last executing test programs: 3m22.040927626s ago: executing program 0 (id=1): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r3, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setuid(0xee00) close(0xffffffffffffffff) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) capset(&(0x7f0000000340)={0x19980330}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff020000bfa3000000000000070300c000feffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000100001d440000000000007a0a00fe00ffffffc3030000a0000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="18000000000000000000000000000000711051"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40002001}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000400)={0x12000000000000, 0xcf3, 0x2}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r7, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x8000000, 0x1841, 0x204, 0x3}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24004080}, 0x2000c810) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x13) 3m20.757915322s ago: executing program 0 (id=9): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000200)={&(0x7f00000026c0)=ANY=[], 0x48}}, 0x0) unshare(0x2040400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x204) 3m20.332687333s ago: executing program 0 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d000100006000090400800203000000092106040001220500090581032000090807090502"], 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r4 = socket(0x1, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x0, 0x60}, 0x28) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x20060400) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000002044104d7a00000001000109022400010000000009040009010300020009210500000122050009058103ff"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010000304000000800000000000000000", @ANYRES32=0x0, @ANYBLOB="c70e0900000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="905026dfc01e1f2080624d904c033519e62ba630af24917a0f"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3m17.778217289s ago: executing program 0 (id=19): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001a00010000000000ec58e04d5fb2dffb0000000000000000080001000f0001"], 0x24}}, 0x0) 3m17.350949754s ago: executing program 0 (id=22): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000050f68436ba123bb8eaa2b24f442cb30be009c8ed63f51820817a2c92322bfd1b9a780f3ab7ef03eeab27a4eaa9690a02ae2bab4a7f672b7cf896e6ba4298d8a8630f69cca53cdb997b34c3329f", 0x52}], 0x1, 0x0, 0x0) 3m16.900448784s ago: executing program 32 (id=22): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000050f68436ba123bb8eaa2b24f442cb30be009c8ed63f51820817a2c92322bfd1b9a780f3ab7ef03eeab27a4eaa9690a02ae2bab4a7f672b7cf896e6ba4298d8a8630f69cca53cdb997b34c3329f", 0x52}], 0x1, 0x0, 0x0) 28.323287629s ago: executing program 2 (id=490): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 27.46927538s ago: executing program 2 (id=494): io_setup(0x4d, &(0x7f0000001d80)=0x0) io_pgetevents(r0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) 26.224504554s ago: executing program 2 (id=498): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) sendfile(r0, r0, &(0x7f0000000200)=0x2, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x800, 0x0) mlockall(0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 24.005532284s ago: executing program 2 (id=503): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) sendto$inet6(r0, 0x0, 0x0, 0xa0f15a6d21a68a81, &(0x7f00000000c0)={0xa, 0x0, 0x4, @local}, 0x1c) 22.590519201s ago: executing program 2 (id=505): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x1) 22.313715917s ago: executing program 2 (id=507): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) msgctl$IPC_RMID(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000003c0)={r5, 0x2, 0x800, "4930091034314eda8d763cfd3d33f5954f9924e8c05f7e959b7ecb4d64655f3b45b73b2f753a88be28f48d9da3a1997d1875fb0c082ecd2d8fb60473a757f3d0711ddd8854ef557d5796b86af79298e7382d770efea10c8df1d2cbbbb3b638724526dae7c2df3397a5287985e75b17439845dd00968fe5c10e63f5626a318d2529f5ad96d9d89409a5e032c7899bb449c83091bfc51876bcaa"}) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 10.770032428s ago: executing program 5 (id=529): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xd, 0x2, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbf6115bd48970e86a02", 0x30314142}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000001c00), 0x0, 0x240080c4) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r3) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f0000000840), &(0x7f0000004880)=@udp=r6}, 0x20) recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)=""/156, 0x9c}], 0x1}, 0x22) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) setpgid(r5, r5) waitid(0x2, r5, 0x0, 0x4, 0x0) socket$inet(0x10, 0x3, 0x0) 9.10985387s ago: executing program 5 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) accept4(r1, 0x0, 0x0, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000003c0)={0x38, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x0, 0x7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004084}, 0x4000000) syz_open_dev$vim2m(0x0, 0x3ff, 0x2) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80882, 0x0) 9.025385922s ago: executing program 4 (id=532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x20, r1, 0x101, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044014}, 0x48000) 8.112498905s ago: executing program 5 (id=533): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) 7.693943056s ago: executing program 4 (id=534): socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 7.156695122s ago: executing program 33 (id=507): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) msgctl$IPC_RMID(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000003c0)={r5, 0x2, 0x800, "4930091034314eda8d763cfd3d33f5954f9924e8c05f7e959b7ecb4d64655f3b45b73b2f753a88be28f48d9da3a1997d1875fb0c082ecd2d8fb60473a757f3d0711ddd8854ef557d5796b86af79298e7382d770efea10c8df1d2cbbbb3b638724526dae7c2df3397a5287985e75b17439845dd00968fe5c10e63f5626a318d2529f5ad96d9d89409a5e032c7899bb449c83091bfc51876bcaa"}) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 7.146131161s ago: executing program 4 (id=537): symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73ba1f267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)={0x1c, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4, 0xc6}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4850) 5.726762264s ago: executing program 4 (id=540): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) 5.501975354s ago: executing program 1 (id=542): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c000) 5.488511353s ago: executing program 4 (id=543): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0xffc0, 0x0, 0x2, 0x8, 0x80000001}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4850) 5.201570803s ago: executing program 1 (id=545): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0xf, 0x100, 0x1, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x2b, 0xb, 0x70bd27, 0x0, {0x2}}, 0x14}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "fd9063", 0x2, 0x3a, 0x0, @empty, @mcast2}}}}}}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x470780) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d", @ANYRES64], 0xf8) setpriority(0x2, 0x0, 0x7) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x3, 0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0x1, 0x0, 0x4) 5.092830042s ago: executing program 4 (id=546): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_uring_setup(0x566, &(0x7f00000002c0)={0x0, 0x338c, 0x4000, 0x1, 0x1cd}) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x1, 0x41c}}}, 0x7) 4.959487595s ago: executing program 3 (id=547): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) 4.49750132s ago: executing program 1 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1008f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, 0x0, 0x0) listen(r4, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, r7, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4, 0x1c}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x4044040}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'rose0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000340)={0x0, @initdev, @remote}, &(0x7f0000000400)=0xc) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x4a4, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x2a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa, 0x5, "74f5d3761e5c"}, @ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "73fe2d91861536cc642e315cca54a2ee770bfe03f7ba5dd3bf59ec4fc3fcd9b278b8f6568d88b731040df672e2ecf06d9f4b1171cf8f9685"}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/iommu\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/nbd#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/nbd#\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/iommu\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/\\*(\t\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/iommu\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/nbd#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_VALUE={0x8f, 0x4, "f397a3dd59feb462091681aae0fb68400a69f90cfcea254b99b198a78e735cb317d0252979451e88c4e323f7045a95cca72be79b7b7ddc529d4a29b99be871cb4998ce584044ec5f4854b3db9165f3ba6a49ea22dbf98ab1fed1d9b6ba9584cfce6740761582158984061efd2bfb4fa453885b1c7f2758c53643bc3eb80b1c61832eec848ce1245ade7f00"}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/iommu\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xde{@%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}]}]}, @ETHTOOL_A_BITSET_MASK={0x56, 0x5, "9b47d5af9fb6854b02883fce93fa39b1fcd147e10b83fa147e5b895f7cc94c9089b61303454c9817afb443deabb0c1d673da0dfd98a771b4c6a72735d0e13f36cf0c9aef43e4346af7f2f2e3cf16a98c35e7"}]}, @ETHTOOL_A_WOL_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0xb8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb3, 0x4, "ddb6ee7d38e5e71824467bf3a87e4abdd9d8fe82a3e385f78d16cbd8cb50a3f82a2e30044404c9024218d9ae0a3d31da319b08c54ea142c451adf1b6b62dbe0356d9076c8d9a926ec0abdaf6aa1497290c4166dcc79c8627de42df8bf18b282982f407e20531c0a7199ca486cfa24602bda5abb8668e9a46346c5ceeb50963625586b6fe4b9876deb1f38655c66ab48f8bf27f7a52523dd40b4f12f1a9e69ea569df5a184647b00734191d1a69d1e4"}]}, @ETHTOOL_A_WOL_SOPASS={0x74, 0x3, "cecb4ecc8c113976827eb814b333a4e3702350e38c8825c6f31cdf875264ebf406b251b4d8a88f2373eda84cbb901a6cb3c934772f0515381b4dbb21c07891d698fdb48331b39a68f4808c1e4dfee4d3c8e422925f8e5073c3baddf1e6183162aab37d351f27e4352cfabed4ff7d006e"}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r12, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r12, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xfffffffffffffffb}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r12, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r12, 0x0, 0x0, 0x0, 0x0, 0x1}) r13 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0xac102) ioctl$BLKREPORTZONE(r13, 0xc0101282, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) 4.497224856s ago: executing program 3 (id=549): syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340), &(0x7f0000000600)) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000580)={{0x84, @loopback, 0x4e24, 0x3, 'ovf\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e23, 0x10000, 0x1000, 0x80012d5a, 0x12d5c}}, 0x44) sendmsg$rds(r0, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r9, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) 2.382803682s ago: executing program 1 (id=550): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000035327ae308fac2dd0b920003000000e75f00000002000004081d62", @ANYRES32, @ANYBLOB='B\x00'/18, @ANYRES32=0x0, @ANYBLOB="0100000001000000010000000d"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) accept4(r2, &(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, &(0x7f0000000540)=0x80, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.369405781s ago: executing program 3 (id=551): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0xb, 0x141341) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000140)=0x8001) ioctl$USBDEVFS_RESET(r0, 0x5514) 2.269807745s ago: executing program 5 (id=552): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000200)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2.063852936s ago: executing program 3 (id=553): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 1.957070631s ago: executing program 5 (id=554): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_int(r0, 0x1, 0x2, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000380)="5800000014000300000000000000679abeff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff5a60525808f91cb2cd3d8586dd77daf2f7a5512cd5f0c6456c6fa101e8c10d18a759023acdc938c9eab14910348ac0e2b7", 0x89}], 0x1) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x4000000) 1.877917497s ago: executing program 1 (id=555): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x44) 1.152153206s ago: executing program 3 (id=556): io_uring_setup(0x5de1, &(0x7f0000000000)={0x0, 0x6cae, 0x1000, 0x1, 0x1e0}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x20a00, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$userns(0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGARP(r1, 0x8954, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40011) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.026463342s ago: executing program 1 (id=557): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1218000, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) ptrace$setregset(0x4205, r1, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)="47221ada7bad185b39ed6435c60c3a7092064e5ee740cd7332fc6c6f85f49ed432f73ccf4b1d5129b3ba8b68e30928bbd4887f44b3b28e096a26217004b9941ea08cb28f2cc277f263362d543065a75bbbf300dd09c44af918db0367774403edea1b51d8725aa842e464ea9f1288bae64c71925b1ef1ecb4469b0218986bf4cf081a9967fede220adc263aee5bd8bf343deff3bfbb24485eed970a3db44ff053d89ca217e4568c45a43dc448e2a401c72121f13b2a93bf54845754dae212b7089dbe2e363d55", 0xc6}) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x20, 0x800000000004, @thr={&(0x7f0000000400)="0889e275b81ad6f73c0abbefb21c", &(0x7f0000000580)="2bb1fbf8cff6cc15488f39a2d456310827b846db745a14e16a4bdd1b24c9466e91b56d"}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}) socket$vsock_stream(0x28, 0x1, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 958.79532ms ago: executing program 5 (id=558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x100}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80003, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 3 (id=559): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ptrace(0x10, 0x1) kernel console output (not intermixed with test programs): n layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.450361][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.468388][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.475470][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.502693][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.552799][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.559893][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.585918][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.627544][ T5844] team0: Port device team_slave_0 added [ 93.636636][ T5844] team0: Port device team_slave_1 added [ 93.665256][ T5832] hsr_slave_0: entered promiscuous mode [ 93.672092][ T5832] hsr_slave_1: entered promiscuous mode [ 93.709975][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.717183][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.743939][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.826708][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.833723][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.860719][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.891767][ T5836] hsr_slave_0: entered promiscuous mode [ 93.899474][ T5836] hsr_slave_1: entered promiscuous mode [ 93.905948][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.914153][ T5836] Cannot create hsr debugfs directory [ 93.930755][ T5841] hsr_slave_0: entered promiscuous mode [ 93.937842][ T5841] hsr_slave_1: entered promiscuous mode [ 93.944113][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.952356][ T5841] Cannot create hsr debugfs directory [ 94.045967][ T5846] hsr_slave_0: entered promiscuous mode [ 94.052579][ T5846] hsr_slave_1: entered promiscuous mode [ 94.059531][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.067318][ T5846] Cannot create hsr debugfs directory [ 94.246629][ T5844] hsr_slave_0: entered promiscuous mode [ 94.253233][ T5844] hsr_slave_1: entered promiscuous mode [ 94.259676][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.267497][ T5844] Cannot create hsr debugfs directory [ 94.754317][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.773674][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.794308][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.812987][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.870996][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.882054][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.901479][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.926015][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.025222][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.039422][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.075269][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.083581][ T5835] Bluetooth: hci4: command tx timeout [ 95.089450][ T51] Bluetooth: hci0: command tx timeout [ 95.107446][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.157404][ T51] Bluetooth: hci2: command tx timeout [ 95.157433][ T5835] Bluetooth: hci3: command tx timeout [ 95.162850][ T5838] Bluetooth: hci1: command tx timeout [ 95.238624][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.264460][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.274334][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.287275][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.305713][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.330761][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.400096][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.439214][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.446720][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.468547][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.503795][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.516610][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.523787][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.535584][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.549153][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.570641][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.618113][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.625291][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.666019][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.673251][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.694015][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.759804][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.807686][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.814893][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.842290][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.849519][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.963137][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.055148][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.121216][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.128448][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.166490][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.173708][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.261228][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.327714][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.403122][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.410356][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.449209][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.456483][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.487966][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.571282][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.695867][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.791265][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.991688][ T5836] veth0_vlan: entered promiscuous mode [ 97.015022][ T5832] veth0_vlan: entered promiscuous mode [ 97.054788][ T5836] veth1_vlan: entered promiscuous mode [ 97.087775][ T5832] veth1_vlan: entered promiscuous mode [ 97.166069][ T51] Bluetooth: hci0: command tx timeout [ 97.171658][ T5838] Bluetooth: hci4: command tx timeout [ 97.182825][ T1218] cfg80211: failed to load regulatory.db [ 97.234448][ T5832] veth0_macvtap: entered promiscuous mode [ 97.241925][ T5838] Bluetooth: hci3: command tx timeout [ 97.251970][ T51] Bluetooth: hci2: command tx timeout [ 97.254642][ T5835] Bluetooth: hci1: command tx timeout [ 97.280802][ T5836] veth0_macvtap: entered promiscuous mode [ 97.290252][ T5832] veth1_macvtap: entered promiscuous mode [ 97.318821][ T5836] veth1_macvtap: entered promiscuous mode [ 97.342456][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.380617][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.395760][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.405477][ T5841] veth0_vlan: entered promiscuous mode [ 97.423029][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.434830][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.444644][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.454436][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.463364][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.481855][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.507836][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.522859][ T5841] veth1_vlan: entered promiscuous mode [ 97.531685][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.541638][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.550740][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.559819][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.644460][ T5846] veth0_vlan: entered promiscuous mode [ 97.692803][ T5846] veth1_vlan: entered promiscuous mode [ 97.791828][ T5841] veth0_macvtap: entered promiscuous mode [ 97.813904][ T5846] veth0_macvtap: entered promiscuous mode [ 97.825182][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.830078][ T5846] veth1_macvtap: entered promiscuous mode [ 97.839041][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.844407][ T5844] veth0_vlan: entered promiscuous mode [ 97.857220][ T5841] veth1_macvtap: entered promiscuous mode [ 97.895219][ T5844] veth1_vlan: entered promiscuous mode [ 97.923770][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.976082][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.987915][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.990908][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.995782][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.032136][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.045214][ T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.054706][ T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.055628][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.072923][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.082283][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.095520][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.166219][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.177882][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.187791][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.198570][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.225399][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.289248][ T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.292162][ T5844] veth0_macvtap: entered promiscuous mode [ 98.309410][ T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.419081][ T5844] veth1_macvtap: entered promiscuous mode [ 98.441646][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.465791][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.580905][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.619523][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.623839][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.686279][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.871448][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.880410][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.889651][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.898710][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.160044][ T5966] capability: warning: `syz.0.1' uses 32-bit capabilities (legacy support in use) [ 99.307284][ T51] Bluetooth: hci0: command tx timeout [ 99.312918][ T5835] Bluetooth: hci4: command tx timeout [ 99.321782][ T5849] Bluetooth: hci2: command tx timeout [ 99.327942][ T5838] Bluetooth: hci1: command tx timeout [ 99.343773][ T51] Bluetooth: hci3: command tx timeout [ 99.703880][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.727990][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.910093][ T5975] tmpfs: Unknown parameter 'usrquota0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 99.910093][ T5975] 0 [ 100.170116][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.178715][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.204240][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.267364][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.375423][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.402162][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.767085][ T5826] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.106787][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.356334][ T24] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 101.416907][ T24] usb 5-1: config 0 has no interface number 0 [ 101.433898][ T24] usb 5-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 101.470527][ T24] usb 5-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 101.507051][ T24] usb 5-1: config 0 interface 153 has no altsetting 0 [ 101.516572][ T5826] usb 1-1: Using ep0 maxpacket: 32 [ 101.518236][ T5999] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.532519][ T5826] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 101.544431][ T24] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 101.559001][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.577055][ T24] usb 5-1: Product: syz [ 101.586551][ T24] usb 5-1: Manufacturer: syz [ 101.591799][ T24] usb 5-1: SerialNumber: syz [ 101.606901][ T5826] usb 1-1: config 0 interface 0 has no altsetting 0 [ 101.613030][ T6000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11'. [ 101.613590][ T5826] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 101.663030][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.685645][ T24] usb 5-1: config 0 descriptor?? [ 101.696366][ T5826] usb 1-1: config 0 descriptor?? [ 101.726362][ T6000] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11'. [ 101.743939][ T24] hub 5-1:0.153: bad descriptor, ignoring hub [ 101.754514][ T24] hub 5-1:0.153: probe with driver hub failed with error -5 [ 101.757154][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 101.763750][ T24] sierra 5-1:0.153: Sierra USB modem converter detected [ 101.990552][ T6013] qrtr: Invalid version 47 [ 102.076653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 102.086875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.135150][ T5981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.157051][ T5981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.183283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.183401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.226964][ T30] audit: type=1326 audit(1755369370.342:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6014 comm="syz.2.16" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e2738ebe9 code=0x0 [ 102.277754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 102.316964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 102.365291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 102.437390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 102.566962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 102.589110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 102.592900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.726718][ T5882] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.841224][ T5826] usbhid 1-1:0.0: can't add hid device: -71 [ 102.857526][ T5826] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 102.872847][ T5826] usb 1-1: USB disconnect, device number 2 [ 102.926624][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 102.958698][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.977968][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.988271][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 103.032624][ T5882] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 103.060605][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.090374][ T5882] usb 2-1: config 0 descriptor?? [ 103.111953][ T5882] usbhid 2-1:0.0: can't add hid device: -22 [ 103.126607][ T5882] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 103.315520][ T5882] usb 2-1: USB disconnect, device number 2 [ 103.373856][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.658029][ T24] usb 5-1: USB disconnect, device number 2 [ 103.664978][ T24] sierra 5-1:0.153: device disconnected [ 103.675722][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.791194][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.979774][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.170795][ T49] bridge_slave_1: left allmulticast mode [ 105.226589][ T49] bridge_slave_1: left promiscuous mode [ 105.244059][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.304497][ T49] bridge_slave_0: left allmulticast mode [ 105.340506][ T49] bridge_slave_0: left promiscuous mode [ 105.369303][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.405213][ T6054] mmap: syz.4.29 (6054) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.483258][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.492080][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.499938][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.510318][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.518382][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.642692][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.725952][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 106.127311][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 106.147538][ T24] usb 3-1: config 0 has an invalid interface number: 193 but max is 0 [ 106.165829][ T24] usb 3-1: config 0 has no interface number 0 [ 106.659291][ T24] usb 3-1: New USB device found, idVendor=08d1, idProduct=0001, bcdDevice=f2.70 [ 106.673908][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.720061][ T24] usb 3-1: Product: syz [ 106.732972][ T24] usb 3-1: Manufacturer: syz [ 106.741946][ T24] usb 3-1: SerialNumber: syz [ 106.750123][ T24] usb 3-1: config 0 descriptor?? [ 106.766066][ T24] usb 3-1: selecting invalid altsetting 1 [ 106.772178][ T24] catc 3-1:0.193: Can't set altsetting 1. [ 106.778278][ T24] catc 3-1:0.193: probe with driver catc failed with error -5 [ 106.954531][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.979401][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.021231][ T49] bond0 (unregistering): Released all slaves [ 107.305355][ T6074] Zero length message leads to an empty skb [ 107.348501][ T6074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.33'. [ 107.716837][ T51] Bluetooth: hci0: command tx timeout [ 108.946890][ T5902] usb 3-1: USB disconnect, device number 2 [ 109.118765][ T6089] bridge_slave_0: left allmulticast mode [ 109.124610][ T6089] bridge_slave_0: left promiscuous mode [ 109.142234][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.157484][ T1210] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.205230][ T6089] bridge_slave_1: left allmulticast mode [ 109.211351][ T6089] bridge_slave_1: left promiscuous mode [ 109.231972][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.270393][ T6089] bond0: (slave bond_slave_0): Releasing backup interface [ 109.308161][ T6089] bond0: (slave bond_slave_1): Releasing backup interface [ 109.329186][ T1210] usb 2-1: Using ep0 maxpacket: 32 [ 109.342572][ T6089] team0: Port device team_slave_0 removed [ 109.343056][ T1210] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.544390][ T6089] team0: Port device team_slave_1 removed [ 109.568020][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.640724][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.641338][ T1210] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 109.693530][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.745540][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.797238][ T51] Bluetooth: hci0: command tx timeout [ 109.813903][ T1210] usb 2-1: Product: syz [ 109.838527][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.852734][ T1210] usb 2-1: Manufacturer: syz [ 109.911956][ T1210] usb 2-1: SerialNumber: syz [ 109.992039][ T1210] usb 2-1: config 0 descriptor?? [ 110.276646][ T5902] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.386217][ T49] hsr_slave_0: left promiscuous mode [ 110.395135][ T49] hsr_slave_1: left promiscuous mode [ 110.405070][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.416666][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.433149][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.445510][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.471138][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.494193][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 110.512067][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 110.522559][ T49] veth1_macvtap: left promiscuous mode [ 110.523099][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.535087][ T49] veth0_macvtap: left promiscuous mode [ 110.547560][ T5902] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.574194][ T49] veth1_vlan: left promiscuous mode [ 110.593346][ T49] veth0_vlan: left promiscuous mode [ 110.664888][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.679063][ T6104] netlink: 92 bytes leftover after parsing attributes in process `syz.4.40'. [ 110.701801][ T1210] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 110.756964][ T6104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.40'. [ 110.759160][ T5902] usb 3-1: config 0 descriptor?? [ 110.772362][ T6104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.40'. [ 111.124026][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.164053][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.410436][ T5902] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 111.621199][ T6098] Cannot find add_set index 0 as target [ 111.652022][ T5902] usb 3-1: USB disconnect, device number 3 [ 111.878178][ T51] Bluetooth: hci0: command tx timeout [ 114.075508][ T51] Bluetooth: hci0: command tx timeout [ 114.106653][ T6132] netlink: 56 bytes leftover after parsing attributes in process `syz.1.47'. [ 114.685693][ T6148] process 'syz.4.49' launched './file1' with NULL argv: empty string added [ 114.722274][ T6148] ======================================================= [ 114.722274][ T6148] WARNING: The mand mount option has been deprecated and [ 114.722274][ T6148] and is ignored by this kernel. Remove the mand [ 114.722274][ T6148] option from the mount to silence this warning. [ 114.722274][ T6148] ======================================================= [ 114.760376][ T49] team0 (unregistering): Port device team_slave_1 removed [ 114.813031][ T49] team0 (unregistering): Port device team_slave_0 removed [ 115.566640][ T5917] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.771539][ T6133] dummy0: entered promiscuous mode [ 115.781804][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 115.789585][ T6135] veth1_macvtap: left promiscuous mode [ 115.806800][ T6135] macsec0: entered promiscuous mode [ 115.816598][ T1210] usb 2-1: USB disconnect, device number 3 [ 115.830370][ T6135] macsec0: entered allmulticast mode [ 115.837962][ T5917] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.867807][ T5917] usb 4-1: config 0 has no interface number 0 [ 115.886005][ T5917] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 115.930493][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.964027][ T5917] usb 4-1: Product: syz [ 115.978569][ T5917] usb 4-1: Manufacturer: syz [ 115.983365][ T5917] usb 4-1: SerialNumber: syz [ 116.014103][ T5917] usb 4-1: config 0 descriptor?? [ 116.050341][ T5917] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 116.340956][ T6055] chnl_net:caif_netlink_parms(): no params data found [ 116.997398][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.022446][ T6170] netlink: 68 bytes leftover after parsing attributes in process `syz.1.55'. [ 117.043763][ T6170] netlink: 156 bytes leftover after parsing attributes in process `syz.1.55'. [ 117.259200][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.279149][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.293174][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.311360][ T6055] bridge_slave_0: entered allmulticast mode [ 117.327092][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.352171][ T6055] bridge_slave_0: entered promiscuous mode [ 117.364029][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 117.379738][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.389094][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 117.401894][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.410166][ T24] usb 3-1: SerialNumber: syz [ 117.416545][ T6055] bridge_slave_1: entered allmulticast mode [ 117.451581][ T6055] bridge_slave_1: entered promiscuous mode [ 117.520295][ T5917] gspca_spca1528: reg_w err -110 [ 117.525576][ T6180] netlink: 'syz.4.57': attribute type 12 has an invalid length. [ 117.544196][ T5917] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 117.553321][ T6180] netlink: 132 bytes leftover after parsing attributes in process `syz.4.57'. [ 117.713971][ T6187] syz.1.58 uses obsolete (PF_INET,SOCK_PACKET) [ 117.834050][ T6055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.873037][ T6055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.980618][ T5917] usb 4-1: USB disconnect, device number 2 [ 118.197440][ T6191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.58'. [ 119.013251][ T6195] netlink: 384 bytes leftover after parsing attributes in process `syz.4.59'. [ 119.049938][ T24] usb 3-1: 0:2 : does not exist [ 119.058060][ T24] usb 3-1: unit 5 not found! [ 119.315928][ T24] usb 3-1: USB disconnect, device number 4 [ 119.523089][ T6055] team0: Port device team_slave_0 added [ 119.533753][ T6055] team0: Port device team_slave_1 added [ 120.152556][ T6055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.164035][ T6055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.240492][ T6055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.274118][ T6055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.299940][ T6055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.461105][ T6055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.018204][ T6217] evm: overlay not supported [ 121.121140][ T6055] hsr_slave_0: entered promiscuous mode [ 121.291268][ T6221] capability: warning: `syz.3.66' uses deprecated v2 capabilities in a way that may be insecure [ 121.349840][ T6055] hsr_slave_1: entered promiscuous mode [ 122.398059][ T6224] tipc: Enabling of bearer rejected, failed to enable media [ 122.993968][ T6055] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.017217][ T6055] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.168954][ T6055] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.221807][ T6055] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.229131][ T6251] cgroup: fork rejected by pids controller in /syz3 [ 123.370366][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.668190][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 123.865947][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 123.896603][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.904772][ T24] usb 2-1: Product: syz [ 123.931017][ T24] usb 2-1: Manufacturer: syz [ 123.951257][ T24] usb 2-1: SerialNumber: syz [ 123.961371][ T24] usb 2-1: config 0 descriptor?? [ 124.017976][ T6257] usb usb8: usbfs: process 6257 (syz.2.76) did not claim interface 0 before use [ 124.117449][ T6055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.185222][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 124.206157][ T6055] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.298103][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.298330][ T6269] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 124.306219][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.336645][ T6269] overlayfs: missing 'lowerdir' [ 124.345231][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.352502][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.512645][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.619166][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.630317][ T5909] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 124.724980][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.791537][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 124.814309][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.846001][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.856177][ T5909] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 124.868747][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.892945][ T5909] usb 5-1: config 0 descriptor?? [ 124.921237][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.060134][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 125.091090][ T24] usb 2-1: USB disconnect, device number 4 [ 125.209708][ T5917] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 125.251787][ T5917] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 125.348390][ T5909] sony 0003:054C:024B.0003: unexpected long global item [ 125.355987][ T5909] sony 0003:054C:024B.0003: parse failed [ 125.361871][ T5909] sony 0003:054C:024B.0003: probe with driver sony failed with error -22 [ 125.507656][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 125.517182][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 125.522875][ T9] usb 5-1: USB disconnect, device number 3 [ 125.531799][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 125.544445][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 125.559187][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 125.684628][ T36] bond0 (unregistering): Released all slaves [ 125.804575][ T6055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.357203][ T36] hsr_slave_0: left promiscuous mode [ 127.428671][ T36] hsr_slave_1: left promiscuous mode [ 127.498703][ T36] veth1_macvtap: left promiscuous mode [ 127.526723][ T36] veth0_macvtap: left promiscuous mode [ 127.539721][ T36] veth1_vlan: left promiscuous mode [ 127.545480][ T36] veth0_vlan: left promiscuous mode [ 127.706635][ T51] Bluetooth: hci1: command tx timeout [ 129.478892][ T6284] chnl_net:caif_netlink_parms(): no params data found [ 129.717148][ T51] Bluetooth: hci1: command tx timeout [ 130.013985][ T6284] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.022668][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.032035][ T6344] hugetlbfs: Unknown parameter 'lode' [ 130.034674][ T6284] bridge_slave_0: entered allmulticast mode [ 130.199466][ T5917] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 130.360363][ T6284] bridge_slave_0: entered promiscuous mode [ 130.443688][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 130.778109][ T5917] usb 5-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=79.ba [ 130.787644][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.796107][ T5917] usb 5-1: Product: syz [ 130.829612][ T5917] usb 5-1: Manufacturer: syz [ 130.906316][ T5917] usb 5-1: SerialNumber: syz [ 131.247688][ T5917] usb 5-1: config 0 descriptor?? [ 131.260635][ T6345] warning: `syz.2.92' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.286930][ T6284] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.294107][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.307971][ T6284] bridge_slave_1: entered allmulticast mode [ 131.329592][ T6284] bridge_slave_1: entered promiscuous mode [ 131.359823][ T6055] veth0_vlan: entered promiscuous mode [ 131.394937][ T6055] veth1_vlan: entered promiscuous mode [ 131.467176][ T5917] snd-usb-hiface 5-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 131.519837][ T6284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.551779][ T6055] veth0_macvtap: entered promiscuous mode [ 131.562738][ T6284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.690831][ T6341] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.758664][ T6055] veth1_macvtap: entered promiscuous mode [ 131.801550][ T51] Bluetooth: hci1: command tx timeout [ 131.866981][ T5917] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.895904][ T24] usb 5-1: USB disconnect, device number 4 [ 131.913784][ T6284] team0: Port device team_slave_0 added [ 131.924069][ T6284] team0: Port device team_slave_1 added [ 131.976020][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.031019][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.038550][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 132.038584][ T5917] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 132.072871][ T5917] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 132.094830][ T6284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.101995][ T6284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.114202][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.143794][ T5917] usb 3-1: Product: syz [ 132.148156][ T5917] usb 3-1: Manufacturer: syz [ 132.152796][ T5917] usb 3-1: SerialNumber: syz [ 132.166804][ T6284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.172392][ T5917] usb 3-1: config 0 descriptor?? [ 132.188411][ T6284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.196305][ T6284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.201792][ T5917] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 132.244008][ T6284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.270299][ T6055] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.279631][ T6055] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.298551][ T6055] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.307689][ T6055] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.505399][ T6284] hsr_slave_0: entered promiscuous mode [ 132.526749][ T6284] hsr_slave_1: entered promiscuous mode [ 132.534147][ T5917] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 132.561906][ T6284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.588532][ T6284] Cannot create hsr debugfs directory [ 132.644203][ T5826] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.663202][ T5826] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 132.846599][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 132.909007][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.923377][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.038266][ T9] usb 5-1: too many configurations: 216, using maximum allowed: 8 [ 133.055298][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 133.070961][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.080077][ T9] usb 5-1: can't read configurations, error -61 [ 133.097542][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.247174][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 133.527420][ T6284] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 133.876881][ T51] Bluetooth: hci1: command tx timeout [ 134.166856][ T6284] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 134.193033][ T6284] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 134.207177][ T9] usb 5-1: too many configurations: 216, using maximum allowed: 8 [ 134.224431][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 134.236896][ T9] usb 5-1: can't read configurations, error -61 [ 134.244686][ T6284] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 134.252162][ T9] usb usb5-port1: attempt power cycle [ 134.304572][ T30] audit: type=1326 audit(1755369401.712:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6362 comm="syz.5.23" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff58dd8ebe9 code=0x0 [ 134.498028][ T6284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.542850][ T6284] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.584946][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.592158][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.627614][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 134.646688][ T5917] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 134.655642][ T5950] usb 3-1: USB disconnect, device number 5 [ 134.685340][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.692685][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.711374][ T9] usb 5-1: too many configurations: 216, using maximum allowed: 8 [ 134.738618][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 134.766712][ T9] usb 5-1: can't read configurations, error -61 [ 134.935381][ T5917] usb 6-1: device descriptor read/64, error -71 [ 134.986884][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 135.018961][ T9] usb 5-1: too many configurations: 216, using maximum allowed: 8 [ 135.049047][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 135.066745][ T9] usb 5-1: can't read configurations, error -61 [ 135.087537][ T9] usb usb5-port1: unable to enumerate USB device [ 135.216581][ T5917] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 135.377862][ T5917] usb 6-1: device descriptor read/64, error -71 [ 135.481816][ T6284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.503883][ T5917] usb usb6-port1: attempt power cycle [ 135.629677][ T6284] veth0_vlan: entered promiscuous mode [ 135.682773][ T6284] veth1_vlan: entered promiscuous mode [ 135.856517][ T5917] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 135.860281][ T6284] veth0_macvtap: entered promiscuous mode [ 135.907185][ T5917] usb 6-1: device descriptor read/8, error -71 [ 136.483868][ T6284] veth1_macvtap: entered promiscuous mode [ 136.528261][ T5917] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 136.574809][ T6284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.587378][ T5917] usb 6-1: device descriptor read/8, error -71 [ 136.632794][ T6284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.660135][ T6284] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.693180][ T6284] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.717132][ T5917] usb usb6-port1: unable to enumerate USB device [ 136.741327][ T6284] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.776878][ T6284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.937337][ T5909] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.100716][ T5909] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 137.113187][ T5909] usb 2-1: config 0 has no interface number 0 [ 137.142645][ T5909] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.173227][ T5909] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.184894][ T5909] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.222229][ T5909] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 137.288111][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.547150][ T5909] usb 2-1: config 0 descriptor?? [ 137.578345][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.586284][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.709290][ T6412] netlink: 201856 bytes leftover after parsing attributes in process `syz.5.106'. [ 137.722118][ T6412] netlink: zone id is out of range [ 137.727986][ T6412] netlink: zone id is out of range [ 137.756651][ T6412] netlink: zone id is out of range [ 137.770462][ T6412] netlink: zone id is out of range [ 137.787367][ T6414] netlink: 44 bytes leftover after parsing attributes in process `syz.5.106'. [ 137.811684][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.825961][ T6412] netlink: zone id is out of range [ 137.844650][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.871174][ T6412] netlink: zone id is out of range [ 137.906076][ T6412] netlink: zone id is out of range [ 137.916472][ T6412] netlink: zone id is out of range [ 137.936704][ T6412] netlink: zone id is out of range [ 137.941895][ T6412] netlink: zone id is out of range [ 137.989369][ T5909] hid (null): report_id 35660 is invalid [ 137.992024][ T6415] mkiss: ax0: crc mode is auto. [ 138.121786][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.133578][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.253502][ T5909] input: HID 28bd:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.0005/input/input5 [ 138.423265][ T5909] uclogic 0003:28BD:0042.0005: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 138.608601][ T5909] usb 2-1: USB disconnect, device number 5 [ 138.723444][ T6440] netlink: 92 bytes leftover after parsing attributes in process `syz.3.112'. [ 138.737189][ T6440] netlink: 24 bytes leftover after parsing attributes in process `syz.3.112'. [ 138.752034][ T6440] netlink: 24 bytes leftover after parsing attributes in process `syz.3.112'. [ 139.201865][ T6435] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 139.211169][ T6435] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 139.764767][ T5909] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.956866][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 140.113721][ T5909] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 140.174119][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.184130][ T5909] usb 2-1: Product: syz [ 140.204441][ T5909] usb 2-1: Manufacturer: syz [ 140.214597][ T5909] usb 2-1: SerialNumber: syz [ 140.251707][ T5909] usb 2-1: config 0 descriptor?? [ 140.260568][ T5909] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 140.285337][ T5909] usb 2-1: Detected FT232H [ 140.981257][ T5909] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 142.044273][ T6430] autofs: Bad value for 'fd' [ 142.093730][ T6430] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 142.465006][ T6430] overlayfs: missing 'lowerdir' [ 143.216828][ T6472] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.187038][ T5909] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 144.210875][ T5909] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 144.834301][ T5909] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 144.953467][ T5909] usb 2-1: USB disconnect, device number 6 [ 145.009897][ T5909] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 145.313565][ T5909] ftdi_sio 2-1:0.0: device disconnected [ 145.546628][ T5917] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 145.722799][ T5917] usb 3-1: device descriptor read/64, error -71 [ 146.025862][ T5917] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 147.843404][ T6467] netlink: 12 bytes leftover after parsing attributes in process `syz.5.119'. [ 148.156724][ T6505] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 148.319479][ T6501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.126'. [ 148.854755][ T5917] usb 3-1: device descriptor read/64, error -71 [ 149.446977][ T5917] usb usb3-port1: attempt power cycle [ 149.910757][ T6527] netlink: 36 bytes leftover after parsing attributes in process `syz.4.134'. [ 150.036927][ T5917] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 150.077300][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 150.095720][ T5917] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 150.132979][ T5917] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 150.177399][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.228409][ T5917] usb 3-1: Product: syz [ 150.254221][ T5917] usb 3-1: Manufacturer: syz [ 150.268793][ T5917] usb 3-1: SerialNumber: syz [ 150.305464][ T5917] usb 3-1: config 0 descriptor?? [ 150.327561][ T6514] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 150.365301][ T5917] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 150.607053][ T5917] usb 3-1: USB disconnect, device number 8 [ 151.611984][ T6536] netlink: 'syz.5.137': attribute type 4 has an invalid length. [ 151.636488][ T6538] IPVS: sync thread started: state = BACKUP, mcast_ifn = caif0, syncid = 4, id = 0 [ 153.206545][ T5909] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 153.241415][ T30] audit: type=1326 audit(1755369421.362:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6562 comm="syz.5.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58dd8ebe9 code=0x7ffc0000 [ 153.304069][ T30] audit: type=1326 audit(1755369421.362:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6562 comm="syz.5.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58dd8ebe9 code=0x7ffc0000 [ 153.376516][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 153.398681][ T5909] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 153.418128][ T30] audit: type=1326 audit(1755369421.362:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6562 comm="syz.5.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7ff58dd8ebe9 code=0x7ffc0000 [ 153.442745][ T30] audit: type=1326 audit(1755369421.392:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6562 comm="syz.5.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58dd8ebe9 code=0x7ffc0000 [ 153.474557][ T5909] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 153.496901][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.504975][ T5909] usb 3-1: Product: syz [ 153.516753][ T30] audit: type=1326 audit(1755369421.392:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6562 comm="syz.5.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff58dd8ebe9 code=0x7ffc0000 [ 153.546737][ T5909] usb 3-1: Manufacturer: syz [ 153.551741][ T5909] usb 3-1: SerialNumber: syz [ 153.564875][ T5909] usb 3-1: config 0 descriptor?? [ 153.577092][ T30] audit: type=1326 audit(1755369421.392:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6562 comm="syz.5.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58dd8ebe9 code=0x7ffc0000 [ 153.614500][ T5909] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 153.634821][ T5909] usb 3-1: setting power ON [ 153.865753][ T5909] dvb-usb: bulk message failed: -22 (2/0) [ 153.875720][ T30] audit: type=1326 audit(1755369421.392:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6562 comm="syz.5.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff58dd8ebe9 code=0x7ffc0000 [ 154.078084][ T5909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 154.095055][ T6561] cxusb: i2c rd: len=1792 is too big! [ 154.095055][ T6561] [ 154.820478][ T5909] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 154.829343][ T30] audit: type=1326 audit(1755369421.392:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6562 comm="syz.5.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58dd8ebe9 code=0x7ffc0000 [ 154.851414][ T5909] usb 3-1: media controller created [ 155.146493][ T30] audit: type=1326 audit(1755369421.392:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6562 comm="syz.5.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff58dd8ebe9 code=0x7ffc0000 [ 155.239324][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.279502][ T30] audit: type=1326 audit(1755369421.392:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6562 comm="syz.5.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58dd8ebe9 code=0x7ffc0000 [ 155.412055][ T5909] usb 3-1: selecting invalid altsetting 6 [ 155.460244][ T5909] usb 3-1: digital interface selection failed (-22) [ 155.481925][ T5909] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 155.507607][ T5909] usb 3-1: setting power OFF [ 155.512563][ T5909] dvb-usb: bulk message failed: -22 (2/0) [ 155.539578][ T5909] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 155.572108][ T5909] (NULL device *): no alternate interface [ 156.219782][ T5909] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 156.412161][ T5909] usb 3-1: USB disconnect, device number 9 [ 157.653924][ T6619] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.158'. [ 157.773188][ T6622] netlink: 'syz.2.159': attribute type 1 has an invalid length. [ 157.916221][ T6629] netem: incorrect ge model size [ 157.933869][ T6629] netem: change failed [ 158.003678][ T5917] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 158.180551][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.254310][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.353593][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 158.483147][ T5917] usb 2-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 158.570343][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.824085][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 159.133956][ T5917] usb 2-1: config 0 descriptor?? [ 159.208709][ T6636] netlink: 92 bytes leftover after parsing attributes in process `syz.3.162'. [ 159.225820][ T6636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.162'. [ 159.235351][ T6636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.162'. [ 159.306922][ T9] usb 3-1: device descriptor read/64, error -71 [ 159.547057][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 159.803295][ T9] usb 3-1: device descriptor read/64, error -71 [ 159.821924][ T5917] sony 0003:12BA:0100.0006: unknown main item tag 0x0 [ 159.849907][ T5917] sony 0003:12BA:0100.0006: hidraw0: USB HID v0.00 Device [HID 12ba:0100] on usb-dummy_hcd.1-1/input0 [ 159.938383][ T9] usb usb3-port1: attempt power cycle [ 160.088748][ T5917] sony 0003:12BA:0100.0006: failed to claim input [ 160.106735][ T5917] usb 2-1: USB disconnect, device number 7 [ 160.289167][ T6647] netlink: 80 bytes leftover after parsing attributes in process `syz.3.166'. [ 160.300486][ T6647] netlink: 80 bytes leftover after parsing attributes in process `syz.3.166'. [ 160.599523][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 160.637342][ T9] usb 3-1: device descriptor read/8, error -71 [ 160.904344][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'. [ 161.748094][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 162.608120][ T9] usb 3-1: device not accepting address 13, error -71 [ 162.615361][ T9] usb usb3-port1: unable to enumerate USB device [ 163.079668][ T6676] net_ratelimit: 11 callbacks suppressed [ 163.079691][ T6676] netlink: zone id is out of range [ 163.097540][ T6676] netlink: zone id is out of range [ 163.439377][ T6678] netlink: del zone limit has 4 unknown bytes [ 163.755427][ T6676] netlink: set zone limit has 4 unknown bytes [ 164.633556][ T6699] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 166.479663][ T5917] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 166.666507][ T5917] usb 4-1: device descriptor read/64, error -71 [ 166.968953][ T5917] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 167.147647][ T5917] usb 4-1: device descriptor read/64, error -71 [ 167.437014][ T5917] usb usb4-port1: attempt power cycle [ 168.406681][ T5917] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 168.617220][ T5917] usb 4-1: device descriptor read/8, error -71 [ 169.725543][ T6748] netlink: 'syz.4.189': attribute type 11 has an invalid length. [ 169.733569][ T6748] netlink: 'syz.4.189': attribute type 11 has an invalid length. [ 169.742207][ T6748] netlink: 224 bytes leftover after parsing attributes in process `syz.4.189'. [ 169.846688][ T5917] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 170.136473][ T5917] usb 4-1: device not accepting address 6, error -71 [ 170.161399][ T5917] usb usb4-port1: unable to enumerate USB device [ 171.499260][ T6768] netlink: 72 bytes leftover after parsing attributes in process `syz.3.194'. [ 171.509536][ T6768] netlink: 72 bytes leftover after parsing attributes in process `syz.3.194'. [ 171.899262][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 171.899276][ T30] audit: type=1326 audit(1755369440.022:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6765 comm="syz.2.193" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e2738ebe9 code=0x0 [ 172.816593][ T1210] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 173.047371][ T1210] usb 4-1: device descriptor read/64, error -71 [ 173.286601][ T1210] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 173.428828][ T1210] usb 4-1: device descriptor read/64, error -71 [ 173.566976][ T1210] usb usb4-port1: attempt power cycle [ 174.939928][ T1210] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 175.465754][ T6827] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 175.721412][ T1210] usb 4-1: device descriptor read/8, error -71 [ 176.090772][ T24] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 176.121046][ T24] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 176.156903][ T24] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 176.208463][ T24] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 176.276903][ T5909] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 176.469195][ T5909] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 176.500801][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.564880][ T5909] usb 6-1: Product: syz [ 176.590405][ T5909] usb 6-1: Manufacturer: syz [ 176.635868][ T5909] usb 6-1: SerialNumber: syz [ 176.674171][ T5909] usb 6-1: config 0 descriptor?? [ 177.203127][ T5909] ch341 6-1:0.0: ch341-uart converter detected [ 177.415926][ T6863] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 177.422668][ T6863] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.443144][ T6863] vhci_hcd vhci_hcd.0: Device attached [ 177.816646][ T5826] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 177.852331][ T9] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 177.886599][ T5882] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 177.896596][ T30] audit: type=1326 audit(1755369446.012:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6866 comm="syz.4.213" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd595f8ebe9 code=0x0 [ 178.036762][ T5826] usb 2-1: Using ep0 maxpacket: 16 [ 178.066341][ T5826] usb 2-1: config 0 has no interfaces? [ 178.096468][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 178.135396][ T5882] usb 4-1: config 0 has an invalid interface number: 30 but max is 0 [ 178.154146][ T5882] usb 4-1: config 0 has no interface number 0 [ 178.161016][ T5826] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 178.197370][ T5882] usb 4-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=fc.f0 [ 178.213286][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.229333][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.246685][ T5882] usb 4-1: Product: syz [ 178.257368][ T5826] usb 2-1: config 0 descriptor?? [ 178.263324][ T5882] usb 4-1: Manufacturer: syz [ 178.272440][ T5882] usb 4-1: SerialNumber: syz [ 178.315878][ T5909] usb 6-1: ch341-uart converter now attached to ttyUSB0 [ 178.320170][ T5882] usb 4-1: config 0 descriptor?? [ 178.377639][ T5882] quatech2 4-1:0.30: Quatech 2nd gen USB to Serial Driver converter detected [ 178.475620][ T6864] usb 35-1: recv xbuf, 0 [ 178.494415][ T6849] vhci_hcd: stop threads [ 178.501787][ T6849] vhci_hcd: release socket [ 178.513743][ T5909] usb 6-1: USB disconnect, device number 6 [ 178.534916][ T6849] vhci_hcd: disconnect device [ 178.542757][ T5909] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 178.555014][ T5909] ch341 6-1:0.0: device disconnected [ 178.566674][ T9] vhci_hcd: vhci_device speed not set [ 178.586133][ T5882] usb 4-1: qt2_attach - failed to power on unit: -71 [ 178.604566][ T5882] quatech2 4-1:0.30: probe with driver quatech2 failed with error -71 [ 178.633020][ T5882] usb 4-1: USB disconnect, device number 11 [ 179.527506][ T6884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.218'. [ 179.537385][ T6884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.218'. [ 180.079472][ T6891] netlink: 'syz.3.221': attribute type 10 has an invalid length. [ 180.252684][ T6897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.997710][ T1210] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 181.359546][ T5826] usb 2-1: string descriptor 0 read error: -71 [ 181.367519][ T5826] usb 2-1: USB disconnect, device number 8 [ 181.620686][ T6891] syz.3.221 (6891) used greatest stack depth: 19136 bytes left [ 181.766647][ T5882] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 181.774541][ T30] audit: type=1326 audit(1755369449.892:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6900 comm="syz.5.224" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff58dd8ebe9 code=0x0 [ 181.780942][ T6910] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 181.983989][ T5882] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 182.009010][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.034791][ T5882] usb 5-1: config 0 descriptor?? [ 182.206533][ T5917] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 182.378368][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.392025][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.406171][ T5917] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 182.420109][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.443845][ T5917] usb 3-1: config 0 descriptor?? [ 182.751785][ T6920] ext2: Unexpected value for 'acl' [ 183.206668][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.367732][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.369191][ T5917] elo 0003:04E7:0030.0008: item fetching failed at offset 5/7 [ 183.407807][ T5917] elo 0003:04E7:0030.0008: parse failed [ 183.430730][ T5917] elo 0003:04E7:0030.0008: probe with driver elo failed with error -22 [ 183.475564][ T5917] usb 3-1: USB disconnect, device number 14 [ 183.512125][ T5882] usb 5-1: Cannot set autoneg [ 183.518435][ T5882] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 183.534474][ T6927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.231'. [ 183.607103][ T5882] usb 5-1: USB disconnect, device number 9 [ 184.208154][ T30] audit: type=1326 audit(1755369452.332:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6943 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58dd8ebe9 code=0x7ffc0000 [ 184.317302][ T6946] exFAT-fs (nullb0): invalid boot record signature [ 184.324112][ T6946] exFAT-fs (nullb0): failed to read boot sector [ 184.330574][ T6946] exFAT-fs (nullb0): failed to recognize exfat type [ 184.908772][ T30] audit: type=1326 audit(1755369452.352:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6943 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58dd8ebe9 code=0x7ffc0000 [ 184.933929][ T30] audit: type=1326 audit(1755369452.562:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6943 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7ff58dd8ebe9 code=0x7ffc0000 [ 184.976551][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 185.076548][ T30] audit: type=1326 audit(1755369452.572:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6943 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58dd8ebe9 code=0x7ffc0000 [ 185.172807][ T30] audit: type=1326 audit(1755369452.572:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6943 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58dd8ebe9 code=0x7ffc0000 [ 185.248209][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 185.316648][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 185.440674][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 185.456850][ T30] audit: type=1326 audit(1755369453.052:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6943 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff58dd8ebe9 code=0x7ffc0000 [ 185.512576][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.566428][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.586551][ T30] audit: type=1326 audit(1755369453.052:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6943 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58dd8ebe9 code=0x7ffc0000 [ 185.660578][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 185.714668][ T30] audit: type=1326 audit(1755369453.052:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6943 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58dd8ebe9 code=0x7ffc0000 [ 185.721436][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.741841][ T30] audit: type=1326 audit(1755369453.072:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6943 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff58dd8ebe9 code=0x7ffc0000 [ 185.780689][ T30] audit: type=1326 audit(1755369453.072:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6943 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58dd8ebe9 code=0x7ffc0000 [ 186.096053][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 186.126286][ T9] usbtmc 2-1:16.0: can't read capabilities [ 187.085511][ T5917] usb 2-1: USB disconnect, device number 9 [ 187.337971][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 188.558337][ T6970] mkiss: ax0: crc mode is auto. [ 189.460764][ T6984] lo: entered allmulticast mode [ 189.466601][ T6984] tunl0: entered allmulticast mode [ 189.475137][ T6984] gre0: entered allmulticast mode [ 189.510646][ T6984] gretap0: entered allmulticast mode [ 189.540950][ T6984] erspan0: entered allmulticast mode [ 189.552349][ T6984] ip_vti0: entered allmulticast mode [ 189.559617][ T6984] ip6_vti0: entered allmulticast mode [ 189.567248][ T6984] sit0: entered allmulticast mode [ 189.575444][ T6984] ip6tnl0: entered allmulticast mode [ 189.583023][ T6984] ip6gre0: entered allmulticast mode [ 189.619111][ T6984] syz_tun: entered allmulticast mode [ 189.631785][ T6984] ip6gretap0: entered allmulticast mode [ 189.641981][ T6984] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.649978][ T6984] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.658167][ T6984] bridge0: entered allmulticast mode [ 189.667282][ T6984] vcan0: entered allmulticast mode [ 189.674699][ T6984] bond0: entered allmulticast mode [ 189.679899][ T6984] bond_slave_0: entered allmulticast mode [ 189.685655][ T6984] bond_slave_1: entered allmulticast mode [ 189.695824][ T6984] team0: entered allmulticast mode [ 189.701290][ T6984] team_slave_0: entered allmulticast mode [ 189.707271][ T6984] team_slave_1: entered allmulticast mode [ 189.715988][ T6984] dummy0: entered allmulticast mode [ 189.739847][ T6984] nlmon0: entered allmulticast mode [ 189.747378][ T6984] caif0: entered allmulticast mode [ 189.753007][ T6984] batadv0: entered allmulticast mode [ 189.761259][ T6984] vxcan0: entered allmulticast mode [ 189.767466][ T6984] vxcan1: entered allmulticast mode [ 189.773676][ T6984] veth0: entered allmulticast mode [ 189.782543][ T6984] veth1: entered allmulticast mode [ 189.837474][ T6984] wg0: entered allmulticast mode [ 189.860677][ T6984] wg1: entered allmulticast mode [ 189.871579][ T6984] wg2: entered allmulticast mode [ 189.881114][ T6984] veth0_to_bridge: entered allmulticast mode [ 189.895373][ T6984] veth1_to_bridge: entered allmulticast mode [ 189.909291][ T6984] veth0_to_bond: entered allmulticast mode [ 189.919810][ T6984] veth1_to_bond: entered allmulticast mode [ 189.941858][ T6984] veth0_to_team: entered allmulticast mode [ 189.954730][ T6984] veth1_to_team: entered allmulticast mode [ 189.968709][ T6984] veth0_to_batadv: entered allmulticast mode [ 189.978918][ T6984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.987011][ T6984] batadv_slave_0: entered allmulticast mode [ 189.996802][ T6984] veth1_to_batadv: entered allmulticast mode [ 190.005929][ T6984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.014416][ T6984] batadv_slave_1: entered allmulticast mode [ 190.023729][ T6984] xfrm0: entered allmulticast mode [ 190.031649][ T6984] veth0_to_hsr: entered allmulticast mode [ 190.040568][ T6984] hsr_slave_0: entered allmulticast mode [ 190.050048][ T6984] veth1_to_hsr: entered allmulticast mode [ 190.059070][ T6984] hsr_slave_1: entered allmulticast mode [ 190.068358][ T6984] hsr0: entered allmulticast mode [ 190.077740][ T6984] veth1_virt_wifi: entered allmulticast mode [ 190.087345][ T6984] veth0_virt_wifi: entered allmulticast mode [ 190.096432][ T6984] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 190.104625][ T6984] veth1_vlan: entered allmulticast mode [ 190.113734][ T6984] veth0_vlan: entered allmulticast mode [ 190.131551][ T6984] vlan0: entered allmulticast mode [ 190.136967][ T6984] vlan1: entered allmulticast mode [ 190.153512][ T7003] netlink: 64 bytes leftover after parsing attributes in process `syz.3.250'. [ 190.163804][ T6984] macvlan0: entered allmulticast mode [ 190.177735][ T6984] macvlan1: entered allmulticast mode [ 190.187833][ T6984] ipvlan0: entered allmulticast mode [ 190.193458][ T6984] ipvlan1: entered allmulticast mode [ 190.199768][ T6984] veth1_macvtap: entered allmulticast mode [ 190.211410][ T6984] veth0_macvtap: entered allmulticast mode [ 190.221777][ T6984] macvtap0: entered allmulticast mode [ 190.230982][ T6984] macsec0: entered allmulticast mode [ 190.243664][ T6984] geneve0: entered allmulticast mode [ 190.255550][ T6984] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.265340][ T6984] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.274355][ T6984] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.283313][ T6984] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.301134][ T6984] geneve1: entered allmulticast mode [ 190.312737][ T6984] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 190.325701][ T6984] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 190.339380][ T6984] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 190.355650][ T6984] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 190.378390][ T6984] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 190.395530][ T6984] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 190.518367][ T7006] overlayfs: conflicting options: userxattr,redirect_dir=on [ 190.559153][ T7003] netlink: 64 bytes leftover after parsing attributes in process `syz.3.250'. [ 190.639296][ T7009] input: syz1 as /devices/virtual/input/input7 [ 196.586429][ T5902] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 196.766941][ T5902] usb 6-1: Using ep0 maxpacket: 32 [ 196.810325][ T5902] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 196.870063][ T5902] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 196.993912][ T5902] usb 6-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 197.065339][ T5902] usb 6-1: config 0 interface 0 has no altsetting 1 [ 197.074549][ T5902] usb 6-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 197.120508][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 197.163378][ T5902] usb 6-1: SerialNumber: syz [ 197.289239][ T5902] usb 6-1: config 0 descriptor?? [ 197.361397][ T5902] usb-storage 6-1:0.0: USB Mass Storage device detected [ 197.416477][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 197.443979][ T5902] usb-storage 6-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 197.510212][ T7024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.547340][ T7024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.596486][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 197.603719][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.615423][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.635424][ T5950] usb 6-1: USB disconnect, device number 7 [ 197.685624][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 197.703869][ T9] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 197.714401][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.749982][ T9] usb 5-1: config 0 descriptor?? [ 197.768843][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 198.564133][ T5882] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 198.749531][ T7059] netlink: 'syz.2.264': attribute type 11 has an invalid length. [ 198.785631][ T5882] usb 2-1: device descriptor read/64, error -71 [ 199.560759][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.631840][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.720311][ T5882] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 199.946620][ T5882] usb 2-1: device descriptor read/64, error -71 [ 199.954623][ T9] cougar 0003:060B:500A.0009: unexpected long global item [ 199.962737][ T9] cougar 0003:060B:500A.0009: parse failed [ 199.967053][ T7068] netlink: 64 bytes leftover after parsing attributes in process `syz.2.266'. [ 199.968926][ T9] cougar 0003:060B:500A.0009: probe with driver cougar failed with error -22 [ 199.979216][ T7068] netlink: 64 bytes leftover after parsing attributes in process `syz.2.266'. [ 200.002133][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 200.024882][ T9] usb 5-1: USB disconnect, device number 10 [ 200.056937][ T5882] usb usb2-port1: attempt power cycle [ 200.246639][ T5902] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 200.358283][ T7072] Bluetooth: MGMT ver 1.23 [ 200.396647][ T5882] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 200.428393][ T5902] usb 6-1: Using ep0 maxpacket: 32 [ 200.431680][ T5882] usb 2-1: device descriptor read/8, error -71 [ 200.444289][ T5902] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 200.466885][ T5902] usb 6-1: config 0 has no interface number 0 [ 200.474887][ T5902] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.509852][ T5902] usb 6-1: config 0 interface 85 has no altsetting 0 [ 200.698774][ T5902] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 200.708133][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.716196][ T5902] usb 6-1: Product: syz [ 200.725734][ T5902] usb 6-1: Manufacturer: syz [ 200.730526][ T5902] usb 6-1: SerialNumber: syz [ 200.738272][ T5902] usb 6-1: config 0 descriptor?? [ 201.413803][ T5882] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 201.494132][ T5882] usb 2-1: device descriptor read/8, error -71 [ 201.510937][ T5902] appletouch 6-1:0.85: Failed to read mode from device. [ 201.518608][ T5902] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 201.596701][ T5845] Bluetooth: hci1: command 0x0405 tx timeout [ 201.676806][ T5882] usb usb2-port1: unable to enumerate USB device [ 202.393809][ T1210] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 203.067383][ T1210] usb 5-1: Using ep0 maxpacket: 32 [ 203.104567][ T1210] usb 5-1: unable to get BOS descriptor or descriptor too short [ 203.130081][ T1210] usb 5-1: config 0 has an invalid interface number: 82 but max is 1 [ 203.187795][ T1210] usb 5-1: config 0 has an invalid interface number: 159 but max is 1 [ 203.196290][ T1210] usb 5-1: config 0 has no interface number 0 [ 203.202658][ T1210] usb 5-1: config 0 has no interface number 1 [ 203.209064][ T1210] usb 5-1: config 0 interface 82 has no altsetting 0 [ 203.215781][ T1210] usb 5-1: config 0 interface 159 has no altsetting 0 [ 203.406026][ T5902] usb 6-1: USB disconnect, device number 8 [ 203.424594][ T7106] netem: change failed [ 203.466990][ T7108] netlink: 'syz.1.278': attribute type 1 has an invalid length. [ 203.474738][ T7108] netlink: 'syz.1.278': attribute type 1 has an invalid length. [ 203.482763][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 204.027473][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 204.073393][ T30] kauditd_printk_skb: 1393 callbacks suppressed [ 204.073438][ T30] audit: type=1326 audit(1755369477.197:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7112 comm="syz.1.280" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac5ef8ebe9 code=0x0 [ 205.428498][ T1210] usb 5-1: string descriptor 0 read error: -71 [ 205.588257][ T1210] usb 5-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=b2.1d [ 205.621838][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.406261][ T1210] usb 5-1: config 0 descriptor?? [ 206.412049][ T1210] usb 5-1: can't set config #0, error -71 [ 206.431749][ T1210] usb 5-1: USB disconnect, device number 11 [ 208.426788][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 208.731057][ T7157] netlink: 'syz.2.291': attribute type 1 has an invalid length. [ 208.739253][ T7157] netlink: 'syz.2.291': attribute type 1 has an invalid length. [ 208.747011][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 208.846575][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 208.866328][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.885817][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.936631][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 208.970664][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 208.980630][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.010577][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 209.024580][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 209.036874][ T24] usb 5-1: Manufacturer: syz [ 209.044734][ T24] usb 5-1: config 0 descriptor?? [ 209.309828][ T5902] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 209.329095][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 209.346829][ T24] rc_core: IR keymap rc-hauppauge not found [ 209.366207][ T24] Registered IR keymap rc-empty [ 209.393188][ T30] audit: type=1326 audit(1755369482.507:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.2.293" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e2738ebe9 code=0x0 [ 209.423389][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 209.501391][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.024939][ T5902] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 210.027647][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.146502][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 210.198182][ T9] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 210.289032][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 210.379072][ T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.40 [ 210.410877][ T5902] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 210.420520][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.421797][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.435828][ T5902] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 210.444812][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.468743][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 210.504114][ T9] usb 4-1: Product: syz [ 210.518647][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 210.526496][ T9] usb 4-1: Manufacturer: syz [ 210.545579][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.551174][ T9] usb 4-1: SerialNumber: syz [ 210.586805][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.626650][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.646547][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.666965][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.706599][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.727083][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.757714][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.786509][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.826604][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.860237][ T24] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 210.860265][ T24] mceusb 5-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 210.873365][ T24] usb 5-1: USB disconnect, device number 12 acpid: input device has been disconnected, fd 10 [ 210.966666][ T5957] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 211.260645][ T9] usbhid 4-1:1.0: can't add hid device: -71 [ 211.271171][ T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 211.305233][ T9] usb 4-1: USB disconnect, device number 13 [ 211.340539][ T5957] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 211.355500][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.397220][ T5957] usb 3-1: Product: syz [ 211.410187][ T5957] usb 3-1: Manufacturer: syz [ 211.422241][ T5957] usb 3-1: SerialNumber: syz [ 211.432784][ T5957] usb 3-1: config 0 descriptor?? [ 211.455007][ T5957] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 211.478057][ T5902] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 211.486735][ T5902] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 211.500953][ T5902] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 211.510648][ T5902] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 211.522564][ T5902] usb 6-1: USB disconnect, device number 9 [ 212.501241][ T5957] gspca_sunplus: reg_r err -71 [ 212.506216][ T5957] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 212.549464][ T5957] usb 3-1: USB disconnect, device number 15 [ 212.716819][ T7214] netlink: 'syz.1.303': attribute type 1 has an invalid length. [ 212.724582][ T7214] netlink: 'syz.1.303': attribute type 1 has an invalid length. [ 212.732480][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 213.660092][ T30] audit: type=1326 audit(1755369486.157:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7216 comm="syz.4.306" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd595f8ebe9 code=0x0 [ 214.445431][ T7238] Driver unsupported XDP return value 0 on prog (id 79) dev N/A, expect packet loss! [ 214.464970][ T7236] netlink: 'syz.4.309': attribute type 1 has an invalid length. [ 214.616473][ T5902] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 214.746454][ T5826] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 214.776562][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 214.791158][ T5902] usb 2-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 214.804906][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 214.819596][ T5902] usb 2-1: Product: syz [ 214.826463][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 214.840993][ T5902] usb 2-1: Manufacturer: syz [ 214.849965][ T5902] usb 2-1: SerialNumber: syz [ 214.859813][ T5902] usb 2-1: config 0 descriptor?? [ 214.870996][ T5902] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 214.881703][ T5902] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 214.904271][ T5826] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 214.937564][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.955832][ T5826] usb 5-1: Product: syz [ 214.974974][ T5826] usb 5-1: Manufacturer: syz [ 214.982774][ T5826] usb 5-1: SerialNumber: syz [ 215.040998][ T5826] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 215.064602][ T9] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 215.086669][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.102488][ T9] usb 6-1: Product: syz [ 215.107907][ T9] usb 6-1: Manufacturer: syz [ 215.112592][ T9] usb 6-1: SerialNumber: syz [ 215.141020][ T5902] usb 2-1: USB disconnect, device number 14 [ 215.144179][ T5957] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 215.158465][ T9] usb 6-1: config 0 descriptor?? [ 216.568398][ T5957] usb 5-1: Service connection timeout for: 256 [ 216.578846][ T9] usb 6-1: Firmware version (0.0) predates our first public release. [ 216.640886][ T5882] usb 5-1: USB disconnect, device number 13 [ 216.673338][ T5957] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 216.708867][ T9] usb 6-1: Please update to version 0.2 or newer [ 216.780688][ T5957] ath9k_htc: Failed to initialize the device [ 216.972725][ T5882] usb 5-1: ath9k_htc: USB layer deinitialized [ 216.998382][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 217.004469][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 217.004521][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 219.743475][ T9] usb 6-1: USB disconnect, device number 10 [ 220.006452][ T5917] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 220.200177][ T5917] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 220.226904][ T5917] usb 2-1: config 0 interface 0 has no altsetting 0 [ 220.355325][ T7294] netlink: 'syz.4.325': attribute type 10 has an invalid length. [ 220.371906][ T5917] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 220.395237][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 220.433325][ T7299] comedi comedi0: ni_at_a2150: I/O port conflict (0xffffffff80000000,28) [ 220.452472][ T7294] team0: Port device wlan1 added [ 220.454098][ T5917] usb 2-1: Product: syz [ 220.470107][ T5917] usb 2-1: Manufacturer: syz [ 220.476421][ T5917] usb 2-1: SerialNumber: syz [ 220.491796][ T5917] usb 2-1: config 0 descriptor?? [ 220.521558][ T5917] usb 2-1: selecting invalid altsetting 0 [ 220.748657][ T7279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.768434][ T7279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.915348][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 220.993031][ T5957] usb 2-1: USB disconnect, device number 15 [ 221.879924][ T9] usb 4-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 221.950078][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.048883][ T9] usb 4-1: config 0 descriptor?? [ 222.080846][ T9] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 222.134128][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.331'. [ 222.464855][ T9] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 222.473839][ T9] pac7311 4-1:0.0: probe with driver pac7311 failed with error -71 [ 222.495822][ T9] usb 4-1: USB disconnect, device number 14 [ 223.147986][ T7326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.334'. [ 223.560048][ T7336] syz_tun: entered promiscuous mode [ 223.597686][ T7336] batadv_slave_1: entered promiscuous mode [ 223.687403][ T7342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.719362][ T7342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.147454][ T7349] netlink: 92 bytes leftover after parsing attributes in process `syz.1.339'. [ 224.170120][ T7349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.339'. [ 224.200663][ T7349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.339'. [ 224.505160][ T5902] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 224.566454][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 224.646886][ T5917] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 224.684986][ T7353] netlink: 'syz.3.340': attribute type 2 has an invalid length. [ 224.735163][ T7353] netlink: 'syz.3.340': attribute type 1 has an invalid length. [ 224.756622][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 224.791119][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 224.806132][ T24] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 224.834316][ T5902] usb 5-1: unable to get BOS descriptor or descriptor too short [ 224.842139][ T24] usb 6-1: config 0 has no interface number 0 [ 224.852136][ T24] usb 6-1: config 0 interface 106 has no altsetting 0 [ 224.859561][ T5902] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 224.873407][ T5902] usb 5-1: can't read configurations, error -71 [ 224.882324][ T24] usb 6-1: New USB device found, idVendor=0421, idProduct=6901, bcdDevice=2d.1d [ 224.896104][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.904229][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 224.916404][ T24] usb 6-1: Product: syz [ 224.920816][ T24] usb 6-1: Manufacturer: syz [ 224.925756][ T24] usb 6-1: SerialNumber: syz [ 224.932638][ T5917] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.944759][ T5917] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 224.966100][ T24] usb 6-1: config 0 descriptor?? [ 224.971257][ T5917] usb 3-1: config 1 has no interface number 1 [ 224.979759][ T24] cdc_phonet 6-1:0.106: probe with driver cdc_phonet failed with error -22 [ 224.991670][ T5917] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.002356][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.012043][ T5917] usb 3-1: Product: syz [ 225.016265][ T5917] usb 3-1: Manufacturer: syz [ 225.022780][ T5917] usb 3-1: SerialNumber: syz [ 225.302778][ T5917] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 225.316492][ T5917] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 225.325045][ T5917] usb 3-1: 2:1 : sample bitwidth 71 in over sample bytes 5 [ 225.344169][ T5917] usb 3-1: 2:1 : unsupported sample bitwidth 71 in 5 bytes [ 225.815206][ T5917] usb 3-1: USB disconnect, device number 16 [ 225.822928][ T5950] usb 6-1: USB disconnect, device number 11 [ 226.759590][ T7376] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 226.766440][ T7376] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 226.879016][ T7376] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 226.885772][ T7376] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 227.089391][ T7376] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 227.097104][ T7376] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 227.169839][ T7376] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 227.176538][ T7376] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 227.194964][ T7376] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 227.201501][ T7376] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 227.556428][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 227.719830][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 227.785421][ T30] audit: type=1326 audit(1755369500.907:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7383 comm="syz.4.348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd595f8ebe9 code=0x0 [ 227.806477][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.837878][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 228.076912][ T5917] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 228.333158][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 228.498252][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.512981][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 228.525089][ T24] usb 6-1: SerialNumber: syz [ 228.538667][ T7377] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 228.549841][ T24] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 228.558935][ T24] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 228.566479][ T24] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 228.581467][ T7393] netlink: 'syz.2.350': attribute type 11 has an invalid length. [ 228.591050][ T7396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.351'. [ 228.647323][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 228.655038][ T5917] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 228.667800][ T5917] usb 4-1: config 0 has no interface number 0 [ 228.689604][ T5917] usb 4-1: config 0 interface 191 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 228.710931][ T5917] usb 4-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 228.739039][ T5917] usb 4-1: New USB device found, idVendor=04fc, idProduct=0204, bcdDevice=67.67 [ 228.758330][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.780045][ T5917] usb 4-1: Product: syz [ 228.788843][ T5917] usb 4-1: Manufacturer: syz [ 228.798950][ T5917] usb 4-1: SerialNumber: syz [ 228.813437][ T5917] usb 4-1: config 0 descriptor?? [ 228.839182][ T5917] spcp8x5 4-1:0.191: SPCP8x5 converter detected [ 229.030141][ T5917] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 229.080487][ T5917] usb 4-1: USB disconnect, device number 15 [ 229.111762][ T5917] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 229.132766][ T5917] spcp8x5 4-1:0.191: device disconnected [ 229.257039][ T5950] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 229.426807][ T5950] usb 2-1: Using ep0 maxpacket: 32 [ 229.438765][ T5950] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 229.448182][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.459712][ T5950] usb 2-1: config 0 descriptor?? [ 229.474198][ T5950] gspca_main: sq930x-2.14.0 probing 041e:403c [ 229.784379][ T5950] gspca_sq930x: reg_r 001f failed -71 [ 229.805045][ T5950] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 229.847602][ T5950] usb 2-1: USB disconnect, device number 16 [ 230.449234][ T5882] IPVS: starting estimator thread 0... [ 230.546914][ T5917] usb 6-1: USB disconnect, device number 12 [ 230.575271][ T7433] IPVS: using max 36 ests per chain, 86400 per kthread [ 230.580650][ T7405] syz.5.346 (7405) used greatest stack depth: 17992 bytes left [ 231.521816][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 231.530924][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 232.402181][ T5882] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 232.747629][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 232.786571][ T7455] tty tty4: ldisc open failed (-12), clearing slot 3 [ 232.972789][ T5882] usb 6-1: not running at top speed; connect to a high speed hub [ 233.217049][ T5882] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.236408][ T5882] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.257902][ T5882] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 233.281009][ T5882] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.300688][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.318299][ T5882] usb 6-1: Product: 롾㊰╗뢞惱⡁㾋￡೤⦗頸愥﹫؁ᡑ™쫡뜔憍ۇ꺦䴮贐팖囹끫䨆䔒䠛拋ᖈ綂흖ێᖧቐ䉡蕜ਤ蝰⹆딍뱦爙﬋㧤찉ܛ젩魼᲍䒶豪粂녃 [ 233.514925][ T5882] usb 6-1: Manufacturer: ࡠ [ 233.539795][ T5882] usb 6-1: SerialNumber: syz [ 233.602467][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 233.637934][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 233.668524][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 233.725836][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 233.752553][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 233.784946][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 233.831326][ T5882] usb 6-1: 0:2 : does not exist [ 233.890505][ T5882] usb 6-1: USB disconnect, device number 13 [ 234.255049][ T7487] exFAT-fs (nullb0): invalid boot record signature [ 234.261796][ T7487] exFAT-fs (nullb0): failed to read boot sector [ 234.268428][ T7487] exFAT-fs (nullb0): failed to recognize exfat type [ 235.409089][ T7508] netlink: 'syz.2.378': attribute type 11 has an invalid length. [ 236.726485][ T5882] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 236.729545][ C1] sd 0:0:1:0: [sda] tag#6748 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 236.744582][ C1] sd 0:0:1:0: [sda] tag#6748 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 236.876711][ T5882] usb 5-1: device descriptor read/64, error -71 [ 237.156522][ T5882] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 237.206571][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 237.417569][ T5882] usb 5-1: device descriptor read/64, error -71 [ 237.606872][ T5882] usb usb5-port1: attempt power cycle [ 237.759548][ T24] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 237.771305][ T24] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 237.780626][ T24] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 237.790078][ T24] usb 2-1: config 0 has no interface number 0 [ 237.796546][ T24] usb 2-1: config 0 has no interface number 1 [ 237.803390][ T24] usb 2-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 237.814872][ T24] usb 2-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 237.828568][ T24] usb 2-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 237.840332][ T24] usb 2-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 237.851822][ T24] usb 2-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 237.864122][ T24] usb 2-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 237.876505][ T24] usb 2-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid wMaxPacketSize 0 [ 237.886982][ T24] usb 2-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 0 [ 237.897483][ T24] usb 2-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 237.911947][ T5909] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 237.921163][ T24] usb 2-1: config 0 interface 66 has no altsetting 0 [ 237.931490][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 237.941160][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.949365][ T24] usb 2-1: Product: syz [ 237.953657][ T24] usb 2-1: Manufacturer: syz [ 237.958649][ T24] usb 2-1: SerialNumber: syz [ 237.969103][ T5882] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 237.995169][ T24] usb 2-1: config 0 descriptor?? [ 238.104682][ T5909] usb 3-1: config 0 has an invalid interface number: 227 but max is 0 [ 238.176267][ T5882] usb 5-1: device descriptor read/8, error -71 [ 238.479585][ T7547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.488423][ T7547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.504814][ T24] ljca 2-1:0.84: bulk endpoints not found [ 238.510664][ T5909] usb 3-1: config 0 has no interface number 0 [ 238.556456][ T5909] usb 3-1: config 0 interface 227 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 238.582896][ T24] ljca 2-1:0.66: submit rx urb failed: -90 [ 238.596072][ T24] ljca 2-1:0.66: probe with driver ljca failed with error -90 [ 238.604116][ T5909] usb 3-1: config 0 interface 227 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 238.606509][ T5882] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 238.643962][ T5909] usb 3-1: config 0 interface 227 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 238.660811][ T24] usb 2-1: USB disconnect, device number 17 [ 238.669257][ T5909] usb 3-1: config 0 interface 227 has no altsetting 0 [ 238.669812][ T5882] usb 5-1: device descriptor read/8, error -71 [ 238.679571][ T5909] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=58.dd [ 238.714693][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.724759][ T5909] usb 3-1: Product: syz [ 238.734549][ T5909] usb 3-1: Manufacturer: syz [ 238.740508][ T5909] usb 3-1: SerialNumber: syz [ 238.773519][ T5909] usb 3-1: config 0 descriptor?? [ 238.787391][ T7541] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 238.810512][ T5909] usbtouchscreen 3-1:0.227: probe with driver usbtouchscreen failed with error -90 [ 238.826860][ T5882] usb usb5-port1: unable to enumerate USB device [ 239.497021][ T7557] netlink: 'syz.1.392': attribute type 10 has an invalid length. [ 240.087264][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 240.178809][ T7557] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 240.357507][ T7566] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 240.406632][ T24] usb 4-1: device descriptor read/64, error -71 [ 240.556917][ T7566] CIFS mount error: No usable UNC path provided in device string! [ 240.556917][ T7566] [ 240.604874][ T7566] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 240.676824][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 240.785074][ T5909] usb 3-1: USB disconnect, device number 17 [ 240.800817][ T7575] comedi comedi1: Minor -1 is invalid! [ 240.856739][ T24] usb 4-1: device descriptor read/64, error -71 [ 241.464211][ T24] usb usb4-port1: attempt power cycle [ 241.789692][ T7590] kvm: user requested TSC rate below hardware speed [ 241.824251][ T7590] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 241.846612][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 241.890142][ T7590] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 241.996693][ T24] usb 4-1: device descriptor read/8, error -71 [ 244.637023][ T7613] devpts: Bad value for 'max' [ 244.716622][ T5950] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 244.886709][ T7623] syzkaller1: entered promiscuous mode [ 244.904848][ T5950] usb 3-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.06 [ 244.921919][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.934106][ T7623] syzkaller1: entered allmulticast mode [ 244.945482][ T5950] ums-freecom 3-1:127.0: USB Mass Storage device detected [ 245.169369][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.227628][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.272027][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.304467][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.366503][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.466912][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.504441][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.530826][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.572303][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.610643][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.638282][ T5909] usb 3-1: USB disconnect, device number 18 [ 245.752911][ T7643] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 247.551245][ T5909] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 247.706604][ T5909] usb 4-1: device descriptor read/64, error -71 [ 247.956660][ T5909] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 248.126435][ T5909] usb 4-1: device descriptor read/64, error -71 [ 248.247497][ T5909] usb usb4-port1: attempt power cycle [ 248.616506][ T5909] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 248.667758][ T5909] usb 4-1: device descriptor read/8, error -71 [ 248.993403][ T5909] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 249.107044][ T7686] ptm ptm5: ldisc open failed (-12), clearing slot 5 [ 249.290283][ T7692] input: syz0 as /devices/virtual/input/input12 [ 249.472155][ T5909] usb 4-1: device not accepting address 23, error -71 [ 249.510867][ T5909] usb usb4-port1: unable to enumerate USB device [ 249.518246][ T7692] input: failed to attach handler leds to device input12, error: -6 [ 252.068820][ T7717] cgroup: Unexpected value for 'cpuset_v2_mode' [ 252.441702][ T24] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 253.624914][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 253.650017][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 253.691495][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 253.726234][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 253.735706][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.736535][ T5882] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 253.776261][ T24] usb 5-1: Product: syz [ 253.829260][ T24] usb 5-1: Manufacturer: syz [ 253.833941][ T24] usb 5-1: SerialNumber: syz [ 253.973296][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 254.011348][ T5882] usb 2-1: too many configurations: 120, using maximum allowed: 8 [ 254.065306][ T7711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.077311][ T7711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.120953][ T5882] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 254.123798][ T24] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input13 [ 254.160229][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 254.206081][ T5882] usb 2-1: Product: syz [ 254.235040][ T5189] bcm5974 5-1:1.0: could not read from device [ 254.236375][ T5882] usb 2-1: Manufacturer: syz [ 254.291501][ T5882] usb 2-1: SerialNumber: syz [ 254.291521][ T5189] bcm5974 5-1:1.0: could not read from device [ 254.317881][ T24] usb 5-1: USB disconnect, device number 20 [ 254.337947][ T5882] usb 2-1: config 0 descriptor?? [ 254.388168][ T5882] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 254.413177][ T5882] usb 2-1: setting power ON [ 254.469193][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 254.570685][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 254.592883][ T7728] dvb-usb: bulk message failed: -22 (3/0) [ 254.675652][ T5882] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 254.684791][ T7728] dvb-usb: bulk message failed: -22 (3/0) [ 254.742050][ T5882] usb 2-1: media controller created [ 254.767568][ T7745] dvb-usb: bulk message failed: -22 (4/0) [ 254.914456][ T7747] netlink: 'syz.2.435': attribute type 11 has an invalid length. [ 255.623261][ T7751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.656455][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 255.682485][ T5882] usb 2-1: selecting invalid altsetting 6 [ 255.688437][ T5882] usb 2-1: digital interface selection failed (-22) [ 255.695109][ T5882] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 255.714519][ T5882] usb 2-1: setting power OFF [ 255.719301][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 255.726242][ T5882] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 255.766422][ T5882] (NULL device *): no alternate interface [ 255.840732][ T7753] netlink: 'syz.3.433': attribute type 11 has an invalid length. [ 255.908450][ T5882] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 255.950857][ T5882] usb 2-1: USB disconnect, device number 18 [ 257.745974][ T7782] netlink: 'syz.1.445': attribute type 3 has an invalid length. [ 257.936397][ T7782] netlink: 'syz.1.445': attribute type 1 has an invalid length. [ 257.957600][ T5845] Bluetooth: hci1: command 0x0405 tx timeout [ 258.677179][ T7782] netlink: 216 bytes leftover after parsing attributes in process `syz.1.445'. [ 258.706537][ T7782] NCSI netlink: No device for ifindex 33022 [ 258.712863][ T7787] netlink: 'syz.2.446': attribute type 11 has an invalid length. [ 258.912356][ T7790] netlink: 16 bytes leftover after parsing attributes in process `syz.2.447'. [ 259.436904][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 259.547948][ T7806] netlink: 'syz.2.450': attribute type 11 has an invalid length. [ 260.444760][ T24] usb 5-1: config 0 has an invalid interface number: 178 but max is 0 [ 260.478310][ T24] usb 5-1: config 0 has no interface number 0 [ 260.484506][ T24] usb 5-1: config 0 interface 178 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 260.707673][ T7811] netlink: 'syz.3.454': attribute type 11 has an invalid length. [ 260.717614][ T24] usb 5-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=9d.36 [ 260.731108][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.778275][ T24] usb 5-1: config 0 descriptor?? [ 260.784329][ T7797] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 261.001494][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.107089][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.144262][ T7797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.862329][ T7797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.403714][ T7865] loop4: detected capacity change from 0 to 2560 [ 264.001399][ T7865] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 264.042609][ T7865] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 264.117997][ T7865] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 264.135283][ T5841] Buffer I/O error on dev loop4, logical block 256, lost async page write [ 264.144583][ T24] usb 5-1: string descriptor 0 read error: -71 [ 264.227338][ T24] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 264.237387][ T7865] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 264.246008][ T7865] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 264.254539][ T24] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 11 is not bulk. [ 264.264430][ T24] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 264.273820][ T7865] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 264.293377][ T5841] Buffer I/O error on dev loop4, logical block 257, lost async page write [ 264.293517][ T24] usb 5-1: USB disconnect, device number 21 [ 264.316479][ T7865] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 264.339320][ T7865] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 264.960076][ T7876] net_ratelimit: 1052 callbacks suppressed [ 264.960105][ T7876] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 269.637146][ T7931] netlink: 'syz.2.482': attribute type 3 has an invalid length. [ 269.645575][ T7931] netlink: 'syz.2.482': attribute type 3 has an invalid length. [ 270.637339][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 271.591491][ T7936] netlink: 'syz.3.485': attribute type 1 has an invalid length. [ 271.825439][ T7941] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 272.956635][ T7947] usb usb8: usbfs: process 7947 (syz.3.489) did not claim interface 0 before use [ 273.389389][ T7963] Bluetooth: MGMT ver 1.23 [ 275.582124][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 275.582362][ T5838] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 276.298210][ T5838] Bluetooth: hci2: unexpected event for opcode 0x200c [ 276.352984][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 279.442999][ T8007] af_packet: tpacket_rcv: packet too big, clamped from 176 to 4294967286. macoff=82 [ 283.591083][ T8013] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.149419][ T8042] netlink: 'syz.3.520': attribute type 3 has an invalid length. [ 285.158904][ T8042] netlink: 'syz.3.520': attribute type 3 has an invalid length. [ 287.361026][ T8013] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.376167][ T30] audit: type=1326 audit(1755369560.487:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8045 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5ef8ebe9 code=0x7ffc0000 [ 287.665025][ T8049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.522'. [ 287.906572][ T30] audit: type=1326 audit(1755369560.527:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8045 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac5ef8ebe9 code=0x7ffc0000 [ 287.929067][ T30] audit: type=1326 audit(1755369560.527:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8045 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5ef8ebe9 code=0x7ffc0000 [ 287.951290][ T8039] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 287.961743][ T30] audit: type=1326 audit(1755369560.527:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8045 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5ef8ebe9 code=0x7ffc0000 [ 288.011860][ T30] audit: type=1326 audit(1755369560.527:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8045 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fac5ef8ebe9 code=0x7ffc0000 [ 288.039790][ T30] audit: type=1326 audit(1755369560.527:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8045 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5ef8ebe9 code=0x7ffc0000 [ 288.062351][ T30] audit: type=1326 audit(1755369560.527:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8045 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5ef8ebe9 code=0x7ffc0000 [ 288.084709][ T30] audit: type=1326 audit(1755369560.527:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8045 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fac5ef8ebe9 code=0x7ffc0000 [ 288.106310][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.491853][ T30] audit: type=1326 audit(1755369560.527:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8045 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5ef8ebe9 code=0x7ffc0000 [ 288.592100][ T30] audit: type=1326 audit(1755369560.527:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8045 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5ef8ebe9 code=0x7ffc0000 [ 288.651715][ T8013] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.802514][ T8013] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.167444][ T8075] ubi31: attaching mtd0 [ 290.186670][ T8075] ubi31: scanning is finished [ 290.191619][ T8075] ubi31: empty MTD device detected [ 291.113118][ T8075] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 292.443309][ T8013] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.823946][ T8013] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.959513][ T8013] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.054441][ T8013] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.664079][ T8106] openvswitch: netlink: Flow actions attr not present in new flow. [ 295.210268][ T8114] comedi comedi2: dt2801: I/O port conflict (0x6,2) [ 295.553863][ T5845] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 295.553942][ T5845] Bluetooth: hci4: Unknown advertising packet type: 0x5d [ 295.561645][ T5845] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 295.568853][ T5845] Bluetooth: hci4: Unknown advertising packet type: 0x60 [ 295.575957][ T5845] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 295.583177][ T5845] Bluetooth: hci4: Malformed LE Event: 0x0d [ 295.749351][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 295.758506][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 295.766539][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 295.774711][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 295.782725][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.907032][ T5845] Bluetooth: hci2: unexpected event for opcode 0x041c [ 296.546192][ T5845] Bluetooth: hci1: command 0x0405 tx timeout [ 296.857455][ T8144] netlink: 'syz.3.549': attribute type 1 has an invalid length. [ 297.498118][ T8147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.881595][ T5838] Bluetooth: hci5: command tx timeout [ 298.007162][ T5844] syz_tun (unregistering): left promiscuous mode [ 298.080478][ T8144] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 298.226153][ T8127] chnl_net:caif_netlink_parms(): no params data found [ 298.425396][ T8154] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.551' resets device [ 298.476419][ T990] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.789585][ T990] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.963276][ T8169] netlink: 72 bytes leftover after parsing attributes in process `syz.5.554'. [ 299.420032][ T990] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.593231][ T990] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.240244][ T5838] Bluetooth: hci5: command tx timeout [ 300.642942][ T8127] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.650495][ T8127] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.665250][ T8127] bridge_slave_0: entered allmulticast mode [ 300.682390][ T8127] bridge_slave_0: entered promiscuous mode [ 405.716283][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 405.723339][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8181/1:b..l [ 405.731707][ C1] rcu: (detected by 1, t=10502 jiffies, g=27325, q=194 ncpus=2) [ 405.739487][ C1] task:syz.5.558 state:R running task stack:28840 pid:8181 tgid:8177 ppid:6055 task_flags:0x400040 flags:0x00004002 [ 405.753780][ C1] Call Trace: [ 405.757104][ C1] [ 405.760073][ C1] __schedule+0x16aa/0x4c90 [ 405.764633][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 405.769951][ C1] ? __pfx___schedule+0x10/0x10 [ 405.774843][ C1] ? __lock_acquire+0xab9/0xd20 [ 405.779730][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 405.785051][ C1] preempt_schedule_irq+0xb5/0x150 [ 405.790191][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 405.795949][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 405.801789][ C1] irqentry_exit+0x6f/0x90 [ 405.806327][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 405.812340][ C1] RIP: 0010:unwind_next_frame+0x130e/0x2390 [ 405.818285][ C1] Code: c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 [ 405.837922][ C1] RSP: 0018:ffffc9000c80f818 EFLAGS: 00000a07 [ 405.844023][ C1] RAX: 0000000000000000 RBX: ffffffff8fbd1734 RCX: dffffc0000000000 [ 405.852019][ C1] RDX: ffffffff8fbd1718 RSI: ffffffff903cfa50 RDI: ffffffff8be1b9e0 [ 405.860031][ C1] RBP: ffffffff8fbd1718 R08: 0000000000000011 R09: ffffffff8172aae5 [ 405.868035][ C1] R10: ffffc9000c80f938 R11: ffffffff81acfd40 R12: ffffffff821fdb1b [ 405.876043][ C1] R13: ffffffff8fbd1718 R14: ffffc9000c80f8e8 R15: ffffffff8fbd1724 [ 405.884058][ C1] ? __kasan_slab_alloc+0x6b/0x80 [ 405.889135][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 405.895327][ C1] ? unwind_next_frame+0xa5/0x2390 [ 405.900481][ C1] ? unwind_next_frame+0xd4/0x2390 [ 405.905633][ C1] ? unwind_next_frame+0xa5/0x2390 [ 405.910782][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 405.915890][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 405.922167][ C1] arch_stack_walk+0x11c/0x150 [ 405.926980][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 405.932038][ C1] stack_trace_save+0x9c/0xe0 [ 405.936765][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 405.942190][ C1] ? __lock_acquire+0xab9/0xd20 [ 405.947071][ C1] kasan_save_track+0x3e/0x80 [ 405.951793][ C1] ? kasan_save_track+0x3e/0x80 [ 405.956683][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 405.961805][ C1] __kasan_slab_alloc+0x6c/0x80 [ 405.966692][ C1] kmem_cache_alloc_lru_noprof+0x1c6/0x3d0 [ 405.972530][ C1] ? __d_alloc+0x31/0x6f0 [ 405.976907][ C1] __d_alloc+0x31/0x6f0 [ 405.981106][ C1] d_alloc_pseudo+0x1f/0xb0 [ 405.985660][ C1] alloc_file_pseudo+0xcc/0x210 [ 405.990554][ C1] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 405.996044][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 406.001316][ C1] ? _raw_spin_unlock+0x28/0x50 [ 406.006220][ C1] sock_alloc_file+0xb8/0x2e0 [ 406.010928][ C1] ? __sys_socket+0x12c/0x1b0 [ 406.015642][ C1] __sys_socket+0x13d/0x1b0 [ 406.020191][ C1] __x64_sys_socket+0x7a/0x90 [ 406.024906][ C1] do_syscall_64+0xfa/0x3b0 [ 406.029442][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.034693][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.040801][ C1] ? clear_bhb_loop+0x60/0xb0 [ 406.045520][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.051459][ C1] RIP: 0033:0x7ff58dd8ebe9 [ 406.055931][ C1] RSP: 002b:00007ff58ebbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 406.064492][ C1] RAX: ffffffffffffffda RBX: 00007ff58dfb6180 RCX: 00007ff58dd8ebe9 [ 406.072502][ C1] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 406.080518][ C1] RBP: 00007ff58de11e19 R08: 0000000000000000 R09: 0000000000000000 [ 406.088523][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.096609][ C1] R13: 00007ff58dfb6218 R14: 00007ff58dfb6180 R15: 00007fff29080ce8 [ 406.104630][ C1] [ 406.107679][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g27325 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 406.118908][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 406.128902][ C1] rcu: RCU grace-period kthread stack dump: [ 406.134814][ C1] task:rcu_preempt state:R running task stack:26088 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 406.148354][ C1] Call Trace: [ 406.151660][ C1] [ 406.154625][ C1] __schedule+0x16aa/0x4c90 [ 406.159198][ C1] ? schedule+0x165/0x360 [ 406.163579][ C1] ? __pfx___schedule+0x10/0x10 [ 406.168499][ C1] ? schedule+0x91/0x360 [ 406.172794][ C1] schedule+0x165/0x360 [ 406.176985][ C1] schedule_timeout+0x12b/0x270 [ 406.181886][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 406.187315][ C1] ? __pfx_process_timeout+0x10/0x10 [ 406.192647][ C1] ? prepare_to_swait_event+0x341/0x380 [ 406.198245][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 406.203161][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 406.208129][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.213357][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 406.218684][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 406.223919][ C1] ? finish_swait+0xcd/0x1f0 [ 406.228552][ C1] rcu_gp_kthread+0x99/0x390 [ 406.233178][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 406.238404][ C1] ? __kthread_parkme+0x7b/0x200 [ 406.243375][ C1] ? __kthread_parkme+0x1a1/0x200 [ 406.248443][ C1] kthread+0x70e/0x8a0 [ 406.252551][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 406.257787][ C1] ? __pfx_kthread+0x10/0x10 [ 406.262411][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 406.267634][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.272864][ C1] ? __pfx_kthread+0x10/0x10 [ 406.277495][ C1] ret_from_fork+0x3fc/0x770 [ 406.282120][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 406.287269][ C1] ? __switch_to_asm+0x39/0x70 [ 406.292084][ C1] ? __switch_to_asm+0x33/0x70 [ 406.296899][ C1] ? __pfx_kthread+0x10/0x10 [ 406.301536][ C1] ret_from_fork_asm+0x1a/0x30 [ 406.306358][ C1] [ 406.309404][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 406.315779][ C1] CPU: 1 UID: 0 PID: 6083 Comm: kworker/u8:9 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 406.325883][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.335965][ C1] Workqueue: events_unbound toggle_allocation_gate [ 406.342515][ C1] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 406.349222][ C1] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 80 6e 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 2b 6a 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 10 6a 0b [ 406.368883][ C1] RSP: 0018:ffffc9000abb76a0 EFLAGS: 00000293 [ 406.374985][ C1] RAX: ffffffff81b4bbb0 RBX: ffff8880b873b040 RCX: ffff888025a81e00 [ 406.382990][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 406.390989][ C1] RBP: ffffc9000abb7800 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 406.398990][ C1] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: 1ffff110170c835d [ 406.406992][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8641ae8 [ 406.415014][ C1] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 406.424002][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.430629][ C1] CR2: 000000110c2e41ba CR3: 000000000df38000 CR4: 00000000003526f0 [ 406.438637][ C1] Call Trace: [ 406.441950][ C1] [ 406.444928][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 406.451289][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 406.456697][ C1] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 406.462796][ C1] ? __pfx___text_poke+0x10/0x10 [ 406.467766][ C1] ? rcu_is_watching+0x15/0xb0 [ 406.472561][ C1] ? trace_contention_end+0x39/0x120 [ 406.477893][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 406.482956][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 406.488101][ C1] smp_text_poke_batch_finish+0x5e0/0x1100 [ 406.493950][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 406.499008][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 406.505303][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 406.511596][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 406.517621][ C1] static_key_enable_cpuslocked+0x128/0x250 [ 406.523558][ C1] static_key_enable+0x1a/0x20 [ 406.528449][ C1] toggle_allocation_gate+0xad/0x240 [ 406.533766][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 406.539698][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 406.545462][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 406.551210][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 406.556961][ C1] process_scheduled_works+0xade/0x17b0 [ 406.562569][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 406.568606][ C1] worker_thread+0x8a0/0xda0 [ 406.573231][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 406.579617][ C1] ? __kthread_parkme+0x7b/0x200 [ 406.584603][ C1] kthread+0x70e/0x8a0 [ 406.588711][ C1] ? __pfx_worker_thread+0x10/0x10 [ 406.593857][ C1] ? __pfx_kthread+0x10/0x10 [ 406.598514][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 406.603741][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.608987][ C1] ? __pfx_kthread+0x10/0x10 [ 406.613639][ C1] ret_from_fork+0x3fc/0x770 [ 406.618264][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 406.623413][ C1] ? __switch_to_asm+0x39/0x70 [ 406.628208][ C1] ? __switch_to_asm+0x33/0x70 [ 406.633004][ C1] ? __pfx_kthread+0x10/0x10 [ 406.637642][ C1] ret_from_fork_asm+0x1a/0x30 [ 406.642463][ C1] [ 406.645865][ C1] vkms_vblank_simulate: vblank timer overrun