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 191.489244][ T5871] cdc_wdm 5-1:1.0: Unknown control protocol [ 191.505703][ T5829] usb 1-1: config 250 interface 228 has no altsetting 0 [ 191.514650][ T5871] usb 5-1: USB disconnect, device number 8 [ 191.526223][ T5829] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 191.559051][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 191.580499][ T5829] usb 1-1: Product: syz [ 191.601062][ T5829] usb 1-1: SerialNumber: syz [ 191.648674][ T5829] hub 1-1:250.228: bad descriptor, ignoring hub [ 191.659180][ T5829] hub 1-1:250.228: probe with driver hub failed with error -5 [ 191.860835][ T5829] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 192.043850][ T5871] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 192.180750][ C0] usblp0: nonzero read bulk status received: -71 [ 192.215324][ T5829] usb 1-1: USB disconnect, device number 8 [ 192.243675][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 192.255692][ T5829] usblp0: removed [ 192.267181][ T5871] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.300129][ T5871] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 192.336916][ T5871] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.371128][ T5871] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 192.396008][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.434153][ T5871] hub 5-1:1.0: bad descriptor, ignoring hub [ 192.441774][ T5871] hub 5-1:1.0: probe with driver hub failed with error -5 [ 192.450823][ T5871] cdc_wdm 5-1:1.0: skipping garbage [ 192.462060][ T5871] cdc_wdm 5-1:1.0: skipping garbage [ 192.470026][ T5871] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 192.766271][ T5870] usb 5-1: USB disconnect, device number 9 [ 192.819653][ T5909] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 192.998284][ T7527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.543162][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 193.583669][ T5909] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 193.592017][ T5909] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 193.672785][ T5909] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 193.717411][ T5909] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 193.789577][ T5909] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.818348][ T5909] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 193.833260][ T5909] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 193.878730][ T5909] usb 4-1: Product: syz [ 193.885581][ T5909] usb 4-1: Manufacturer: syz [ 193.902027][ T5909] usb 4-1: SerialNumber: syz [ 193.917780][ T5909] usb 4-1: config 0 descriptor?? [ 193.940326][ T5909] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 193.962923][ T5909] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 194.154333][ T5909] usb 4-1: USB disconnect, device number 9 [ 194.171041][ T5909] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 194.511172][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.520908][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.190271][ T7632] batman_adv: batadv0: Interface deactivated: dummy0 [ 196.216809][ T7632] batman_adv: batadv0: Removing interface: dummy0 [ 196.291397][ T7632] bridge0: port 1(vlan2) entered disabled state [ 196.650784][ T7647] netlink: 'syz.2.576': attribute type 7 has an invalid length. [ 196.693732][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'. [ 197.113994][ T7658] process 'syz.2.581' launched '/dev/fd/5' with NULL argv: empty string added [ 197.402430][ T7668] bridge_slave_0: left allmulticast mode [ 197.408318][ T7668] bridge_slave_0: left promiscuous mode [ 197.432636][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.475480][ T7668] bridge_slave_1: left allmulticast mode [ 197.483820][ T7668] bridge_slave_1: left promiscuous mode [ 197.489571][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.543684][ T7668] bond0: (slave bond_slave_0): Releasing backup interface [ 197.596158][ T7668] bond0: (slave bond_slave_1): Releasing backup interface [ 197.639608][ T7668] team0: Port device team_slave_0 removed [ 197.682516][ T7668] team0: Port device team_slave_1 removed [ 197.711295][ T7668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.719887][ T7668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.747194][ T7668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.780398][ T7668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.878337][ T7673] vlan0: entered allmulticast mode [ 197.903510][ T7673] bond0: entered allmulticast mode [ 197.914057][ T7673] bridge0: port 1(vlan0) entered blocking state [ 197.958359][ T7673] bridge0: port 1(vlan0) entered disabled state [ 197.988032][ T7673] vlan0: entered promiscuous mode [ 198.002238][ T7673] bond0: entered promiscuous mode [ 198.263518][ T7703] capability: warning: `syz.4.600' uses 32-bit capabilities (legacy support in use) [ 199.786089][ T7765] bridge_slave_0: left allmulticast mode [ 199.802057][ T7765] bridge_slave_0: left promiscuous mode [ 199.821410][ T7765] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.876330][ T7765] bridge_slave_1: left allmulticast mode [ 199.896758][ T7765] bridge_slave_1: left promiscuous mode [ 199.910232][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.025827][ T7765] bond0: (slave bond_slave_0): Releasing backup interface [ 200.071910][ T7765] bond0: (slave bond_slave_1): Releasing backup interface [ 200.199533][ T7765] team0: Port device team_slave_0 removed [ 200.263401][ T7765] team0: Port device team_slave_1 removed [ 200.293931][ T7765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.312009][ T7765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.352630][ T7765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.413862][ T7765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.481988][ T7769] vlan2: entered allmulticast mode [ 200.528965][ T7769] bond0: entered allmulticast mode [ 200.545853][ T7769] bridge0: port 1(vlan2) entered blocking state [ 200.569377][ T7769] bridge0: port 1(vlan2) entered disabled state [ 200.608619][ T7769] vlan2: entered promiscuous mode [ 200.635775][ T7769] bond0: entered promiscuous mode [ 201.277765][ T5829] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 201.468299][ T5829] usb 2-1: Using ep0 maxpacket: 8 [ 201.482324][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.515114][ T5829] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 201.539317][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.594539][ T5829] usb 2-1: config 0 descriptor?? [ 202.903282][ T5869] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 203.011372][ T7837] input: syz1 as /devices/virtual/input/input18 [ 203.074847][ T5869] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 203.091936][ T5869] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 203.122422][ T5869] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 203.138955][ T5869] usb 4-1: config 250 has no interface number 0 [ 203.147253][ T5869] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 64 [ 203.168346][ T5869] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 203.189635][ T5869] usb 4-1: config 250 interface 228 has no altsetting 0 [ 203.199865][ T5869] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 203.247792][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 203.261059][ T5869] usb 4-1: Product: syz [ 203.277797][ T5869] usb 4-1: SerialNumber: syz [ 203.309088][ T5869] hub 4-1:250.228: bad descriptor, ignoring hub [ 203.327084][ T5869] hub 4-1:250.228: probe with driver hub failed with error -5 [ 203.517831][ T5869] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 203.541928][ T29] audit: type=1326 audit(1739293663.914:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.0.659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce7178cde9 code=0x0 [ 203.564985][ T5869] usb 4-1: USB disconnect, device number 10 [ 203.589856][ T5869] usblp0: removed [ 204.090786][ T5829] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 204.114582][ T5829] usb 2-1: USB disconnect, device number 8 [ 204.933428][ T5829] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 205.133334][ T5829] usb 4-1: Using ep0 maxpacket: 8 [ 205.244545][ T5829] usb 4-1: config 0 has no interfaces? [ 205.325520][ T5829] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 205.480752][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.636388][ T5829] usb 4-1: Product: syz [ 205.661157][ T5829] usb 4-1: Manufacturer: syz [ 205.678380][ T5829] usb 4-1: SerialNumber: syz [ 205.731920][ T5829] usb 4-1: config 0 descriptor?? [ 205.968707][ T25] usb 4-1: USB disconnect, device number 11 [ 206.007240][ T7883] syz.1.671 (7883): drop_caches: 2 [ 206.355466][ T7913] netlink: 76 bytes leftover after parsing attributes in process `syz.4.681'. [ 206.773873][ T7933] input: syz1 as /devices/virtual/input/input19 [ 207.640810][ T7940] syz.4.692 (7940): drop_caches: 2 [ 207.965639][ T29] audit: type=1326 audit(1739293668.324:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7941 comm="syz.1.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc918cde9 code=0x7fc00000 [ 208.016406][ T7953] netlink: 20 bytes leftover after parsing attributes in process `syz.2.700'. [ 208.030831][ T7953] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.040242][ T7953] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.049063][ T7953] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.057831][ T7953] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.888976][ T7974] loop7: detected capacity change from 0 to 16384 [ 209.090982][ T7978] syz.1.709 (7978): drop_caches: 2 [ 209.123476][ T7979] loop7: detected capacity change from 16384 to 16383 [ 209.167807][ T7974] blk_print_req_error: 24 callbacks suppressed [ 209.167827][ T7974] I/O error, dev loop7, sector 1800 op 0x0:(READ) flags 0x80700 phys_seg 9 prio class 0 [ 209.234497][ T7974] I/O error, dev loop7, sector 1800 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.243439][ T7979] I/O error, dev loop7, sector 128 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 209.273199][ T7979] buffer_io_error: 24 callbacks suppressed [ 209.273219][ T7979] Buffer I/O error on dev loop7, logical block 16, lost async page write [ 209.298006][ T7974] Buffer I/O error on dev loop7, logical block 225, async page read [ 209.325140][ T7974] I/O error, dev loop7, sector 1800 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.353350][ T7974] Buffer I/O error on dev loop7, logical block 225, async page read [ 209.382957][ T7974] I/O error, dev loop7, sector 1800 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.399750][ T7979] Buffer I/O error on dev loop7, logical block 17, lost async page write [ 209.422382][ T7974] Buffer I/O error on dev loop7, logical block 225, async page read [ 209.443182][ T7979] Buffer I/O error on dev loop7, logical block 18, lost async page write [ 209.462162][ T7979] Buffer I/O error on dev loop7, logical block 19, lost async page write [ 209.533255][ T7979] Buffer I/O error on dev loop7, logical block 20, lost async page write [ 209.541812][ T7979] Buffer I/O error on dev loop7, logical block 21, lost async page write [ 209.619783][ T7979] Buffer I/O error on dev loop7, logical block 22, lost async page write [ 209.671098][ T7979] I/O error, dev loop7, sector 1152 op 0x1:(WRITE) flags 0x800 phys_seg 48 prio class 0 [ 209.770798][ T7979] I/O error, dev loop7, sector 1536 op 0x1:(WRITE) flags 0x800 phys_seg 33 prio class 0 [ 210.765849][ T8019] syz.4.723 (8019): drop_caches: 2 [ 211.738741][ T29] audit: type=1326 audit(1739293672.114:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8055 comm="syz.0.738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce7178cde9 code=0x0 [ 211.785154][ T8053] syz.1.736 (8053): drop_caches: 2 [ 212.357899][ T8075] xt_hashlimit: size too large, truncated to 1048576 [ 213.769052][ T8096] syz.3.750 (8096): drop_caches: 2 [ 214.137935][ T29] audit: type=1326 audit(1739293674.514:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8113 comm="syz.4.758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f641298cde9 code=0x0 [ 216.200292][ T8161] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 1, id = 0 [ 216.623965][ T8176] batman_adv: batadv0: Interface deactivated: dummy0 [ 216.643374][ T8176] batman_adv: batadv0: Removing interface: dummy0 [ 216.689168][ T8176] bridge_slave_0: left allmulticast mode [ 216.710324][ T8176] bridge_slave_0: left promiscuous mode [ 216.717948][ T8176] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.761662][ T8176] bridge_slave_1: left allmulticast mode [ 216.789237][ T8176] bridge_slave_1: left promiscuous mode [ 216.822750][ T8176] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.846864][ T8176] bond0: (slave bond_slave_0): Releasing backup interface [ 216.887685][ T8176] bond_slave_0: left allmulticast mode [ 216.908102][ T8176] bond0: (slave bond_slave_1): Releasing backup interface [ 216.929945][ T8176] bond_slave_1: left allmulticast mode [ 216.977525][ T8176] team0: Port device team_slave_0 removed [ 217.012081][ T8176] team0: Port device team_slave_1 removed [ 217.036293][ T8176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.056170][ T8176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.070678][ T8176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.081753][ T8176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.508712][ T8218] fuse: Bad value for 'fd' [ 219.584835][ T8254] mmap: syz.3.808 (8254) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 220.284895][ T8278] bridge0: port 2(gretap0) entered blocking state [ 220.292745][ T8278] bridge0: port 2(gretap0) entered disabled state [ 220.395215][ T8278] gretap0: entered allmulticast mode [ 220.412345][ T8278] gretap0: entered promiscuous mode [ 220.449682][ T8278] bridge0: port 2(gretap0) entered blocking state [ 220.456744][ T8278] bridge0: port 2(gretap0) entered forwarding state [ 220.660638][ T8281] wireguard0: entered promiscuous mode [ 220.733314][ T8281] wireguard0: entered allmulticast mode [ 220.837346][ T8287] gretap0: left allmulticast mode [ 220.874545][ T8287] gretap0: left promiscuous mode [ 220.893580][ T8287] bridge0: port 2(gretap0) entered disabled state [ 220.960179][ T8292] bridge: RTM_NEWNEIGH with invalid ether address [ 222.324661][ T8335] netlink: 'syz.4.836': attribute type 7 has an invalid length. [ 222.367860][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 223.313247][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 223.463482][ T25] usb 3-1: device descriptor read/64, error -71 [ 223.705014][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 223.843578][ T25] usb 3-1: device descriptor read/64, error -71 [ 223.976236][ T25] usb usb3-port1: attempt power cycle [ 224.008573][ T8393] veth3: entered allmulticast mode [ 224.201553][ T29] audit: type=1326 audit(1739293684.574:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8399 comm="syz.4.865" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f641298cde9 code=0x0 [ 224.255028][ T29] audit: type=1326 audit(1739293684.634:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8404 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf3b8cde9 code=0x7ffc0000 [ 224.276403][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.289324][ T29] audit: type=1326 audit(1739293684.634:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8404 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf3b8cde9 code=0x7ffc0000 [ 224.310703][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.319184][ T29] audit: type=1326 audit(1739293684.654:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8404 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4bf3b8cde9 code=0x7ffc0000 [ 224.333522][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 224.340483][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.342557][ T29] audit: type=1326 audit(1739293684.654:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8404 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf3b8cde9 code=0x7ffc0000 [ 224.376086][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.389124][ T25] usb 3-1: device descriptor read/8, error -71 [ 224.402896][ T29] audit: type=1326 audit(1739293684.664:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8404 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4bf3b8cde9 code=0x7ffc0000 [ 224.424244][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.466848][ T29] audit: type=1326 audit(1739293684.664:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8404 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf3b8cde9 code=0x7ffc0000 [ 224.496701][ T29] audit: type=1326 audit(1739293684.664:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8404 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf3b8cde9 code=0x7ffc0000 [ 224.551143][ T29] audit: type=1326 audit(1739293684.684:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8404 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4bf3b8cde9 code=0x7ffc0000 [ 224.604582][ T29] audit: type=1326 audit(1739293684.684:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8404 comm="syz.3.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf3b8cde9 code=0x7ffc0000 [ 224.625999][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.664073][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 224.694313][ T25] usb 3-1: device descriptor read/8, error -71 [ 224.807515][ T25] usb usb3-port1: unable to enumerate USB device [ 227.433985][ T8513] netlink: 165 bytes leftover after parsing attributes in process `syz.3.894'. [ 227.464420][ T8513] netlink: 277 bytes leftover after parsing attributes in process `syz.3.894'. [ 228.038743][ T8533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.902'. [ 228.082140][ T8533] netlink: 20 bytes leftover after parsing attributes in process `syz.0.902'. [ 228.148558][ T25] IPVS: starting estimator thread 0... [ 228.185965][ T8533] geneve2: entered allmulticast mode [ 228.193425][ T57] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 228.229095][ T8540] pimreg: entered allmulticast mode [ 228.263298][ T8537] IPVS: using max 22 ests per chain, 52800 per kthread [ 228.324145][ T57] usb 5-1: device descriptor read/64, error -71 [ 228.431411][ T8544] pimreg: left allmulticast mode [ 228.574751][ T57] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 228.615565][ T8549] fuse: Bad value for 'fd' [ 228.728472][ T57] usb 5-1: device descriptor read/64, error -71 [ 228.740507][ T8552] bridge0: entered allmulticast mode [ 228.758036][ T8552] bridge0: entered promiscuous mode [ 228.864955][ T57] usb usb5-port1: attempt power cycle [ 229.223402][ T57] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 229.265915][ T57] usb 5-1: device descriptor read/8, error -71 [ 229.425883][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 229.425928][ T29] audit: type=1326 audit(1739293689.804:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8574 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc918cde9 code=0x7fc00000 [ 229.515741][ T29] audit: type=1326 audit(1739293689.874:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8574 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc918cde9 code=0x7fc00000 [ 229.537398][ T57] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 229.583224][ T57] usb 5-1: device descriptor read/8, error -71 [ 229.714673][ T57] usb usb5-port1: unable to enumerate USB device [ 230.022600][ T8600] veth0_to_team: entered promiscuous mode [ 230.031869][ T8600] veth0_to_team: entered allmulticast mode [ 230.249204][ T8610] fuse: Unknown parameter '0x0000000000000007' [ 230.553172][ T57] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 230.705959][ T57] usb 3-1: device descriptor read/64, error -71 [ 230.905497][ T35] net_ratelimit: 30 callbacks suppressed [ 230.905520][ T35] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 230.985633][ T57] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 231.133188][ T57] usb 3-1: device descriptor read/64, error -71 [ 231.243449][ T57] usb usb3-port1: attempt power cycle [ 231.331226][ T8632] geneve0: entered allmulticast mode [ 231.433027][ T8638] smb3: Unknown parameter 'ie' [ 231.614180][ T57] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 231.626866][ T8463] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 231.639309][ T8648] netlink: 'syz.0.949': attribute type 16 has an invalid length. [ 231.653295][ T8648] netlink: 'syz.0.949': attribute type 17 has an invalid length. [ 231.661352][ T57] usb 3-1: device descriptor read/8, error -71 [ 231.677649][ T8648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.773369][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 231.923856][ T25] usb 4-1: device descriptor read/64, error -71 [ 231.930520][ T57] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 231.945646][ T57] usb 3-1: device descriptor read/8, error -71 [ 231.983278][ T5870] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 232.000603][ T8663] netlink: 165 bytes leftover after parsing attributes in process `syz.0.955'. [ 232.010203][ T8663] netlink: 277 bytes leftover after parsing attributes in process `syz.0.955'. [ 232.066524][ T57] usb usb3-port1: unable to enumerate USB device [ 232.124645][ T5870] usb 5-1: device descriptor read/64, error -71 [ 232.183345][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 232.313236][ T25] usb 4-1: device descriptor read/64, error -71 [ 232.364124][ T5870] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 232.424212][ T25] usb usb4-port1: attempt power cycle [ 232.505373][ T5870] usb 5-1: device descriptor read/64, error -71 [ 232.633402][ T5870] usb usb5-port1: attempt power cycle [ 232.773551][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 232.803963][ T25] usb 4-1: device descriptor read/8, error -71 [ 232.983219][ T5870] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 233.024887][ T5870] usb 5-1: device descriptor read/8, error -71 [ 233.043854][ T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 233.079442][ T25] usb 4-1: device descriptor read/8, error -71 [ 233.193580][ T25] usb usb4-port1: unable to enumerate USB device [ 233.273274][ T5870] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 233.305020][ T5870] usb 5-1: device descriptor read/8, error -71 [ 233.413660][ T5870] usb usb5-port1: unable to enumerate USB device [ 236.136949][ T5957] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 236.748648][ T80] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 236.823190][ T5871] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 236.844002][ T8818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1020'. [ 236.886857][ T8819] netlink: 'syz.0.1015': attribute type 4 has an invalid length. [ 236.944673][ T8820] netlink: 'syz.0.1015': attribute type 4 has an invalid length. [ 236.983194][ T57] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 236.991071][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 237.007454][ T5871] usb 3-1: no configurations [ 237.065880][ T5871] usb 3-1: can't read configurations, error -22 [ 237.153485][ T57] usb 4-1: device descriptor read/64, error -71 [ 237.381101][ T5871] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 237.523778][ T57] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 237.617648][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 237.629664][ T5871] usb 3-1: no configurations [ 237.660124][ T5871] usb 3-1: can't read configurations, error -22 [ 237.675827][ T5871] usb usb3-port1: attempt power cycle [ 237.693686][ T57] usb 4-1: device descriptor read/64, error -71 [ 237.814931][ T57] usb usb4-port1: attempt power cycle [ 238.033169][ T5871] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 238.063879][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 238.075521][ T5871] usb 3-1: no configurations [ 238.080158][ T5871] usb 3-1: can't read configurations, error -22 [ 238.183264][ T57] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 238.213594][ T57] usb 4-1: device descriptor read/8, error -71 [ 238.233275][ T5871] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 238.274804][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 238.283357][ T5871] usb 3-1: no configurations [ 238.290635][ T5871] usb 3-1: can't read configurations, error -22 [ 238.306885][ T5871] usb usb3-port1: unable to enumerate USB device [ 238.468458][ T29] audit: type=1326 audit(1739293698.844:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc918cde9 code=0x7ffc0000 [ 238.835472][ T29] audit: type=1326 audit(1739293698.844:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8853 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc918cde9 code=0x7ffc0000 [ 239.373168][ T57] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 239.394871][ T57] usb 4-1: device descriptor read/8, error -71 [ 239.945234][ T57] usb usb4-port1: unable to enumerate USB device [ 240.313269][ T57] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 240.463360][ T57] usb 4-1: device descriptor read/64, error -71 [ 240.723460][ T57] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 240.893169][ T57] usb 4-1: device descriptor read/64, error -71 [ 241.008933][ T57] usb usb4-port1: attempt power cycle [ 241.323240][ T29] audit: type=1326 audit(1739293701.694:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8899 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7178cde9 code=0x7ffc0000 [ 241.344742][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.373450][ T57] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 241.419151][ T29] audit: type=1326 audit(1739293701.694:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8899 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7178cde9 code=0x7ffc0000 [ 241.469987][ T29] audit: type=1326 audit(1739293701.744:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8899 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce7178cde9 code=0x7ffc0000 [ 241.473150][ T57] usb 4-1: device descriptor read/8, error -71 [ 241.491416][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.527892][ T29] audit: type=1326 audit(1739293701.744:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8899 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7178cde9 code=0x7ffc0000 [ 241.570473][ T29] audit: type=1326 audit(1739293701.744:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8899 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fce7178cde9 code=0x7ffc0000 [ 241.622641][ T29] audit: type=1326 audit(1739293701.744:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8899 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7178cde9 code=0x7ffc0000 [ 241.693189][ T29] audit: type=1326 audit(1739293701.744:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8899 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fce7178cde9 code=0x7ffc0000 [ 241.733217][ T29] audit: type=1326 audit(1739293701.744:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8899 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7178cde9 code=0x7ffc0000 [ 241.864051][ T57] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 241.875627][ T80] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 241.931930][ T57] usb 4-1: device descriptor read/8, error -71 [ 242.052569][ T57] usb usb4-port1: unable to enumerate USB device [ 242.540893][ T8909] xt_bpf: check failed: parse error [ 243.021360][ T57] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 243.233583][ T12] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 243.443300][ T57] usb 5-1: Using ep0 maxpacket: 32 [ 243.464553][ T57] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 243.507235][ T57] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.553370][ T57] usb 5-1: config 0 has no interfaces? [ 243.594436][ T57] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 243.635040][ T57] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 243.675787][ T57] usb 5-1: Product: syz [ 243.700589][ T57] usb 5-1: Manufacturer: syz [ 243.731958][ T57] usb 5-1: SerialNumber: syz [ 243.740112][ T5871] IPVS: starting estimator thread 0... [ 243.767049][ T57] usb 5-1: config 0 descriptor?? [ 243.863320][ T8929] IPVS: using max 25 ests per chain, 60000 per kthread [ 244.005602][ T5871] usb 5-1: USB disconnect, device number 18 [ 245.484367][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1064'. [ 245.526213][ T8949] vlan0: left promiscuous mode [ 245.531038][ T8949] bond0: left promiscuous mode [ 245.550577][ T8949] bridge0: port 1(vlan0) entered disabled state [ 245.663323][ T5871] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 245.958559][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1067'. [ 246.483751][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 246.492208][ T5871] usb 4-1: no configurations [ 246.500505][ T5871] usb 4-1: can't read configurations, error -22 [ 246.687416][ T5871] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 246.873277][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 246.879923][ T5871] usb 4-1: no configurations [ 246.913176][ T5871] usb 4-1: can't read configurations, error -22 [ 246.921949][ T5871] usb usb4-port1: attempt power cycle [ 247.676404][ T11] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 247.686121][ T29] audit: type=1326 audit(1739293707.894:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7178cde9 code=0x7ffc0000 [ 247.875603][ T29] audit: type=1326 audit(1739293707.894:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7178cde9 code=0x7ffc0000 [ 247.896627][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.010918][ T29] audit: type=1326 audit(1739293707.894:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fce7178cde9 code=0x7ffc0000 [ 248.092934][ T29] audit: type=1326 audit(1739293707.894:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7178cde9 code=0x7ffc0000 [ 248.187455][ T29] audit: type=1326 audit(1739293707.894:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7178cde9 code=0x7ffc0000 [ 248.246801][ T29] audit: type=1326 audit(1739293707.894:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fce7178cde9 code=0x7ffc0000 [ 248.268962][ T29] audit: type=1326 audit(1739293707.894:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7178cde9 code=0x7ffc0000 [ 248.290878][ T29] audit: type=1326 audit(1739293707.894:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7178cde9 code=0x7ffc0000 [ 248.312898][ T5871] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 248.321753][ T29] audit: type=1326 audit(1739293707.894:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fce7178cde9 code=0x7ffc0000 [ 248.351124][ T29] audit: type=1326 audit(1739293707.894:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7178cde9 code=0x7ffc0000 [ 248.383198][ T57] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 248.392226][ T5871] usb 4-1: device descriptor read/8, error -71 [ 248.583382][ T57] usb 5-1: Using ep0 maxpacket: 32 [ 248.590163][ T57] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 248.613206][ T57] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.643969][ T57] usb 5-1: config 0 has no interfaces? [ 248.676396][ T57] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 248.696456][ T57] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 248.720080][ T57] usb 5-1: Product: syz [ 248.743125][ T57] usb 5-1: Manufacturer: syz [ 248.747763][ T57] usb 5-1: SerialNumber: syz [ 248.769165][ T57] usb 5-1: config 0 descriptor?? [ 248.914174][ T11] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 249.018441][ T5829] usb 5-1: USB disconnect, device number 19 [ 250.864320][ T5871] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 251.793177][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 251.810765][ T5871] usb 4-1: unable to get BOS descriptor or descriptor too short [ 251.823153][ T5871] usb 4-1: config 1 has an invalid interface number: 5 but max is 0 [ 251.860644][ T5871] usb 4-1: config 1 has no interface number 0 [ 251.913155][ T5871] usb 4-1: config 1 interface 5 has no altsetting 0 [ 251.945712][ T5871] usb 4-1: New USB device found, idVendor=0403, idProduct=e050, bcdDevice=a2.6c [ 251.973587][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.005416][ T5871] usb 4-1: Product: syz [ 252.009629][ T5871] usb 4-1: Manufacturer: syz [ 252.022584][ T5871] usb 4-1: SerialNumber: syz [ 252.524886][ T5829] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 252.871860][ T5829] usb 2-1: Using ep0 maxpacket: 32 [ 253.504259][ T5829] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 253.522401][ T5829] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.545442][ T5829] usb 2-1: config 0 has no interfaces? [ 253.554657][ T5829] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 253.565078][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1097'. [ 253.574409][ T5829] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 253.583648][ T9042] bridge_slave_1: left allmulticast mode [ 253.589614][ T5829] usb 2-1: Product: syz [ 253.594445][ T9042] bridge_slave_1: left promiscuous mode [ 253.600319][ T5829] usb 2-1: Manufacturer: syz [ 253.605534][ T5829] usb 2-1: SerialNumber: syz [ 253.610698][ T9042] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.622870][ T5829] usb 2-1: config 0 descriptor?? [ 253.631685][ T9042] bridge_slave_0: left allmulticast mode [ 253.638454][ T9042] bridge_slave_0: left promiscuous mode [ 253.647643][ T9042] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.684084][ T11] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 253.881736][ T5829] usb 2-1: USB disconnect, device number 9 [ 254.624310][ T5871] ftdi_sio 4-1:1.5: FTDI USB Serial Device converter detected [ 254.674467][ T5883] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 254.710630][ T5871] ftdi_sio ttyUSB0: unknown device type: 0xa26c [ 254.743402][ T5871] usb 4-1: USB disconnect, device number 28 [ 254.750760][ T5871] ftdi_sio 4-1:1.5: device disconnected [ 254.843851][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 254.843868][ T29] audit: type=1326 audit(1739293715.224:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9056 comm="syz.0.1103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce7178cde9 code=0x0 [ 255.618653][ T9070] netlink: 'syz.4.1105': attribute type 4 has an invalid length. [ 255.976568][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.982897][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.269080][ T5829] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 257.280172][ T5871] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.086812][ T5871] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 259.263150][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 259.275907][ T5871] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 259.293313][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.313138][ T5871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 259.325797][ T5871] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 259.343113][ T5871] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 259.361349][ T5871] usb 3-1: Product: syz [ 259.400480][ T5871] usb 3-1: Manufacturer: syz [ 259.411597][ T5960] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 260.340809][ T5871] usb 3-1: SerialNumber: syz [ 260.558659][ T5883] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 261.339198][ T5871] usb 3-1: config 0 descriptor?? [ 261.353474][ T5871] usb 3-1: can't set config #0, error -71 [ 261.361452][ T5871] usb 3-1: USB disconnect, device number 23 [ 262.018165][ T9115] tipc: Failed to obtain node identity [ 262.055510][ T9115] tipc: Enabling of bearer rejected, failed to enable media [ 265.019384][ T5960] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 265.400932][ T9149] syz.2.1129 (9149): drop_caches: 2 [ 266.592104][ T5960] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 267.724553][ T5871] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.134893][ T9175] overlayfs: failed to clone upperpath [ 268.582851][ T9184] netlink: 436 bytes leftover after parsing attributes in process `syz.3.1141'. [ 268.688373][ T9188] xt_bpf: check failed: parse error [ 270.677996][ T5933] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 271.761487][ T9226] pim6reg1: entered promiscuous mode [ 271.773280][ T9226] pim6reg1: entered allmulticast mode [ 271.943765][ T11] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 273.021810][ T5867] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 273.543354][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 273.560323][ T5867] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.592279][ T5867] usb 4-1: config 0 has no interfaces? [ 273.623972][ T5867] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 273.653438][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.680686][ T5867] usb 4-1: Product: syz [ 273.699867][ T5867] usb 4-1: Manufacturer: syz [ 273.723022][ T5867] usb 4-1: SerialNumber: syz [ 273.800334][ T5867] usb 4-1: config 0 descriptor?? [ 274.101966][ T5867] usb 4-1: USB disconnect, device number 29 [ 276.482351][ T8463] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 276.603847][ T5871] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.773278][ T25] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 276.889688][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'. [ 276.963385][ T25] usb 4-1: device descriptor read/64, error -71 [ 277.086961][ T5867] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.203236][ T25] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 277.394385][ T25] usb 4-1: device descriptor read/64, error -71 [ 277.543564][ T25] usb usb4-port1: attempt power cycle [ 277.716430][ T190] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 277.923177][ T25] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 278.053922][ T25] usb 4-1: device descriptor read/8, error -71 [ 278.118677][ T5869] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 278.293219][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 278.310126][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.323163][ T25] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 278.341697][ T5869] usb 5-1: config 0 has no interfaces? [ 278.370430][ T5869] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 278.387188][ T25] usb 4-1: device descriptor read/8, error -71 [ 278.403292][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.653638][ T25] usb usb4-port1: unable to enumerate USB device [ 278.661243][ T5869] usb 5-1: Product: syz [ 279.410293][ T5869] usb 5-1: Manufacturer: syz [ 279.410318][ T5869] usb 5-1: SerialNumber: syz [ 279.826684][ T5869] usb 5-1: config 0 descriptor?? [ 279.843445][ T29] audit: type=1326 audit(1739293740.184:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9314 comm="syz.1.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc918cde9 code=0x7fc00000 [ 279.885563][ T9316] tty tty22: ldisc open failed (-12), clearing slot 21 [ 280.079128][ T5867] usb 5-1: USB disconnect, device number 20 [ 282.184830][ T80] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 282.233140][ T5829] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 282.353207][ T81] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 282.433395][ T5829] usb 4-1: Using ep0 maxpacket: 8 [ 282.472356][ T5829] usb 4-1: config index 0 descriptor too short (expected 5138, got 18) [ 282.589065][ T5829] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.742806][ T5829] usb 4-1: config 0 has no interfaces? [ 282.845903][ T5829] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 282.933260][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.972062][ T5829] usb 4-1: Product: syz [ 282.984232][ T5829] usb 4-1: Manufacturer: syz [ 282.988867][ T5829] usb 4-1: SerialNumber: syz [ 283.044537][ T5829] usb 4-1: config 0 descriptor?? [ 283.103189][ T81] usb 5-1: device descriptor read/64, error -71 [ 283.307567][ T5829] usb 4-1: USB disconnect, device number 34 [ 283.354452][ T81] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 283.465668][ T5960] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 283.502371][ T81] usb 5-1: device descriptor read/64, error -71 [ 283.623467][ T81] usb usb5-port1: attempt power cycle [ 283.634533][ T9415] netlink: 'syz.2.1229': attribute type 4 has an invalid length. [ 283.973292][ T81] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 284.013920][ T81] usb 5-1: device descriptor read/8, error -71 [ 284.133392][ T5829] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 284.273205][ T81] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 284.314121][ T81] usb 5-1: device descriptor read/8, error -71 [ 284.324091][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.343162][ T5829] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 284.362055][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.371804][ T9442] support for the xor transformation has been removed. [ 284.380833][ T5829] usb 4-1: config 0 descriptor?? [ 284.436009][ T81] usb usb5-port1: unable to enumerate USB device [ 284.806796][ T5829] lg-g15 0003:046D:C222.0003: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 284.985550][ T5869] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 285.003762][ T5829] usb 4-1: USB disconnect, device number 35 [ 285.156376][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 285.174798][ T5869] usb 5-1: config index 0 descriptor too short (expected 5138, got 18) [ 285.199424][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.220012][ T5869] usb 5-1: config 0 has no interfaces? [ 285.232234][ T5869] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 285.256499][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.280627][ T5869] usb 5-1: Product: syz [ 285.293375][ T5869] usb 5-1: Manufacturer: syz [ 285.299344][ T5869] usb 5-1: SerialNumber: syz [ 285.320811][ T5869] usb 5-1: config 0 descriptor?? [ 285.524675][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 285.550737][ T5869] usb 5-1: USB disconnect, device number 25 [ 285.655207][ T9474] tun0: tun_chr_ioctl cmd 2148553947 [ 286.433668][ T5869] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 286.637043][ T5869] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 286.829085][ T5869] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 286.847885][ T5829] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 286.863206][ T5869] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 286.903543][ T5869] usb 5-1: config 250 has no interface number 0 [ 286.920067][ T5869] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 64 [ 287.048809][ T5869] usb 5-1: config 250 interface 228 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 287.060609][ T5869] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 287.074667][ T5869] usb 5-1: config 250 interface 228 has no altsetting 0 [ 287.090635][ T5869] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 287.106014][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 287.114712][ T5869] usb 5-1: Product: syz [ 287.120119][ T5869] usb 5-1: SerialNumber: syz [ 287.153508][ T5869] hub 5-1:250.228: bad descriptor, ignoring hub [ 287.160383][ T5869] hub 5-1:250.228: probe with driver hub failed with error -5 [ 287.223464][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 287.563453][ T5829] usb 5-1: USB disconnect, device number 26 [ 288.546289][ T5933] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 289.189616][ T9558] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1284'. [ 289.213853][ T9558] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1284'. [ 289.263902][ T9556] syz.1.1281 (9556): drop_caches: 2 [ 289.273610][ T8463] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 290.114350][ T9569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1288'. [ 290.367984][ T9581] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1292'. [ 290.397639][ T9581] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1292'. [ 290.431709][ T9581] netlink: 'syz.3.1292': attribute type 5 has an invalid length. [ 290.466148][ T9581] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1292'. [ 292.919153][ T9629] syz.3.1313 (9629): drop_caches: 2 [ 293.629597][ T190] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 293.942396][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1323'. [ 294.349455][ T9663] geneve0: entered allmulticast mode [ 294.514929][ T9681] netlink: 580 bytes leftover after parsing attributes in process `syz.1.1334'. [ 295.623597][ T5829] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.659619][ T5933] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 296.977411][ T5909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.025434][ T190] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.476693][ T5933] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 299.634067][ T29] audit: type=1326 audit(1739293760.014:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9718 comm="syz.2.1348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd39518cde9 code=0x0 [ 299.658367][ T9719] batman_adv: batadv0: Adding interface: dummy0 [ 299.664808][ T9719] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.739519][ T9719] batman_adv: batadv0: Interface activated: dummy0 [ 299.786445][ T9723] batadv0: mtu less than device minimum [ 299.810043][ T9723] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.822663][ T9723] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.835230][ T9723] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.847724][ T9723] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.860342][ T9723] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.872841][ T9723] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.885364][ T9723] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.897904][ T9723] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.963453][ T81] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 300.133524][ T81] usb 4-1: Using ep0 maxpacket: 8 [ 300.151424][ T81] usb 4-1: config index 0 descriptor too short (expected 5138, got 18) [ 300.177071][ T81] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.208857][ T81] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 300.238127][ T81] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 300.252720][ T81] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.277269][ T81] usb 4-1: Product: syz [ 300.289261][ T81] usb 4-1: Manufacturer: syz [ 300.302109][ T81] usb 4-1: SerialNumber: syz [ 300.322366][ T81] usb 4-1: config 0 descriptor?? [ 300.558826][ T5869] usb 4-1: USB disconnect, device number 36 [ 300.833246][ T5829] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 301.003178][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 301.015792][ T5829] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.043238][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.098167][ T5829] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 301.131305][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.199602][ T5829] usb 3-1: config 0 descriptor?? [ 301.222266][ T5829] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 301.490934][ T9772] 9pnet_fd: Insufficient options for proto=fd [ 301.904147][ T9790] 9pnet_fd: Insufficient options for proto=fd [ 303.682768][ T5933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.935523][ T81] usb 3-1: USB disconnect, device number 24 [ 304.265590][ T9817] pimreg: entered allmulticast mode [ 305.234761][ T190] net_ratelimit: 12 callbacks suppressed [ 305.234782][ T190] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 305.632472][ T9853] syz.0.1399 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 306.071237][ T9872] tmpfs: Unknown parameter 'mp' [ 306.195508][ T9872] syz.4.1408 (9872): drop_caches: 2 [ 306.393196][ T81] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 306.573565][ T81] usb 3-1: device descriptor read/64, error -71 [ 306.933362][ T81] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 307.150564][ T5867] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.154379][ T8463] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 307.203269][ T81] usb 3-1: device descriptor read/64, error -71 [ 307.338930][ T81] usb usb3-port1: attempt power cycle [ 307.814229][ T81] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 308.894812][ T81] usb 3-1: device descriptor read/8, error -71 [ 309.093712][ T8463] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 310.988833][ T80] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 311.989484][ T9953] netlink: 'syz.3.1435': attribute type 4 has an invalid length. [ 312.496998][ T5867] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 312.855122][ T9960] syzkaller0: entered promiscuous mode [ 312.860654][ T9960] syzkaller0: entered allmulticast mode [ 312.913657][ T5883] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 316.745260][ T35] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 316.945941][T10002] trusted_key: encrypted_key: key user:syz not found [ 317.389342][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.402461][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.553830][T10020] syzkaller0: entered promiscuous mode [ 317.559360][T10020] syzkaller0: entered allmulticast mode [ 317.929909][T10035] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1471'. [ 317.954067][ T5933] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 318.906522][T10041] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 319.193193][ T5829] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 319.353390][ T5829] usb 4-1: Using ep0 maxpacket: 8 [ 319.391448][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 319.443176][ T5829] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 320.380820][T10081] usb usb8: usbfs: process 10081 (syz.1.1489) did not claim interface 0 before use [ 320.415198][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.432857][ T5829] usb 4-1: config 0 descriptor?? [ 321.023672][T10092] netlink: 23794 bytes leftover after parsing attributes in process `syz.0.1494'. [ 321.753216][ T5829] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 322.695869][ T5829] usb 4-1: USB disconnect, device number 37 [ 322.711518][ T80] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 323.152796][ T35] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 323.224438][ T29] audit: type=1326 audit(1739293783.604:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10110 comm="syz.4.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641298cde9 code=0x7ffc0000 [ 323.332483][ T29] audit: type=1326 audit(1739293783.624:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10110 comm="syz.4.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641298cde9 code=0x7ffc0000 [ 323.439378][ T29] audit: type=1326 audit(1739293783.634:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10110 comm="syz.4.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f641298cde9 code=0x7ffc0000 [ 323.543208][ T29] audit: type=1326 audit(1739293783.634:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10110 comm="syz.4.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641298cde9 code=0x7ffc0000 [ 323.616736][ T29] audit: type=1326 audit(1739293783.634:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10110 comm="syz.4.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641298cde9 code=0x7ffc0000 [ 325.630909][T10150] tmpfs: Bad value for 'mpol' [ 325.737973][T10150] syz.3.1516 (10150): drop_caches: 2 [ 326.882681][T10186] input: syz0 as /devices/virtual/input/input21 [ 327.628244][ T5867] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 328.169126][T10189] tmpfs: Bad value for 'mpol' [ 328.200415][T10189] syz.2.1531 (10189): drop_caches: 2 [ 328.264429][ T80] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 328.413728][ T5867] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 329.493155][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 329.499925][ T5867] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 329.511866][ T5867] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 329.845640][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.853801][ T5867] usb 5-1: Product: syz [ 329.857980][ T5867] usb 5-1: Manufacturer: syz [ 329.862583][ T5867] usb 5-1: SerialNumber: syz [ 329.869352][ T5867] usb 5-1: config 0 descriptor?? [ 329.875016][T10199] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 329.980384][ T5867] hub 5-1:0.0: bad descriptor, ignoring hub [ 329.996633][ T5867] hub 5-1:0.0: probe with driver hub failed with error -5 [ 330.029011][ T5867] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 330.281176][ T5869] usb 5-1: USB disconnect, device number 27 [ 330.281258][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 330.406332][ T25] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 330.915173][ T5902] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 331.280084][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 331.285543][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 331.298286][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.309579][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.282540][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.292438][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 332.302224][ T5902] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 332.311484][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 332.340709][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.349138][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 332.364689][ T5902] usb 4-1: config 0 descriptor?? [ 332.371099][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 332.384142][ T5902] hub 4-1:0.0: USB hub found [ 332.400233][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 332.408342][ T25] usb 3-1: SerialNumber: syz [ 332.424331][ T25] cdc_acm 3-1:1.0: skipping garbage [ 332.429612][ T25] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 332.449006][ T25] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 332.543392][ T5867] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 332.582761][ T5902] hub 4-1:0.0: 1 port detected [ 332.628702][ T25] usb 3-1: USB disconnect, device number 29 [ 332.713595][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 332.727288][ T5867] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 332.739229][ T5867] usb 2-1: config 0 has no interface number 0 [ 332.758773][ T5867] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 332.779319][ T5867] usb 2-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 332.800468][ T5867] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 332.813010][ T5867] usb 2-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 332.828979][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.846545][ T5867] usb 2-1: Product: syz [ 332.855921][ T5867] usb 2-1: Manufacturer: syz [ 332.860864][ T5867] usb 2-1: SerialNumber: syz [ 332.876548][ T5867] usb 2-1: config 0 descriptor?? [ 333.011248][T10251] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 333.023484][T10251] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 333.775002][ T5902] hub 4-1:0.0: activate --> -90 [ 334.431419][ T5902] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 335.137900][ T5867] usb 4-1: USB disconnect, device number 38 [ 335.144339][ T5883] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 336.506594][ T5871] usb 2-1: USB disconnect, device number 10 [ 337.453922][ T29] audit: type=1326 audit(1739293797.824:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10296 comm="syz.1.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc918cde9 code=0x7ffc0000 [ 337.803776][ T29] audit: type=1326 audit(1739293797.824:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10296 comm="syz.1.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc918cde9 code=0x7ffc0000 [ 338.157119][ T5902] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 338.344671][ T29] audit: type=1326 audit(1739293797.964:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10296 comm="syz.1.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8dc918cde9 code=0x7ffc0000 [ 338.366409][ T29] audit: type=1326 audit(1739293797.964:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10296 comm="syz.1.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc918cde9 code=0x7ffc0000 [ 338.388061][ T29] audit: type=1326 audit(1739293797.964:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10296 comm="syz.1.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc918cde9 code=0x7ffc0000 [ 338.938561][ T29] audit: type=1326 audit(1739293797.964:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10296 comm="syz.1.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8dc918cde9 code=0x7ffc0000 [ 339.046329][ T29] audit: type=1326 audit(1739293797.974:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10296 comm="syz.1.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc918cde9 code=0x7ffc0000 [ 339.090521][ T29] audit: type=1326 audit(1739293798.014:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10296 comm="syz.1.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc918cde9 code=0x7ffc0000 [ 339.100651][ T5902] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 339.237159][ T5902] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 339.260619][ T5902] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 339.270169][ T5902] usb 5-1: config 250 has no interface number 0 [ 339.277055][ T5902] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 64 [ 339.289415][ T5902] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 339.303843][ T5902] usb 5-1: config 250 interface 228 has no altsetting 0 [ 339.320067][ T5902] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 339.385671][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 339.400325][ T29] audit: type=1326 audit(1739293798.014:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10296 comm="syz.1.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f8dc918cde9 code=0x7ffc0000 [ 339.422516][ T5902] usb 5-1: Product: syz [ 339.439294][ T5902] usb 5-1: SerialNumber: syz [ 339.571718][ T5902] hub 5-1:250.228: bad descriptor, ignoring hub [ 339.618163][ T5902] hub 5-1:250.228: probe with driver hub failed with error -5 [ 339.673241][ T29] audit: type=1326 audit(1739293798.014:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10296 comm="syz.1.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8dc9128fb9 code=0x7ffc0000 [ 339.735616][ T5902] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 28 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 339.804902][ T5902] usb 5-1: USB disconnect, device number 28 [ 339.826272][ T5902] usblp0: removed [ 339.941187][T10315] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1564'. [ 339.980788][T10315] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1564'. [ 341.241041][ T5883] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 341.311659][T10334] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1583'. [ 341.762649][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 342.683496][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 342.690940][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.725521][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.743558][ T25] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 342.762744][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.781931][ T25] usb 2-1: config 0 descriptor?? [ 343.022958][ T190] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 343.840863][T10369] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1599'. [ 344.486188][ T25] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 344.777637][ T25] usb 2-1: USB disconnect, device number 11 [ 347.428413][ T11] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 347.585517][ T29] kauditd_printk_skb: 535 callbacks suppressed [ 347.585535][ T29] audit: type=1326 audit(1739293807.964:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10389 comm="syz.0.1597" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce7178cde9 code=0x0 [ 349.058268][ T8463] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 350.833378][ T29] audit: type=1326 audit(1739293811.194:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.0.1627" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce7178cde9 code=0x0 [ 350.930874][T10442] vlan2: entered allmulticast mode [ 350.945204][T10442] bond0: entered allmulticast mode [ 350.983504][T10442] bond_slave_0: entered allmulticast mode [ 350.995345][T10442] bond_slave_1: entered allmulticast mode [ 352.555993][T10472] 9pnet_fd: Insufficient options for proto=fd [ 354.110891][ T35] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 354.997128][ T190] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 356.974947][ T29] audit: type=1326 audit(1739293817.354:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10492 comm="syz.4.1640" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f641298cde9 code=0x0 [ 357.302023][ T5871] hid-generic 0009:0006:0010.0005: hidraw0: HID v10.00 Device [syz1] on syz0 [ 357.818822][T10517] 9pnet_fd: Insufficient options for proto=fd [ 359.626783][ T35] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 360.899614][ T5957] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 361.061569][T10532] IPv6: Can't replace route, no match found [ 361.906646][ T29] audit: type=1326 audit(1739293822.284:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10549 comm="syz.0.1661" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce7178cde9 code=0x0 [ 362.120406][ T29] audit: type=1326 audit(1739293822.384:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10550 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39518cde9 code=0x7ffc0000 [ 362.324173][ T29] audit: type=1326 audit(1739293822.384:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10550 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39518cde9 code=0x7ffc0000 [ 362.569016][ T29] audit: type=1326 audit(1739293822.384:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10550 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd39518cde9 code=0x7ffc0000 [ 362.664014][ T29] audit: type=1326 audit(1739293822.404:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10550 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39518cde9 code=0x7ffc0000 [ 362.686315][ T29] audit: type=1326 audit(1739293822.404:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10550 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39518cde9 code=0x7ffc0000 [ 362.709697][ T29] audit: type=1326 audit(1739293822.414:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10550 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd39518cde9 code=0x7ffc0000 [ 362.864084][ T29] audit: type=1326 audit(1739293822.444:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10550 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39518cde9 code=0x7ffc0000 [ 363.135923][ T29] audit: type=1326 audit(1739293822.454:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10550 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39518cde9 code=0x7ffc0000 [ 364.573209][ T5871] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 364.743591][ T5869] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 365.217652][ T5871] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.248560][ T5871] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 365.273107][ T5871] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 365.282265][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 365.290321][ T5871] usb 3-1: SerialNumber: syz [ 365.383228][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 365.393713][ T8463] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 365.411367][ T5869] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 365.454223][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.492154][ T5869] usb 2-1: Product: syz [ 365.496886][ T5869] usb 2-1: Manufacturer: syz [ 365.501496][ T5869] usb 2-1: SerialNumber: syz [ 365.514048][ T5871] usb 3-1: 0:2 : does not exist [ 365.531104][ T5869] r8152-cfgselector 2-1: Unknown version 0x0000 [ 365.538347][ T5869] r8152-cfgselector 2-1: config 0 descriptor?? [ 365.613474][ T5871] usb 3-1: USB disconnect, device number 30 [ 365.829575][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.839620][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.846017][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'. [ 365.856135][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.869305][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.869805][T10572] veth0_virt_wifi: entered promiscuous mode [ 365.883189][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 365.891591][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.907893][T10572] veth0_virt_wifi: entered allmulticast mode [ 365.917049][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.926408][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.934000][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.979513][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.986837][ T5869] r8152-cfgselector 2-1: Unknown version 0x0000 [ 365.995265][ T5820] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 366.008462][ T5869] r8152-cfgselector 2-1: bad CDC descriptors [ 366.015916][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.046084][ T5869] r8152-cfgselector 2-1: USB disconnect, device number 12 [ 366.674981][ T5957] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 367.172741][T10598] sit0: entered promiscuous mode [ 367.239313][T10598] netlink: 'syz.2.1676': attribute type 1 has an invalid length. [ 367.273155][T10598] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1676'. [ 367.291130][T10581] chnl_net:caif_netlink_parms(): no params data found [ 367.356600][ T29] audit: type=1326 audit(1739293827.734:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10599 comm="syz.4.1677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f641298cde9 code=0x0 [ 368.228768][ T53] Bluetooth: hci2: command tx timeout [ 369.224635][T10581] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.246237][T10581] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.278047][T10581] bridge_slave_0: entered allmulticast mode [ 369.312106][T10581] bridge_slave_0: entered promiscuous mode [ 369.363514][T10581] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.411380][T10581] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.446404][T10581] bridge_slave_1: entered allmulticast mode [ 369.497210][T10581] bridge_slave_1: entered promiscuous mode [ 369.845517][T10581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.859312][T10581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.264923][ T53] Bluetooth: hci2: command tx timeout [ 370.601586][T10581] team0: Port device team_slave_0 added [ 370.618451][T10581] team0: Port device team_slave_1 added [ 370.744454][T10581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.786314][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.003808][T10581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.058735][T10581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.091209][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.143519][ T5960] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 371.180645][T10581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.314348][T10581] hsr_slave_0: entered promiscuous mode [ 371.346402][T10581] hsr_slave_1: entered promiscuous mode [ 371.372969][T10581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.506920][T10581] Cannot create hsr debugfs directory [ 372.383280][ T53] Bluetooth: hci2: command tx timeout [ 372.494037][ T5883] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 374.131231][T10581] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 374.195636][T10581] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 374.315787][T10581] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 375.203105][ T53] Bluetooth: hci2: command tx timeout [ 375.533713][T10581] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 376.710833][T10581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.730526][T10581] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.761452][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.768603][ T5883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.844500][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.844606][ T5883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.903621][ T5933] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 376.928213][T10581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.209948][ T5883] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 378.441279][T10581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.864765][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.871983][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.989998][T10581] veth0_vlan: entered promiscuous mode [ 380.036069][T10581] veth1_vlan: entered promiscuous mode [ 380.145258][T10581] veth0_macvtap: entered promiscuous mode [ 380.169988][T10581] veth1_macvtap: entered promiscuous mode [ 380.193919][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.205438][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.224413][T10581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.240993][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.252909][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.319468][T10581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.348687][T10767] geneve0: entered allmulticast mode [ 380.382659][T10581] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.406655][T10581] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.425798][T10581] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.443422][T10581] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.576950][ T5933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.597571][ T5933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.641733][ T5933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.650677][ T5933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.981165][T10791] netlink: 'syz.5.1670': attribute type 4 has an invalid length. [ 382.031664][ T5883] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 382.744602][T10797] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1737'. [ 383.502382][ T80] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 387.783828][ T5933] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 389.073452][ T5883] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 390.350319][T10881] sp0: Synchronizing with TNC [ 390.805573][T10891] netlink: 696 bytes leftover after parsing attributes in process `syz.1.1766'. [ 394.108031][ T5957] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 395.141049][ T5883] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 398.789767][T10947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1782'. [ 398.813133][T10947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1782'. [ 398.889174][T10950] batman_adv: batadv0: Adding interface: dummy0 [ 399.043173][T10950] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.399918][ T11] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 399.428974][T10950] batman_adv: batadv0: Interface activated: dummy0 [ 399.538689][T10950] batadv0: mtu less than device minimum [ 399.572733][T10950] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.584244][T10950] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.595695][T10950] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.607130][T10950] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.618582][T10950] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.630045][T10950] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.641526][T10950] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.653012][T10950] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 402.278046][T10971] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 402.727119][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1791'. [ 404.626956][ T80] net_ratelimit: 12 callbacks suppressed [ 404.626976][ T80] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 406.408382][ T5957] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 407.553451][T11008] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1797'. [ 407.566067][T11008] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1797'. [ 408.165477][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1804'. [ 409.138398][T11039] loop9: detected capacity change from 0 to 8 [ 409.164946][T11039] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 409.174692][T11039] loop9: partition table partially beyond EOD, truncated [ 409.188784][T11039] loop9: p1 size 81768186 extends beyond EOD, truncated [ 409.383336][ T5867] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 409.558333][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 409.585588][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 409.621733][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 409.709755][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 144, setting to 64 [ 409.735755][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 409.850225][ T5867] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 409.864380][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.872416][ T5867] usb 2-1: Product: syz [ 409.877546][ T5867] usb 2-1: Manufacturer: syz [ 409.882164][ T5867] usb 2-1: SerialNumber: syz [ 409.892006][ T5867] usb 2-1: config 0 descriptor?? [ 409.901074][T11038] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 409.937252][ T5867] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input23 [ 410.190356][ T80] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 410.244127][T11070] loop9: detected capacity change from 0 to 8 [ 410.266394][T11070] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 410.271753][T11070] loop9: partition table partially beyond EOD, truncated [ 410.285566][ T5867] rc_core: IR keymap rc-imon-pad not found [ 410.291495][ T5867] Registered IR keymap rc-empty [ 410.299647][T11070] loop9: p1 size 81768186 extends beyond EOD, truncated [ 410.327226][ T5867] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 410.383261][ T5867] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 410.411542][ T5867] imon:send_packet: packet tx failed (-71) [ 410.443279][ T5867] imon 2-1:0.0: remote input dev register failed [ 410.452581][ T5867] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 411.064816][ T5867] imon 2-1:0.0: unable to initialize intf0, err 0 [ 411.071285][ T5867] imon:imon_probe: failed to initialize context! [ 411.093113][ T5867] imon 2-1:0.0: unable to register, err -19 [ 411.110641][ T5867] usb 2-1: USB disconnect, device number 13 [ 411.520843][T11112] ISOFS: Unable to identify CD-ROM format. [ 411.738377][T11111] vcan0: tx drop: invalid sa for name 0xff7fffffffffffff [ 412.137618][ T5957] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 412.727575][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'. [ 412.737970][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1843'. [ 413.613446][T11138] ubi31: attaching mtd0 [ 413.624873][T11138] ubi31: scanning is finished [ 413.629676][T11138] ubi31: empty MTD device detected [ 414.163913][T11138] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 414.228098][T11137] syz.5.1847(11137): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 416.435068][ T8463] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 416.635294][ T25] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 417.132670][ T25] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 417.174176][ T25] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 417.216547][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.270913][ T25] usb 5-1: config 0 descriptor?? [ 417.534253][T11157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.583578][T11157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.611915][ T81] usb 5-1: USB disconnect, device number 29 [ 417.714455][T11168] geneve0: entered allmulticast mode [ 417.866109][ T11] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 418.622172][T11158] Set syz1 is full, maxelem 65536 reached [ 418.983326][T11180] netlink: 'syz.4.1865': attribute type 3 has an invalid length. [ 419.051612][T11180] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1865'. [ 420.955437][T11205] netlink: 'syz.4.1876': attribute type 1 has an invalid length. [ 421.356573][T11212] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 421.363536][T11212] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 421.374687][T11217] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 421.423248][T11212] vhci_hcd vhci_hcd.0: Device attached [ 421.442245][T11217] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(15) [ 421.448876][T11217] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 421.686168][T11212] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 421.699010][T11217] vhci_hcd vhci_hcd.0: Device attached [ 421.704727][T11212] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 422.357682][ T81] vhci_hcd: vhci_device speed not set [ 422.390455][T11212] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 422.401183][ T8463] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 422.429083][T11212] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 422.443463][ T81] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 422.531703][T11212] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(27) [ 422.538357][T11212] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 422.590273][T11212] vhci_hcd vhci_hcd.0: Device attached [ 422.660550][T11219] vhci_hcd: connection closed [ 422.668577][T11233] vhci_hcd: connection closed [ 422.673476][T11214] vhci_hcd: connection reset by peer [ 422.684384][ T5933] vhci_hcd: stop threads [ 422.689921][ T5933] vhci_hcd: release socket [ 422.723139][ T5933] vhci_hcd: disconnect device [ 422.738746][ T5933] vhci_hcd: stop threads [ 422.751152][ T5933] vhci_hcd: release socket [ 422.985088][ T80] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 423.744906][ T5933] vhci_hcd: disconnect device [ 423.803870][ T5933] vhci_hcd: stop threads [ 423.824428][ T5933] vhci_hcd: release socket [ 423.849560][ T5933] vhci_hcd: disconnect device [ 424.825015][T11268] netlink: 696 bytes leftover after parsing attributes in process `syz.0.1894'. [ 425.210166][T11273] befs: (nullb0): No write support. Marking filesystem read-only [ 425.222929][T11273] befs: (nullb0): invalid magic header [ 427.614625][ T81] vhci_hcd: vhci_device speed not set [ 428.033013][T11306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1908'. [ 428.115767][ T80] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 429.242479][ T5883] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 429.251843][T11316] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1912'. [ 430.964469][ T81] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 431.945853][ T81] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.957914][ T81] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 431.967162][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.980888][ T81] usb 3-1: config 0 descriptor?? [ 432.531621][ T81] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 433.280427][ T5883] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 433.492441][ T81] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0006/input/input26 [ 434.673469][ T81] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 434.745272][ T81] usb 3-1: USB disconnect, device number 31 [ 435.084732][T11389] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1936'. [ 436.059346][ T11] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 436.973734][ T81] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 438.153805][ T81] usb 3-1: device not accepting address 32, error -71 [ 438.985244][ T5883] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 439.382527][T11436] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1950'. [ 439.383346][ T5867] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 439.563310][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 439.575530][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 439.611287][ T5867] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 439.640167][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.660040][ T5867] usb 5-1: config 0 descriptor?? [ 440.268273][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.277193][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.548566][ T5867] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 440.790867][T11455] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[11455] [ 440.888923][T11457] netlink: 696 bytes leftover after parsing attributes in process `syz.2.1955'. [ 441.522755][ T5867] usb 5-1: USB disconnect, device number 30 [ 441.546316][ T11] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 441.643222][ T81] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 441.700585][T11467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1962'. [ 441.793374][ T81] usb 2-1: Using ep0 maxpacket: 8 [ 441.820112][ T81] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.844946][ T81] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 441.883804][ T81] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 441.915538][ T81] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 441.945410][T11477] loop9: detected capacity change from 0 to 8 [ 441.954821][ T81] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 441.973691][ T81] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.985091][T11477] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 441.990421][T11477] loop9: partition table partially beyond EOD, truncated [ 442.003270][ T81] hub 2-1:1.0: bad descriptor, ignoring hub [ 442.009402][T11477] loop9: p1 size 81768186 extends beyond EOD, truncated [ 442.016752][ T81] hub 2-1:1.0: probe with driver hub failed with error -5 [ 442.039859][ T81] cdc_wdm 2-1:1.0: skipping garbage [ 442.068185][ T81] cdc_wdm 2-1:1.0: skipping garbage [ 442.086933][ T81] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 442.092870][ T81] cdc_wdm 2-1:1.0: Unknown control protocol [ 442.393536][ T5867] usb 2-1: USB disconnect, device number 14 [ 443.543377][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 443.914555][T11499] netlink: 'syz.2.1971': attribute type 4 has an invalid length. [ 444.673840][T11512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1974'. [ 446.691431][T11532] befs: (nullb0): No write support. Marking filesystem read-only [ 446.785204][T11532] befs: (nullb0): invalid magic header [ 446.863907][ T5867] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 447.053199][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 447.079820][ T5867] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 447.105197][ T5867] usb 6-1: config 0 has no interface number 0 [ 447.145347][ T5867] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 447.179393][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.222270][ T5867] usb 6-1: Product: syz [ 447.240156][ T5867] usb 6-1: Manufacturer: syz [ 447.255223][ T5867] usb 6-1: SerialNumber: syz [ 447.276446][ T5867] usb 6-1: config 0 descriptor?? [ 447.350139][ T80] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 447.375897][ T5867] radio-usb-si4713 6-1:0.128: Si4713 development board discovered: (10C4:8244) [ 447.543119][T11545] netlink: 'syz.0.1984': attribute type 4 has an invalid length. [ 447.715323][ T5867] radio-usb-si4713 6-1:0.128: probe with driver radio-usb-si4713 failed with error -71 [ 447.758846][ T5867] usbhid 6-1:0.128: couldn't find an input interrupt endpoint [ 447.818287][ T5867] usb 6-1: USB disconnect, device number 2 [ 448.601004][ T12] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 450.060401][ T5869] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 450.253968][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 450.343267][ T5869] usb 3-1: unable to get BOS descriptor or descriptor too short [ 450.599530][ T5869] usb 3-1: config 4 has an invalid interface number: 146 but max is 0 [ 450.618293][ T5869] usb 3-1: config 4 has no interface number 0 [ 450.682154][ T5869] usb 3-1: config 4 interface 146 has no altsetting 0 [ 450.935332][ T5869] usb 3-1: language id specifier not provided by device, defaulting to English [ 451.407589][ T5869] usb 3-1: New USB device found, idVendor=2013, idProduct=025c, bcdDevice=6f.96 [ 451.487774][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.972041][ T5869] usb 3-1: Manufacturer: 籽瓝ངྟ勶ᛗ浿쀅ଂྡྷꮗ牠꜡츨ɓ㖊夘郪㚗ﵢ䰹㡮鰝夳٦펆㝃ᝳ率鱓豭Ѵ穭꾌膂 [ 451.997754][ T5869] usb 3-1: SerialNumber: syz [ 452.011566][ T5869] usb 3-1: can't set config #4, error -71 [ 452.242518][T11591] netlink: 'syz.0.2002': attribute type 4 has an invalid length. [ 452.343746][ T5869] usb 3-1: USB disconnect, device number 34 [ 453.557653][ T5933] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 453.633141][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 453.803163][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 453.900955][ T25] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 454.213710][ T25] usb 6-1: config 0 has no interface number 0 [ 454.278326][ T25] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 454.307956][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.344455][ T35] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 454.361589][ T25] usb 6-1: Product: syz [ 454.386377][ T25] usb 6-1: Manufacturer: syz [ 454.410058][ T25] usb 6-1: SerialNumber: syz [ 454.429837][ T25] usb 6-1: config 0 descriptor?? [ 454.455819][ T25] smsc95xx v2.0.0 [ 454.662613][T11634] vlan3: entered allmulticast mode [ 454.935440][T11642] 9pnet_fd: Insufficient options for proto=fd [ 455.343433][ T25] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 455.569456][ T25] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 455.580611][ T25] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 455.600931][ T25] usb 6-1: USB disconnect, device number 3 [ 456.250842][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2026'. [ 456.288190][T11668] ipvlan2: entered promiscuous mode [ 456.313650][T11668] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 459.426186][T11708] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2041'. [ 459.643848][ T5867] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 460.143571][ T5883] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 460.175746][ T5867] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 460.206447][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.261835][ T5867] usb 5-1: config 0 descriptor?? [ 460.418214][T11716] infiniband syz!: set active [ 460.469768][T11716] infiniband syz!: added team_slave_0 [ 460.576811][T11716] RDS/IB: syz!: added [ 460.585390][T11716] smc: adding ib device syz! with port count 1 [ 460.592513][T11716] smc: ib device syz! port 1 has pnetid [ 461.528103][ T5867] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 461.564835][T11741] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2054'. [ 461.728758][ T5867] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 461.773630][ T5867] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 461.787736][ T5867] asix 5-1:0.0: probe with driver asix failed with error -71 [ 461.820711][ T5867] usb 5-1: USB disconnect, device number 31 [ 462.436537][T11754] random: crng reseeded on system resumption [ 462.867188][T11764] netlink: 696 bytes leftover after parsing attributes in process `syz.2.2063'. [ 463.942785][T11770] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2066'. [ 464.213363][ T81] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 464.433215][ T81] usb 3-1: Using ep0 maxpacket: 8 [ 464.472000][ T81] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 464.504264][ T81] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 464.546584][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.627572][ T81] usb 3-1: config 0 descriptor?? [ 465.492227][T11793] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 465.519335][T11808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2080'. [ 465.533551][ T81] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 465.871127][ T12] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 466.929830][ T5867] usb 3-1: USB disconnect, device number 35 [ 467.196224][T11849] syz!: rxe_newlink: already configured on team_slave_0 [ 469.415531][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 469.422870][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 469.544464][T11863] ceph: No mds server is up or the cluster is laggy [ 469.843165][ T5867] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 469.971407][T11881] netlink: 'syz.1.2108': attribute type 1 has an invalid length. [ 470.073314][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 470.126128][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 470.250329][ T5867] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 470.332826][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.464924][ T5867] usb 6-1: config 0 descriptor?? [ 471.311679][ T8463] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 471.319878][ T5867] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 471.731673][T11895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2114'. [ 472.282396][T11901] netlink: 'syz.1.2116': attribute type 4 has an invalid length. [ 472.618436][ T81] usb 6-1: USB disconnect, device number 4 [ 472.763430][T11903] loop9: detected capacity change from 0 to 8 [ 472.797623][T11903] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 472.834568][T11903] loop9: partition table partially beyond EOD, truncated [ 472.841776][T11903] loop9: p1 size 81768186 extends beyond EOD, truncated [ 472.916141][ T8463] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 473.223787][ T5867] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 473.383372][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 474.149878][ T5829] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 474.160542][ T5867] usb 5-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 474.176696][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.191552][ T5867] usb 5-1: Product: syz [ 474.200624][ T5867] usb 5-1: Manufacturer: syz [ 474.206591][ T5867] usb 5-1: SerialNumber: syz [ 474.213247][ T5867] usb 5-1: config 0 descriptor?? [ 474.222257][ T5867] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 474.327582][ T5829] usb 6-1: not running at top speed; connect to a high speed hub [ 474.337025][ T5829] usb 6-1: config 32 has an invalid interface number: 21 but max is 0 [ 474.371809][ T5829] usb 6-1: config 32 has no interface number 0 [ 474.392187][ T5829] usb 6-1: config 32 interface 21 has no altsetting 0 [ 474.411951][ T5829] usb 6-1: New USB device found, idVendor=1608, idProduct=020d, bcdDevice=e7.07 [ 474.433217][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.438451][T11926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2126'. [ 474.441348][ T5829] usb 6-1: Product: syz [ 474.468099][ T5829] usb 6-1: Manufacturer: syz [ 474.472759][ T5829] usb 6-1: SerialNumber: syz [ 475.043317][ T5870] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 475.118069][ T5829] io_ti 6-1:32.21: required endpoints missing [ 475.130974][ T5829] usb 6-1: USB disconnect, device number 5 [ 475.205971][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 475.223171][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 475.243179][ T5870] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 475.252480][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.276861][ T5870] usb 2-1: config 0 descriptor?? [ 475.524421][ T5870] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 476.275720][ T5867] input: sonixj as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 476.343680][ T11] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 476.625699][ T5867] usb 5-1: USB disconnect, device number 32 [ 478.163180][ T5867] usb 2-1: USB disconnect, device number 16 [ 478.670080][ T5957] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 479.091076][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2138'. [ 480.693495][ T25] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 480.898270][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.233398][T11994] Cannot find map_set index 0 as target [ 481.798419][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 481.813133][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 481.830650][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 481.841721][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 481.873790][ T11] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 481.887153][ T25] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 481.919354][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.946545][ T25] usb 2-1: Product: syz [ 481.962851][ T25] usb 2-1: Manufacturer: syz [ 481.995903][ T25] usb 2-1: SerialNumber: syz [ 482.021143][ T25] usb 2-1: config 0 descriptor?? [ 482.042120][T11983] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 482.110365][ T25] ati_remote 2-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 482.545369][ T25] usb 2-1: USB disconnect, device number 17 [ 483.330715][T12018] befs: (nullb0): No write support. Marking filesystem read-only [ 483.340042][T12018] befs: (nullb0): invalid magic header [ 485.170794][ T5960] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 487.563564][T12059] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2167'. [ 487.623647][ T11] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 488.045697][T12068] /dev/nullb0: Can't lookup blockdev [ 488.946032][T12071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2170'. [ 490.451805][T12091] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2176'. [ 490.472008][T12091] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2176'. [ 491.464497][ T35] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 491.713735][T12101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2178'. [ 492.456094][T12107] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2180'. [ 492.744588][ T11] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 493.584117][T12119] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 495.753418][ T5829] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 496.197471][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 496.217397][ T5829] usb 5-1: unable to get BOS descriptor or descriptor too short [ 496.229733][T12134] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2189'. [ 496.234821][ T5829] usb 5-1: config 1 has an invalid interface number: 225 but max is 0 [ 496.882354][ T8463] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 496.923143][ T5829] usb 5-1: config 1 has no interface number 0 [ 496.931602][ T5829] usb 5-1: config 1 interface 225 altsetting 75 bulk endpoint 0x2 has invalid maxpacket 32 [ 496.966560][ T5829] usb 5-1: config 1 interface 225 has no altsetting 0 [ 496.994267][ T5829] usb 5-1: New USB device found, idVendor=04e6, idProduct=0006, bcdDevice= 1.00 [ 497.003543][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.022217][ T5829] usb 5-1: Product: syz [ 497.035867][ T5829] usb 5-1: Manufacturer: syz [ 497.053210][ T5829] usb 5-1: SerialNumber: syz [ 497.117119][T12128] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 497.341281][ T5829] usb-storage 5-1:1.225: USB Mass Storage device detected [ 497.813876][ T5829] usb-storage 5-1:1.225: Quirks match for vid 04e6 pid 0006: 1 [ 498.727432][ T5829] usb 5-1: USB disconnect, device number 33 [ 498.750377][ T8463] IPVS: wlc: UDP 127.0.0.1:0 - no destination available [ 498.807424][T12156] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2194'. [ 499.391704][T12164] netlink: 696 bytes leftover after parsing attributes in process `syz.1.2196'. [ 499.458113][T12172] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2200'. [ 501.993526][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.000030][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.539474][T12191] page: refcount:3 mapcount:1 mapping:ffff88807d818a28 index:0x57 pfn:0x4401a [ 502.549505][T12191] memcg:ffff88805ebd2000 [ 502.553739][T12191] aops:shmem_aops ino:93 [ 502.557977][T12191] flags: 0xfff0000002012d(locked|referenced|uptodate|lru|active|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 502.569360][T12191] raw: 00fff0000002012d ffffea0001100648 ffffea00011006c8 ffff88807d818a28 [ 502.577930][T12191] raw: 0000000000000057 0000000000000000 0000000300000000 ffff88805ebd2000 [ 502.586494][T12191] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 502.593784][T12191] page_owner tracks the page as allocated [ 502.600577][T12191] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 12189, tgid 12188 (syz.0.2207), ts 500761976904, free_ts 493575569459 [ 502.618473][T12191] post_alloc_hook+0x1f4/0x240 [ 502.623233][T12191] get_page_from_freelist+0x3651/0x37a0 [ 502.628762][T12191] __alloc_frozen_pages_noprof+0x292/0x710 [ 502.634553][T12191] alloc_pages_mpol+0x311/0x660 [ 502.639405][T12191] folio_alloc_mpol_noprof+0x36/0x70 [ 502.644691][T12191] shmem_alloc_and_add_folio+0x4a0/0x1090 [ 502.650411][T12191] shmem_get_folio_gfp+0x621/0x1840 [ 502.655599][T12191] shmem_fault+0x220/0x5b0 [ 502.660004][T12191] __do_fault+0x135/0x390 [ 502.664318][T12191] __handle_mm_fault+0x4c44/0x70f0 [ 502.669417][T12191] handle_mm_fault+0x2c1/0x7e0 [ 502.674172][T12191] __get_user_pages+0x1a92/0x4140 [ 502.679187][T12191] populate_vma_page_range+0x264/0x330 [ 502.684634][T12191] __mm_populate+0x27a/0x460 [ 502.689239][T12191] vm_mmap_pgoff+0x303/0x430 [ 502.693819][T12191] do_syscall_64+0xf3/0x230 [ 502.698314][T12191] page last free pid 12114 tgid 12108 stack trace: [ 502.704794][T12191] free_unref_folios+0xe2f/0x18a0 [ 502.709809][T12191] folios_put_refs+0x76c/0x860 [ 502.714564][T12191] shmem_undo_range+0x593/0x1820 [ 502.719486][T12191] shmem_evict_inode+0x29b/0xa80 [ 502.724407][T12191] evict+0x4e8/0x9a0 [ 502.728303][T12191] __dentry_kill+0x20d/0x630 [ 502.732875][T12191] dput+0x19f/0x2b0 [ 502.736669][T12191] __fput+0x60b/0x9f0 [ 502.740635][T12191] task_work_run+0x24f/0x310 [ 502.745215][T12191] do_exit+0xa2a/0x28e0 [ 502.749356][T12191] do_group_exit+0x207/0x2c0 [ 502.753931][T12191] get_signal+0x16b2/0x1750 [ 502.758421][T12191] arch_do_signal_or_restart+0x96/0x860 [ 502.763950][T12191] syscall_exit_to_user_mode+0xce/0x340 [ 502.769483][T12191] do_syscall_64+0x100/0x230 [ 502.774070][T12191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.780048][T12191] ------------[ cut here ]------------ [ 502.785544][T12191] kernel BUG at mm/filemap.c:154! [ 502.790581][T12191] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 502.797500][T12191] CPU: 0 UID: 0 PID: 12191 Comm: syz.0.2207 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 502.808242][T12191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 502.818309][T12191] RIP: 0010:filemap_unaccount_folio+0x73d/0x7d0 [ 502.824549][T12191] Code: de c7 ff 48 89 df 48 c7 c6 e0 d3 13 8c e8 8b b2 0f 00 90 0f 0b e8 93 de c7 ff 48 89 df 48 c7 c6 c0 d2 13 8c e8 74 b2 0f 00 90 <0f> 0b e8 7c de c7 ff 48 89 df 48 c7 c6 e0 d3 13 8c e8 5d b2 0f 00 [ 502.844150][T12191] RSP: 0018:ffffc90003347070 EFLAGS: 00010046 [ 502.850209][T12191] RAX: 3f2e157a2fdc4300 RBX: ffffea0001100680 RCX: ffffc90003346c03 [ 502.858163][T12191] RDX: 0000000000000002 RSI: ffffffff8c0ab8e0 RDI: ffffffff8c5fb780 [ 502.866113][T12191] RBP: 0000000000000000 R08: ffffffff901a3377 R09: 1ffffffff203466e [ 502.874063][T12191] R10: dffffc0000000000 R11: fffffbfff203466f R12: dffffc0000000000 [ 502.882023][T12191] R13: 1ffffd40002200d1 R14: ffff88807d818a28 R15: ffffea0001100688 [ 502.889976][T12191] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 502.898892][T12191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.905473][T12191] CR2: 0000400001000000 CR3: 000000000e738000 CR4: 00000000003526f0 [ 502.913430][T12191] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 502.921380][T12191] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 502.929334][T12191] Call Trace: [ 502.932593][T12191] [ 502.935508][T12191] ? __die_body+0x5f/0xb0 [ 502.939823][T12191] ? die+0x9e/0xc0 [ 502.943529][T12191] ? do_trap+0x15a/0x3a0 [ 502.947749][T12191] ? filemap_unaccount_folio+0x73d/0x7d0 [ 502.953363][T12191] ? do_error_trap+0x1dc/0x2c0 [ 502.958136][T12191] ? filemap_unaccount_folio+0x73d/0x7d0 [ 502.963764][T12191] ? __pfx_do_error_trap+0x10/0x10 [ 502.968854][T12191] ? report_bug+0x3cd/0x500 [ 502.973339][T12191] ? handle_invalid_op+0x34/0x40 [ 502.978265][T12191] ? filemap_unaccount_folio+0x73d/0x7d0 [ 502.983905][T12191] ? exc_invalid_op+0x38/0x50 [ 502.988582][T12191] ? asm_exc_invalid_op+0x1a/0x20 [ 502.993590][T12191] ? filemap_unaccount_folio+0x73d/0x7d0 [ 502.999207][T12191] __filemap_remove_folio+0xc7/0x670 [ 503.004473][T12191] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 503.009828][T12191] ? __pfx___filemap_remove_folio+0x10/0x10 [ 503.015703][T12191] ? _raw_spin_lock_irq+0xdf/0x120 [ 503.020795][T12191] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 503.026319][T12191] filemap_remove_folio+0xe1/0x1f0 [ 503.031418][T12191] truncate_inode_folio+0x5d/0x70 [ 503.036428][T12191] shmem_undo_range+0x44b/0x1820 [ 503.041354][T12191] ? validate_chain+0x11e/0x5920 [ 503.046274][T12191] ? __pfx_shmem_undo_range+0x10/0x10 [ 503.051637][T12191] ? __pfx_validate_chain+0x10/0x10 [ 503.056833][T12191] ? percpu_counter_add_batch+0xff/0x1f0 [ 503.062445][T12191] shmem_evict_inode+0x29b/0xa80 [ 503.067364][T12191] ? inode_wait_for_writeback+0x111/0x2a0 [ 503.073068][T12191] ? __pfx_shmem_evict_inode+0x10/0x10 [ 503.078513][T12191] ? do_raw_spin_unlock+0x13c/0x8b0 [ 503.083695][T12191] ? __pfx_shmem_evict_inode+0x10/0x10 [ 503.089140][T12191] evict+0x4e8/0x9a0 [ 503.093016][T12191] ? __pfx_evict+0x10/0x10 [ 503.097428][T12191] ? iput+0x713/0xa50 [ 503.101392][T12191] __dentry_kill+0x20d/0x630 [ 503.105963][T12191] ? dput+0x37/0x2b0 [ 503.109837][T12191] dput+0x19f/0x2b0 [ 503.113628][T12191] __fput+0x60b/0x9f0 [ 503.117594][T12191] task_work_run+0x24f/0x310 [ 503.122166][T12191] ? __pfx_task_work_run+0x10/0x10 [ 503.127260][T12191] ? switch_task_namespaces+0xe4/0x110 [ 503.132722][T12191] do_exit+0xa2a/0x28e0 [ 503.136867][T12191] ? __pfx_do_exit+0x10/0x10 [ 503.141447][T12191] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 503.146798][T12191] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 503.152764][T12191] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 503.159588][T12191] ? _raw_spin_lock_irq+0xdf/0x120 [ 503.164680][T12191] do_group_exit+0x207/0x2c0 [ 503.169248][T12191] ? _raw_spin_unlock_irq+0x23/0x50 [ 503.174439][T12191] ? lockdep_hardirqs_on+0x99/0x150 [ 503.179617][T12191] get_signal+0x16b2/0x1750 [ 503.184116][T12191] ? __pfx_get_signal+0x10/0x10 [ 503.188952][T12191] arch_do_signal_or_restart+0x96/0x860 [ 503.195177][T12191] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 503.201312][T12191] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 503.207285][T12191] ? syscall_exit_to_user_mode+0xa3/0x340 [ 503.213025][T12191] syscall_exit_to_user_mode+0xce/0x340 [ 503.218566][T12191] do_syscall_64+0x100/0x230 [ 503.223136][T12191] ? clear_bhb_loop+0x35/0x90 [ 503.227796][T12191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.233712][T12191] RIP: 0033:0x7fce7178cde9 [ 503.238114][T12191] Code: Unable to access opcode bytes at 0x7fce7178cdbf. [ 503.245114][T12191] RSP: 002b:00007fce72559038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 503.253525][T12191] RAX: 000000000003fffd RBX: 00007fce719a6080 RCX: 00007fce7178cde9 [ 503.261476][T12191] RDX: 03fffffffffffeda RSI: 00004000000000c0 RDI: 0000000000000003 [ 503.269427][T12191] RBP: 00007fce7180e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 503.277378][T12191] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 503.285340][T12191] R13: 0000000000000000 R14: 00007fce719a6080 R15: 00007fff6c061a78 [ 503.293326][T12191] [ 503.296326][T12191] Modules linked in: [ 503.300214][T12191] ---[ end trace 0000000000000000 ]--- [ 503.305649][T12191] RIP: 0010:filemap_unaccount_folio+0x73d/0x7d0 [ 503.311877][T12191] Code: de c7 ff 48 89 df 48 c7 c6 e0 d3 13 8c e8 8b b2 0f 00 90 0f 0b e8 93 de c7 ff 48 89 df 48 c7 c6 c0 d2 13 8c e8 74 b2 0f 00 90 <0f> 0b e8 7c de c7 ff 48 89 df 48 c7 c6 e0 d3 13 8c e8 5d b2 0f 00 [ 503.331461][T12191] RSP: 0018:ffffc90003347070 EFLAGS: 00010046 [ 503.337512][T12191] RAX: 3f2e157a2fdc4300 RBX: ffffea0001100680 RCX: ffffc90003346c03 [ 503.345466][T12191] RDX: 0000000000000002 RSI: ffffffff8c0ab8e0 RDI: ffffffff8c5fb780 [ 503.353418][T12191] RBP: 0000000000000000 R08: ffffffff901a3377 R09: 1ffffffff203466e [ 503.361366][T12191] R10: dffffc0000000000 R11: fffffbfff203466f R12: dffffc0000000000 [ 503.369318][T12191] R13: 1ffffd40002200d1 R14: ffff88807d818a28 R15: ffffea0001100688 [ 503.377271][T12191] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 503.386179][T12191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.392749][T12191] CR2: 0000400001000000 CR3: 000000000e738000 CR4: 00000000003526f0 [ 503.400707][T12191] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 503.408661][T12191] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 503.416628][T12191] Kernel panic - not syncing: Fatal exception [ 503.422931][T12191] Kernel Offset: disabled [ 503.427240][T12191] Rebooting in 86400 seconds..