last executing test programs: 36.519343028s ago: executing program 1 (id=1129): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 33.202380807s ago: executing program 1 (id=1134): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0xffffffff, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) 32.935032994s ago: executing program 1 (id=1136): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x16) syz_open_dev$vim2m(0x0, 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, 0x0, &(0x7f00000001c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000000740)) ioperm(0x7, 0x449, 0x7ff) rt_sigpending(0x0, 0x1000000) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000200), 0x10c820, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612cc792fbaa584a323461d64a706f72743d30322c00bb4fb37263ba48ac028276ec411a8846b389587dcb5a0bfdb07d359d06eb85"]) accept4(r0, 0x0, 0x0, 0x0) 30.870861139s ago: executing program 1 (id=1145): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 29.032621891s ago: executing program 1 (id=1150): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 28.265768734s ago: executing program 1 (id=1154): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000003c0)={0x1f, 0xffffffffffffffff, 0x5}, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x25, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$llc_int(r3, 0x10c, 0x3, 0x0, &(0x7f00000000c0)) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, 0x0, &(0x7f00000000c0)) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x7}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) ioctl$I2C_SLAVE(r6, 0x703, 0x26b) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r8, 0x29, 0x40, &(0x7f0000000140)={'mangle\x00', 0x0, [0x7ff, 0x4000105, 0x38e, 0x3, 0x82]}, &(0x7f0000000400)=0x54) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000040), 0xc9c, 0x400) syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb08004500007400f5000004019078ac1e0001ac1414aa03019078036100004600000000004000141410ac1414bb44440001000086dd0000dc02ffffffff00000000ac14143200000000000000000000004fe0000002000000007f00000111000e00ac1414aa00000004e000000100000000"], 0x0) 17.285077955s ago: executing program 2 (id=1175): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x2, 0x302) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x15, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) semop(0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 15.664491452s ago: executing program 2 (id=1181): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000000)='map_files\x00') fchdir(r3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c2, 0x108) 12.908348069s ago: executing program 32 (id=1154): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000003c0)={0x1f, 0xffffffffffffffff, 0x5}, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x25, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$llc_int(r3, 0x10c, 0x3, 0x0, &(0x7f00000000c0)) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, 0x0, &(0x7f00000000c0)) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x7}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) ioctl$I2C_SLAVE(r6, 0x703, 0x26b) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r8, 0x29, 0x40, &(0x7f0000000140)={'mangle\x00', 0x0, [0x7ff, 0x4000105, 0x38e, 0x3, 0x82]}, &(0x7f0000000400)=0x54) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000040), 0xc9c, 0x400) syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb08004500007400f5000004019078ac1e0001ac1414aa03019078036100004600000000004000141410ac1414bb44440001000086dd0000dc02ffffffff00000000ac14143200000000000000000000004fe0000002000000007f00000111000e00ac1414aa00000004e000000100000000"], 0x0) 12.902361551s ago: executing program 2 (id=1186): syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@empty, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0xb7, 0xffffffff, 0x5a8}}, 0xe8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 10.506875224s ago: executing program 0 (id=1190): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x1f, 0x0, 0x0, 0x0, 0x155555555555583f, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "c78a2ea7f473db61", "204ae73ffb904a7093fe02fdeec85f53c032dfa90ab62215bfcdf8a536132d82", "a2e7ce77", "329619031218c349"}, 0x38) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x1400, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 10.38319056s ago: executing program 2 (id=1191): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x1) 9.551927919s ago: executing program 2 (id=1192): sched_setscheduler(0x0, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000003c0)=""/4096) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000002d00010026bd7000fc0000000000000008"], 0x1c}}, 0x20000000) r5 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') socket$netlink(0x10, 0x3, 0x8000000004) ioctl$BLKCRYPTOPREPAREKEY(r6, 0xc040128b, &(0x7f0000000180)={&(0x7f00000000c0)="0ead046017a785d3ca323715a5ed6b620110c9b515826797dca14a387cc24c3ecaba3b807efcc1a75e77", 0x2a, &(0x7f0000000100)=""/49, 0x31}) close_range(r6, 0xffffffffffffffff, 0x0) 9.309340913s ago: executing program 3 (id=1194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_io_uring_setup(0x45bc, &(0x7f00000000c0)={0x0, 0x1b00, 0x8, 0x3, 0x80}, 0x0, &(0x7f0000000400)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x1f) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xff) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 9.25210636s ago: executing program 0 (id=1195): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) syz_clone(0x5000080, &(0x7f0000000240), 0x0, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0)="69ec2bf1eaa308ed8aa93e240294228db488939cba703df9724b") write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x2e24, @empty}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.353720691s ago: executing program 2 (id=1196): r0 = socket(0x10, 0x803, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x3, 0x8000}, 0xc) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xf}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44041}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r5, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[], 0x15) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r9, 0x40045402, &(0x7f0000000140)=0x1) read(r9, &(0x7f0000000040)=""/46, 0x2e) 6.907682196s ago: executing program 33 (id=1196): r0 = socket(0x10, 0x803, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x3, 0x8000}, 0xc) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xf}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44041}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r5, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[], 0x15) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r9, 0x40045402, &(0x7f0000000140)=0x1) read(r9, &(0x7f0000000040)=""/46, 0x2e) 6.898477863s ago: executing program 0 (id=1199): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002205000000d9fe79fe1e"], 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 6.897854368s ago: executing program 3 (id=1200): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6.288751665s ago: executing program 3 (id=1202): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r1, 0x0, 0x3}, 0x18) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) 5.42789966s ago: executing program 3 (id=1204): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x4, 0x482480) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000180)=0xfffffffffffffffb) r1 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r6}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0200000002"], 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r10, r9, 0x2, 0x0, 0x4000}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, 0x0, 0x0) r12 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r12, 0x43403d05, &(0x7f0000000bc0)={0x40000011}) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 4.031819498s ago: executing program 3 (id=1205): sched_setscheduler(0x0, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000003c0)=""/4096) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000002d00010026bd7000fc0000000000000008"], 0x1c}}, 0x20000000) r5 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') socket$netlink(0x10, 0x3, 0x8000000004) ioctl$BLKCRYPTOPREPAREKEY(r6, 0xc040128b, &(0x7f0000000180)={&(0x7f00000000c0)="0ead046017a785d3ca323715a5ed6b620110c9b515826797dca14a387cc24c3ecaba3b807efcc1a75e77", 0x2a, &(0x7f0000000100)=""/49, 0x31}) close_range(r6, 0xffffffffffffffff, 0x0) 3.538947859s ago: executing program 4 (id=1206): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x0, "1f13c324d8bf183fa89523a20a2e2d746e71a13e29721f39f3837cc8ecd4afda", 0x800, 0x6, 0x0, 0x1ff}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x72e3, &(0x7f00000001c0)={0x0, 0xd8b, 0x40, 0x1, 0x5}, &(0x7f0000000040), 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000240), 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x40000000}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r2], 0x48) syz_open_dev$loop(0x0, 0x75f, 0xa382) memfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) socket$isdn_base(0x22, 0x3, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000120001002abd7000fcdbdf", @ANYRES32=0x0, @ANYBLOB="048002008000000008001d005b7e60b3140500000000766c616e00000000000000000004"], 0x3c}}, 0x0) bind$x25(r5, &(0x7f0000000e00), 0x12) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) 3.11585041s ago: executing program 4 (id=1207): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x48}) read(r0, &(0x7f0000000140)=""/238, 0xee) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) 3.115587098s ago: executing program 3 (id=1208): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ffff1a406998221d0275fb60829709021200010000000009040000000202", @ANYRES32], 0x0) 2.589773311s ago: executing program 0 (id=1209): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="010000003a9504001000030001000300000001000000b9f2df24c7036daafaaff6ca737f80c0eb70d56edd01b2acb2aa20d2053e40b1d9c638ce650572c86a402fc8ac15f2920e8d14249da9c7b83fedd8f18aff29599a900063f7096e", @ANYBLOB="0100"/19, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1c}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20044818) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x0}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept(r3, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r4, 0x10c, 0x6, &(0x7f0000002940), &(0x7f0000000000)=0x4) 2.520184232s ago: executing program 4 (id=1210): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.248086913s ago: executing program 4 (id=1211): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x2, 0x302) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x15, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) semop(0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 1.358255636s ago: executing program 0 (id=1212): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) 317.573097ms ago: executing program 4 (id=1213): getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}}], 0x1, 0x40002) 212.462795ms ago: executing program 0 (id=1214): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRES32=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_setup(0x4090, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigqueueinfo(0x0, 0x6, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 0s ago: executing program 4 (id=1215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x45bc, &(0x7f00000000c0)={0x0, 0x1b00, 0x8, 0x3, 0x80}, 0x0, &(0x7f0000000400)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x1f) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x2) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0xff) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): tdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.643282][ T5165] Bluetooth: hci2: command tx timeout [ 89.648883][ T5848] Bluetooth: hci1: command tx timeout [ 89.680607][ T5859] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.692073][ T5859] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.797694][ T5165] Bluetooth: hci3: command tx timeout [ 89.797705][ T5848] Bluetooth: hci4: command tx timeout [ 89.808285][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.820333][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.842868][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.854411][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.885866][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.989191][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.005898][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.013221][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.034921][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.065988][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.073178][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.095602][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.109754][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.144411][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.151554][ T3025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.180171][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.187371][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.210833][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.273488][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.298717][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.343227][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.350377][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.381650][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.388863][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.405130][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.412415][ T3025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.441309][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.448516][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.496822][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.652501][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.673614][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.680799][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.745525][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.752744][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.958924][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.148215][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.175559][ T5845] veth0_vlan: entered promiscuous mode [ 91.273370][ T5845] veth1_vlan: entered promiscuous mode [ 91.303241][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.352158][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.391337][ T5854] veth0_vlan: entered promiscuous mode [ 91.415264][ T5854] veth1_vlan: entered promiscuous mode [ 91.474997][ T5845] veth0_macvtap: entered promiscuous mode [ 91.515736][ T5845] veth1_macvtap: entered promiscuous mode [ 91.583829][ T5854] veth0_macvtap: entered promiscuous mode [ 91.609141][ T5854] veth1_macvtap: entered promiscuous mode [ 91.625507][ T5857] veth0_vlan: entered promiscuous mode [ 91.637429][ T5165] Bluetooth: hci0: command tx timeout [ 91.644744][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.655709][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.673729][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.720540][ T5165] Bluetooth: hci2: command tx timeout [ 91.727203][ T5165] Bluetooth: hci1: command tx timeout [ 91.732775][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.743499][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.764139][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.782315][ T5857] veth1_vlan: entered promiscuous mode [ 91.807495][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.807504][ T927] cfg80211: failed to load regulatory.db [ 91.833963][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.877693][ T5165] Bluetooth: hci4: command tx timeout [ 91.878727][ T5848] Bluetooth: hci3: command tx timeout [ 91.917816][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.005982][ T1337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.027155][ T5844] veth0_vlan: entered promiscuous mode [ 92.032916][ T1337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.055494][ T1337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.064974][ T1337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.077054][ T5857] veth0_macvtap: entered promiscuous mode [ 92.124058][ T5844] veth1_vlan: entered promiscuous mode [ 92.134581][ T5857] veth1_macvtap: entered promiscuous mode [ 92.158369][ T5859] veth0_vlan: entered promiscuous mode [ 92.176985][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.184933][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.192412][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.204686][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.254301][ T5859] veth1_vlan: entered promiscuous mode [ 92.263821][ T3025] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.274273][ T3025] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.300774][ T3025] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.333940][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.349796][ T5844] veth0_macvtap: entered promiscuous mode [ 92.373534][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.382134][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.416663][ T5844] veth1_macvtap: entered promiscuous mode [ 92.424815][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.441761][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.502827][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.563947][ T5859] veth0_macvtap: entered promiscuous mode [ 92.601590][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.627371][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.629205][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.675537][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.684978][ T5859] veth1_macvtap: entered promiscuous mode [ 92.701542][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.761097][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.842728][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.865970][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.951787][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.981736][ T1337] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.012386][ T1337] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.095811][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.106842][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.138432][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.356415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.387089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.395378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.404338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.560771][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.591823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.597424][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.617145][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.635985][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.717815][ T5848] Bluetooth: hci0: command tx timeout [ 93.797902][ T5848] Bluetooth: hci1: command tx timeout [ 93.803362][ T5848] Bluetooth: hci2: command tx timeout [ 93.919588][ T3025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.938566][ T3025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.963119][ T5165] Bluetooth: hci3: command tx timeout [ 93.963120][ T5848] Bluetooth: hci4: command tx timeout [ 94.184049][ T5975] trusted_key: encrypted_key: insufficient parameters specified [ 94.196597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 94.699019][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.706949][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.986350][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.004565][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.128031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.174207][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.194503][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.266633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.276502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.304525][ T5982] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 95.477145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.555020][ T5848] Bluetooth: hci0: Malformed Event: 0x13 [ 95.608045][ T5989] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.258679][ T6006] Zero length message leads to an empty skb [ 99.411938][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 99.426643][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 99.619010][ T6023] binder: 6022:6023 ioctl 4018620d 0 returned -22 [ 99.746375][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 99.845034][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 100.073669][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 100.546549][ T6021] ceph: No mds server is up or the cluster is laggy [ 101.137202][ T5928] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.588194][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.652684][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.751282][ T5928] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 101.867829][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.231534][ T5928] usb 4-1: config 0 descriptor?? [ 104.644575][ T5928] usbhid 4-1:0.0: can't add hid device: -71 [ 104.654691][ T5928] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 104.703536][ T5928] usb 4-1: USB disconnect, device number 2 [ 104.716822][ T6063] comedi comedi0: fl512: I/O port conflict (0x1,16) [ 105.720802][ T6073] loop5: detected capacity change from 0 to 1831 [ 105.763835][ T6066] syz.0.30 (6066) used greatest stack depth: 16648 bytes left [ 108.790636][ T6100] Unknown options in mask 5 [ 111.741133][ T6126] tmpfs: Unknown parameter 'defcontext' [ 112.778599][ T6137] syz_tun: entered allmulticast mode [ 113.676510][ T5928] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 114.103131][ T5928] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.125775][ T5928] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.155839][ T6135] syz_tun: left allmulticast mode [ 114.162907][ T5928] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.350043][ T5928] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 114.453124][ T5928] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 114.508060][ T5928] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 114.524416][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.976849][ T6143] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 115.029510][ T6152] sctp: failed to load transform for md5: -2 [ 115.049895][ T6157] sctp: failed to load transform for md5: -2 [ 115.068712][ T5928] hub 1-1:1.0: bad descriptor, ignoring hub [ 115.075488][ T5928] hub 1-1:1.0: probe with driver hub failed with error -5 [ 115.153496][ T5928] cdc_wdm 1-1:1.0: skipping garbage [ 115.168497][ T5928] cdc_wdm 1-1:1.0: skipping garbage [ 115.277512][ T5928] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 115.283484][ T5928] cdc_wdm 1-1:1.0: Unknown control protocol [ 115.298017][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 115.304802][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 115.311832][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 115.318442][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 115.325127][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 115.331725][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 115.339018][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 115.345654][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 115.352849][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 115.359469][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 115.366731][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 115.373367][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 115.380031][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 115.386655][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 115.394190][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 115.400822][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 115.408305][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 115.415189][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 115.422368][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 115.428988][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 115.713329][ T6167] tipc: Started in network mode [ 115.760059][ T6167] tipc: Node identity 921578dbd4f, cluster identity 4711 [ 115.808364][ T6167] tipc: Enabled bearer , priority 0 [ 115.866376][ T6167] syzkaller0: entered promiscuous mode [ 115.873748][ T5928] usb 1-1: USB disconnect, device number 2 [ 115.880160][ T6167] syzkaller0: entered allmulticast mode [ 116.006279][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 116.089968][ T6165] tipc: Resetting bearer [ 116.138997][ T6165] tipc: Disabling bearer [ 116.253186][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.284337][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.298929][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 116.463337][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.477626][ T10] usb 4-1: config 0 descriptor?? [ 117.259725][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.438744][ T10] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 117.456420][ T9] usb 3-1: no configurations [ 117.461041][ T9] usb 3-1: can't read configurations, error -22 [ 117.478198][ T10] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 117.485032][ T10] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 117.540095][ T10] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 117.560184][ T10] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 117.575790][ T10] savu 0003:1E7D:2D5A.0001: unbalanced collection at end of report description [ 117.648073][ T10] savu 0003:1E7D:2D5A.0001: parse failed [ 117.660318][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.779267][ T10] savu 0003:1E7D:2D5A.0001: probe with driver savu failed with error -22 [ 117.820492][ T5885] IPVS: starting estimator thread 0... [ 117.891301][ T10] usb 4-1: USB disconnect, device number 3 [ 117.916619][ T5944] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.976632][ T9] usb 3-1: no configurations [ 117.977124][ T6185] IPVS: using max 29 ests per chain, 69600 per kthread [ 117.982229][ T9] usb 3-1: can't read configurations, error -22 [ 118.177220][ T9] usb usb3-port1: attempt power cycle [ 118.246438][ T5944] usb 2-1: Using ep0 maxpacket: 32 [ 118.259709][ T5944] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 118.274836][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.312341][ T5944] usb 2-1: Product: syz [ 118.327174][ T5944] usb 2-1: Manufacturer: syz [ 118.340278][ T5944] usb 2-1: SerialNumber: syz [ 118.363233][ T5944] empeg 2-1:1.0: empeg converter detected [ 119.146536][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.880455][ T5944] usb 2-1: empeg converter now attached to ttyUSB0 [ 120.102756][ T9] usb 3-1: device not accepting address 4, error -71 [ 121.058222][ T5885] usb 2-1: USB disconnect, device number 2 [ 121.684414][ T6213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.73'. [ 122.029180][ T5885] empeg ttyUSB0: empeg converter now disconnected from ttyUSB0 [ 122.037970][ T5885] empeg 2-1:1.0: device disconnected [ 122.576381][ T5885] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.782577][ T5885] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 122.800081][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.112620][ T6238] tmpfs: Bad value for 'mpol' [ 123.120856][ T6238] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 123.147166][ T6238] CIFS mount error: No usable UNC path provided in device string! [ 123.147166][ T6238] [ 123.160301][ T6238] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 123.226215][ T5885] usb 1-1: config 0 has no interface number 0 [ 123.233624][ T5885] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 123.243384][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.255806][ T5885] usb 1-1: config 0 descriptor?? [ 123.326404][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.805704][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 123.819097][ T24] usb 4-1: config 0 has an invalid interface number: 54 but max is 0 [ 123.915343][ T24] usb 4-1: config 0 has no interface number 0 [ 124.008848][ T24] usb 4-1: config 0 interface 54 has no altsetting 0 [ 124.398917][ T24] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 124.422720][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.535050][ T24] usb 4-1: Product: syz [ 124.543074][ T24] usb 4-1: Manufacturer: syz [ 124.573161][ T30] audit: type=1800 audit(1751960999.353:2): pid=6257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.86" name="/" dev="fuse" ino=1 res=0 errno=0 [ 124.602883][ T24] usb 4-1: SerialNumber: syz [ 124.622291][ T24] usb 4-1: config 0 descriptor?? [ 124.877516][ T24] ums_eneub6250 4-1:0.54: USB Mass Storage device detected [ 124.995289][ T24] usb 4-1: USB disconnect, device number 4 [ 126.485366][ T48] usb 1-1: USB disconnect, device number 3 [ 127.746599][ T6285] binder: 6284:6285 ioctl c0306201 200000000040 returned -22 [ 127.756742][ T6285] binder: 6284:6285 ioctl c0306201 200000000640 returned -22 [ 131.163083][ T30] audit: type=1326 audit(1751961005.943:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54a338e929 code=0x7fc00000 [ 131.463853][ T6326] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.589540][ T9] IPVS: starting estimator thread 0... [ 131.996313][ T6330] IPVS: using max 23 ests per chain, 55200 per kthread [ 132.786783][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.794223][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.382435][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 134.634263][ T5885] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.868099][ T5885] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 134.886443][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.913174][ T5885] usb 1-1: config 0 descriptor?? [ 136.783462][ T6379] Bluetooth: MGMT ver 1.23 [ 137.110624][ T6386] sctp: [Deprecated]: syz.2.130 (pid 6386) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.110624][ T6386] Use struct sctp_sack_info instead [ 138.839801][ T6396] netlink: 'syz.3.131': attribute type 1 has an invalid length. [ 138.848234][ T6396] netlink: 224 bytes leftover after parsing attributes in process `syz.3.131'. [ 139.262348][ T6399] process 'syz.1.133' launched './file2' with NULL argv: empty string added [ 139.863284][ T30] audit: type=1326 audit(1751961014.643:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca9d8e929 code=0x7fc00000 [ 140.707754][ T5885] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 140.769727][ T5885] asix 1-1:0.0: probe with driver asix failed with error -71 [ 140.816534][ T5885] usb 1-1: USB disconnect, device number 4 [ 142.604579][ T6449] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 142.812754][ T6449] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 142.903721][ T6452] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.152'. [ 142.913586][ T6452] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 143.226811][ T6449] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 143.237220][ T6449] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 144.730499][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.160'. [ 147.064563][ T5885] IPVS: starting estimator thread 0... [ 147.166625][ T6491] IPVS: using max 23 ests per chain, 55200 per kthread [ 148.631724][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'. [ 149.862155][ T5944] IPVS: starting estimator thread 0... [ 150.009400][ T6526] IPVS: using max 23 ests per chain, 55200 per kthread [ 150.697138][ T48] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 150.783650][ T5885] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 151.366377][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 151.424838][ T48] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 151.478054][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.482179][ T6536] syz.4.183 uses obsolete (PF_INET,SOCK_PACKET) [ 151.506010][ T48] usb 3-1: config 0 descriptor?? [ 151.539223][ T48] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 151.558300][ T5885] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 151.574629][ T5885] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 32, changing to 9 [ 151.586609][ T5885] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1232, setting to 1024 [ 151.600115][ T5885] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 151.616149][ T5885] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 151.646174][ T5885] usb 2-1: Manufacturer: syz [ 151.650805][ T5885] usb 2-1: SerialNumber: syz [ 151.698495][ T6530] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 151.846285][ T927] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 151.936322][ T5885] yealink 2-1:36.0: invalid payload size 1024, expected 16 [ 151.952467][ T5885] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input5 [ 151.970946][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 151.977975][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 151.985028][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 151.992157][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 151.999302][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 152.007591][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 152.015208][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 152.017024][ T927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.022605][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 152.040222][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 152.047024][ C0] yealink 2-1:36.0: unexpected response 0 [ 152.054296][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 152.061430][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 152.068243][ C0] yealink 2-1:36.0: unexpected response 0 [ 152.075333][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 152.078274][ T927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.083386][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 152.098689][ C0] yealink 2-1:36.0: unexpected response 0 [ 152.099174][ T927] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 152.106718][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 152.122859][ T927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.126218][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 152.137662][ C0] yealink 2-1:36.0: unexpected response 0 [ 152.143764][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 152.150233][ T927] usb 4-1: config 0 descriptor?? [ 152.150755][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 152.162976][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 152.169949][ T5885] usb 2-1: USB disconnect, device number 3 [ 152.176542][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 152.176564][ C0] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -19 [ 152.363226][ T48] gspca_sonixj: reg_r err -32 [ 152.371362][ T48] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 153.437624][ T5928] usb 3-1: USB disconnect, device number 6 [ 154.667544][ T927] usbhid 4-1:0.0: can't add hid device: -71 [ 154.673982][ T927] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 154.939037][ T927] usb 4-1: USB disconnect, device number 5 [ 158.904439][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 158.911268][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 159.177438][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 159.183552][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 159.881878][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 159.895762][ T6592] ceph: No mds server is up or the cluster is laggy [ 159.914374][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 159.921884][ T30] audit: type=1326 audit(1751961034.703:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca9d8e929 code=0x7ffc0000 [ 159.944139][ T30] audit: type=1326 audit(1751961034.703:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca9d8e929 code=0x7ffc0000 [ 160.423619][ T30] audit: type=1326 audit(1751961034.793:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ca9d8e929 code=0x7ffc0000 [ 160.521725][ T30] audit: type=1326 audit(1751961034.793:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca9d8e929 code=0x7ffc0000 [ 160.644461][ T30] audit: type=1326 audit(1751961034.793:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca9d8e929 code=0x7ffc0000 [ 160.750768][ T30] audit: type=1326 audit(1751961034.793:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4ca9d8e929 code=0x7ffc0000 [ 160.881641][ T30] audit: type=1326 audit(1751961034.793:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca9d8e929 code=0x7ffc0000 [ 160.903729][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.011434][ T30] audit: type=1326 audit(1751961034.793:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca9d8e929 code=0x7ffc0000 [ 161.267246][ T30] audit: type=1326 audit(1751961034.793:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4ca9d8e929 code=0x7ffc0000 [ 161.291817][ T30] audit: type=1326 audit(1751961034.793:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6605 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca9d8e929 code=0x7ffc0000 [ 161.396274][ T48] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 161.556728][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 161.579247][ T48] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 161.712647][ T48] usb 3-1: config 0 has no interface number 0 [ 161.833273][ T48] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 162.159388][ T48] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 162.168555][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.176708][ T48] usb 3-1: Product: syz [ 162.180879][ T48] usb 3-1: Manufacturer: syz [ 162.185476][ T48] usb 3-1: SerialNumber: syz [ 162.219890][ T48] usb 3-1: config 0 descriptor?? [ 162.240033][ T48] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 162.257073][ T48] em28xx 3-1:0.132: Video interface 132 found: [ 162.638621][ T48] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 162.950445][ T48] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 163.016163][ T48] em28xx 3-1:0.132: board has no eeprom [ 163.039581][ T6646] netlink: 'syz.3.222': attribute type 3 has an invalid length. [ 163.060069][ T6646] netlink: 'syz.3.222': attribute type 3 has an invalid length. [ 163.091772][ T6646] netlink: 'syz.3.222': attribute type 3 has an invalid length. [ 163.110113][ T48] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 163.145838][ T6646] netlink: 'syz.3.222': attribute type 3 has an invalid length. [ 163.148335][ T48] em28xx 3-1:0.132: analog set to bulk mode. [ 163.159426][ T6646] netlink: 'syz.3.222': attribute type 3 has an invalid length. [ 163.178570][ T6646] netlink: 'syz.3.222': attribute type 3 has an invalid length. [ 163.188275][ T6646] netlink: 'syz.3.222': attribute type 3 has an invalid length. [ 163.196984][ T6646] netlink: 'syz.3.222': attribute type 3 has an invalid length. [ 163.203289][ T6009] em28xx 3-1:0.132: Registering V4L2 extension [ 163.204870][ T6646] netlink: 'syz.3.222': attribute type 3 has an invalid length. [ 163.253778][ T48] usb 3-1: USB disconnect, device number 7 [ 163.254407][ T6646] netlink: 'syz.3.222': attribute type 3 has an invalid length. [ 163.286956][ T48] em28xx 3-1:0.132: Disconnecting em28xx [ 163.346431][ T5944] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 163.538014][ T5944] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 163.586114][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.645461][ T5944] usb 1-1: config 0 descriptor?? [ 163.683513][ T5944] cp210x 1-1:0.0: cp210x converter detected [ 163.738390][ T6009] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 163.760068][ T6009] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 163.775852][ T6009] em28xx 3-1:0.132: No AC97 audio processor [ 163.864630][ T6009] usb 3-1: Decoder not found [ 163.874851][ T6009] em28xx 3-1:0.132: failed to create media graph [ 163.966168][ T6009] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 164.369844][ T5944] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 164.386431][ T6009] em28xx 3-1:0.132: Remote control support is not available for this card. [ 164.596674][ T6672] netlink: 96 bytes leftover after parsing attributes in process `syz.4.229'. [ 164.609518][ T48] em28xx 3-1:0.132: Closing input extension [ 164.618625][ T6672] tmpfs: Bad value for 'mpol' [ 164.624187][ T6672] CIFS mount error: No usable UNC path provided in device string! [ 164.624187][ T6672] [ 164.634323][ T6672] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 164.654880][ T5944] usb 1-1: cp210x converter now attached to ttyUSB0 [ 164.750588][ T48] em28xx 3-1:0.132: Freeing device [ 165.017974][ T5944] usb 1-1: USB disconnect, device number 5 [ 166.113146][ T5944] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 166.148749][ T5944] cp210x 1-1:0.0: device disconnected [ 168.900669][ T6713] validate_nla: 44 callbacks suppressed [ 168.900689][ T6713] netlink: 'syz.4.239': attribute type 3 has an invalid length. [ 168.971550][ T6713] netlink: 'syz.4.239': attribute type 3 has an invalid length. [ 169.026337][ T6713] netlink: 'syz.4.239': attribute type 3 has an invalid length. [ 169.057204][ T6713] netlink: 'syz.4.239': attribute type 3 has an invalid length. [ 170.108486][ T6724] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 170.204509][ T6713] netlink: 'syz.4.239': attribute type 3 has an invalid length. [ 170.416365][ T6713] netlink: 'syz.4.239': attribute type 3 has an invalid length. [ 170.430639][ T6713] netlink: 'syz.4.239': attribute type 3 has an invalid length. [ 170.522447][ T6713] netlink: 'syz.4.239': attribute type 3 has an invalid length. [ 170.550830][ T6713] netlink: 'syz.4.239': attribute type 3 has an invalid length. [ 170.716243][ T6713] netlink: 'syz.4.239': attribute type 3 has an invalid length. [ 176.619382][ T6775] validate_nla: 43 callbacks suppressed [ 176.619400][ T6775] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 176.640717][ T6775] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 176.653247][ T6775] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 176.662700][ T6775] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 176.673627][ T6775] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 176.681800][ T6775] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 176.765544][ T6775] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 176.806254][ T6775] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 176.834182][ T6775] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 176.884947][ T6775] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 179.053428][ T6808] netlink: 216 bytes leftover after parsing attributes in process `syz.1.274'. [ 181.605857][ T6840] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.285'. [ 181.615155][ T6840] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 182.216660][ T5885] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 182.296460][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'. [ 182.385571][ T6856] validate_nla: 45 callbacks suppressed [ 182.385591][ T6856] netlink: 'syz.1.293': attribute type 10 has an invalid length. [ 182.408134][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 182.567594][ T5885] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.627524][ T5885] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.651572][ T5885] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.677084][ T5885] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.850918][ T6856] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 182.861793][ T5885] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.880471][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.206383][ T5944] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 183.221117][ T5885] usb 1-1: GET_CAPABILITIES returned 0 [ 183.359662][ T5885] usbtmc 1-1:16.0: can't read capabilities [ 183.476167][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 183.490639][ T5944] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 183.505678][ T5944] usb 3-1: config 0 has no interface number 0 [ 183.521693][ T5885] usb 1-1: USB disconnect, device number 6 [ 183.531820][ T5944] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 183.557824][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.615045][ T5944] usb 3-1: Product: syz [ 183.626239][ T5944] usb 3-1: Manufacturer: syz [ 183.638391][ T5944] usb 3-1: SerialNumber: syz [ 183.659002][ T5944] usb 3-1: config 0 descriptor?? [ 183.670353][ T5944] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 183.876531][ T5944] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 183.901636][ T5944] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 186.603761][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 186.666451][ T927] usb 3-1: USB disconnect, device number 8 [ 186.697180][ T927] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 186.752001][ T927] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 186.999471][ T927] quatech2 3-1:0.51: device disconnected [ 188.758725][ T6940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.316'. [ 188.990051][ T6940] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 191.102350][ T6960] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 192.556408][ T6009] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 193.117405][ T6009] usb 4-1: Using ep0 maxpacket: 16 [ 193.626310][ T6009] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 193.669815][ T6009] usb 4-1: config 0 has no interface number 0 [ 193.696775][ T6009] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 193.706951][ T6009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.722375][ T6009] usb 4-1: Product: syz [ 193.729137][ T6009] usb 4-1: Manufacturer: syz [ 193.734000][ T6009] usb 4-1: SerialNumber: syz [ 193.763890][ T6009] usb 4-1: config 0 descriptor?? [ 193.777783][ T6009] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 193.967332][ T6988] netlink: 96 bytes leftover after parsing attributes in process `syz.0.334'. [ 193.980294][ T6988] tmpfs: Bad value for 'mpol' [ 193.985774][ T6988] CIFS mount error: No usable UNC path provided in device string! [ 193.985774][ T6988] [ 193.995826][ T6988] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 194.199563][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.205918][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.540433][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 194.615831][ T6009] gspca_spca1528: reg_w err -71 [ 194.647186][ T6009] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 194.711357][ T6009] usb 4-1: USB disconnect, device number 6 [ 194.738536][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.775442][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.818491][ T7001] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.340'. [ 194.827758][ T7001] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 194.847824][ T10] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 194.867823][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.897857][ T10] usb 1-1: config 0 descriptor?? [ 195.207051][ T7007] tipc: Enabling of bearer rejected, failed to enable media [ 195.614533][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 195.628111][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 195.651199][ T10] usb 1-1: USB disconnect, device number 7 [ 195.873803][ T7016] netlink: 96 bytes leftover after parsing attributes in process `syz.4.345'. [ 195.885806][ T7016] tmpfs: Bad value for 'mpol' [ 195.892129][ T7016] CIFS mount error: No usable UNC path provided in device string! [ 195.892129][ T7016] [ 195.902180][ T7016] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 196.237768][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'. [ 198.013488][ T7047] netlink: 96 bytes leftover after parsing attributes in process `syz.3.357'. [ 198.026300][ T7047] tmpfs: Bad value for 'mpol' [ 198.031749][ T7047] CIFS mount error: No usable UNC path provided in device string! [ 198.031749][ T7047] [ 198.042431][ T7047] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 198.681296][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 198.896387][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 199.489985][ T10] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 199.506362][ T10] usb 4-1: config 0 has no interface number 0 [ 199.515372][ T10] usb 4-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 255 [ 199.593183][ T10] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 199.602791][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 199.602806][ T30] audit: type=1804 audit(1751961074.393:26): pid=7062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.362" name="/newroot/77/file0" dev="tmpfs" ino=435 res=1 errno=0 [ 199.633077][ T10] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 199.656114][ T10] usb 4-1: Product: syz [ 199.665267][ T10] usb 4-1: Manufacturer: syz [ 199.675387][ T10] usb 4-1: SerialNumber: syz [ 199.711519][ T10] usb 4-1: config 0 descriptor?? [ 199.729888][ T7053] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 199.744233][ T7034] syz.1.351 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 199.879177][ T7071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.894276][ T7071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.922780][ T7071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.193932][ T7071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.195531][ T10] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 200.484195][ T7075] fuse: Bad value for 'fd' [ 200.486662][ T10] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 200.531634][ T10] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 200.572078][ T10] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 200.671468][ T10] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 200.698336][ T7076] block nbd2: shutting down sockets [ 200.722513][ T10] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 200.758904][ T10] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 200.795420][ T10] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 200.812272][ T7076] sp0: Synchronizing with TNC [ 200.883499][ T10] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 200.918225][ T7070] [U] è [ 200.925069][ T10] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 201.006135][ T10] usb 4-1: USB disconnect, device number 7 [ 201.054018][ T10] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 201.113242][ T10] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 201.198422][ T10] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 201.278408][ T10] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 201.318217][ T10] keyspan 4-1:0.107: device disconnected [ 201.497504][ T7089] netlink: 96 bytes leftover after parsing attributes in process `syz.4.370'. [ 201.510854][ T7089] tmpfs: Bad value for 'mpol' [ 201.516283][ T7089] CIFS mount error: No usable UNC path provided in device string! [ 201.516283][ T7089] [ 201.527659][ T7089] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 201.664872][ T7091] trusted_key: encrypted_key: key user:syz not found [ 202.602066][ T7095] binder: 7094:7095 ioctl c018620c 200000000100 returned -1 [ 202.778466][ T7100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.816489][ T30] audit: type=1804 audit(1751961077.563:27): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.374" name="/newroot/82/file0" dev="tmpfs" ino=463 res=1 errno=0 [ 203.976658][ T5885] psmouse serio2: Failed to reset mouse on : -5 [ 205.223260][ T30] audit: type=1804 audit(1751961080.013:28): pid=7136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.386" name="/newroot/86/file0" dev="tmpfs" ino=466 res=1 errno=0 [ 205.248204][ T7136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.766270][ T5944] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 206.666515][ T5944] usb 1-1: Using ep0 maxpacket: 32 [ 206.688371][ T5944] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 206.716412][ T5944] usb 1-1: config 0 has no interface number 0 [ 206.744807][ T5944] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 206.763883][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.787037][ T5944] usb 1-1: Product: syz [ 206.800443][ T5944] usb 1-1: Manufacturer: syz [ 206.811749][ T5944] usb 1-1: SerialNumber: syz [ 206.840619][ T5944] usb 1-1: config 0 descriptor?? [ 206.863772][ T5944] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 207.089506][ T5944] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 207.137009][ T5944] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 207.936249][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 208.236137][ T5885] misc userio: Buffer overflowed, userio client isn't keeping up [ 208.600627][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 208.611538][ T6009] usb 1-1: USB disconnect, device number 8 [ 208.644449][ T6009] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 208.726963][ T6009] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 208.775780][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 208.816840][ T6009] quatech2 1-1:0.51: device disconnected [ 208.838430][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 208.996844][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 209.006634][ T30] audit: type=1804 audit(1751961083.693:29): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.397" name="/newroot/77/file0" dev="tmpfs" ino=438 res=1 errno=0 [ 209.127366][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 209.135582][ T9] usb 3-1: Product: syz [ 209.246817][ T9] usb 3-1: Manufacturer: syz [ 209.251471][ T9] usb 3-1: SerialNumber: syz [ 209.367660][ T9] usb 3-1: config 0 descriptor?? [ 209.435254][ T9] usb 3-1: selecting invalid altsetting 0 [ 209.492354][ T5885] input: PS/2 Generic Mouse as /devices/serio2/input/input6 [ 209.592619][ T7217] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.398'. [ 209.714935][ T7217] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 210.458977][ T5885] psmouse serio2: Failed to enable mouse on [ 210.577173][ T10] usb 3-1: USB disconnect, device number 9 [ 211.727828][ T7220] Bluetooth: hci0: command 0x0406 tx timeout [ 211.734329][ T7220] Bluetooth: hci2: command 0x0406 tx timeout [ 211.740388][ T7220] Bluetooth: hci1: command 0x0406 tx timeout [ 211.746466][ T7220] Bluetooth: hci4: command 0x0406 tx timeout [ 211.752569][ T7220] Bluetooth: hci3: command 0x0406 tx timeout [ 212.294029][ T5165] Bluetooth: hci0: unexpected event for opcode 0x0413 [ 212.319738][ T30] audit: type=1804 audit(1751961087.113:30): pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.409" name="/newroot/69/file0" dev="tmpfs" ino=379 res=1 errno=0 [ 214.406551][ T48] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 214.859868][ T48] usb 5-1: config 0 has an invalid interface number: 97 but max is 0 [ 214.894915][ T48] usb 5-1: config 0 has no interface number 0 [ 214.914978][ T48] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 214.932443][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.010758][ T48] usb 5-1: Product: syz [ 215.052809][ T48] usb 5-1: Manufacturer: syz [ 215.084815][ T48] usb 5-1: SerialNumber: syz [ 215.155476][ T48] usb 5-1: config 0 descriptor?? [ 216.185226][ T30] audit: type=1804 audit(1751961090.973:31): pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.421" name="/newroot/86/file0" dev="tmpfs" ino=484 res=1 errno=0 [ 216.253082][ T48] usb 5-1: USB disconnect, device number 2 [ 216.357763][ T5165] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 216.366332][ T5165] Bluetooth: hci0: Injecting HCI hardware error event [ 216.375794][ T5165] Bluetooth: hci0: hardware error 0x00 [ 216.470282][ T30] audit: type=1326 audit(1751961091.263:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.3.424" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ca9d8e929 code=0x0 [ 217.149338][ T7307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.429'. [ 218.426119][ T30] audit: type=1804 audit(1751961093.213:33): pid=7316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.433" name="/newroot/89/file0" dev="tmpfs" ino=500 res=1 errno=0 [ 218.429458][ T7316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.436493][ T5165] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 218.594573][ T7310] capability: warning: `syz.1.430' uses deprecated v2 capabilities in a way that may be insecure [ 219.565950][ T7320] mmap: syz.0.432 (7320) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 220.884511][ T30] audit: type=1804 audit(1751961095.673:34): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.444" name="/newroot/95/file0" dev="tmpfs" ino=531 res=1 errno=0 [ 220.922924][ T7348] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.539862][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057b72c00: rx timeout, send abort [ 222.048936][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057b72c00: abort rx timeout. Force session deactivation [ 223.161557][ T30] audit: type=1804 audit(1751961097.953:35): pid=7377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.455" name="/newroot/105/file0" dev="tmpfs" ino=567 res=1 errno=0 [ 223.174096][ T7377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.703248][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 223.859837][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 224.002368][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.042652][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.067018][ T10] usb 5-1: config 0 descriptor?? [ 224.087201][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 224.355547][ T7395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.462'. [ 224.374940][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'. [ 225.254029][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057404400: rx timeout, send abort [ 225.762324][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057404400: abort rx timeout. Force session deactivation [ 226.847561][ T30] audit: type=1804 audit(1751961101.643:36): pid=7411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.467" name="/newroot/104/file0" dev="tmpfs" ino=578 res=1 errno=0 [ 226.908015][ T7411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.920456][ T5885] usb 5-1: USB disconnect, device number 3 [ 229.668328][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057e5f000: rx timeout, send abort [ 229.909925][ T30] audit: type=1804 audit(1751961104.703:37): pid=7448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.481" name="/newroot/95/file0" dev="tmpfs" ino=533 res=1 errno=0 [ 229.928911][ T7448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.177054][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057e5f000: abort rx timeout. Force session deactivation [ 230.268361][ T7451] netlink: 'syz.4.482': attribute type 10 has an invalid length. [ 230.334789][ T7451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.360338][ T7451] team0: Port device bond0 added [ 233.613638][ T30] audit: type=1804 audit(1751961108.403:38): pid=7510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.492" name="/newroot/82/file0" dev="tmpfs" ino=449 res=1 errno=0 [ 233.681312][ T7510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.946188][ T5928] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 235.006873][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806c9f5000: rx timeout, send abort [ 235.488371][ T5928] usb 4-1: config 0 has an invalid interface number: 112 but max is 0 [ 235.515148][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806c9f5000: abort rx timeout. Force session deactivation [ 236.317768][ T5928] usb 4-1: config 0 has no interface number 0 [ 236.327170][ T5928] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 236.336402][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.346379][ T5928] usb 4-1: Product: syz [ 236.350735][ T5928] usb 4-1: Manufacturer: syz [ 236.355347][ T5928] usb 4-1: SerialNumber: syz [ 236.409401][ T5928] usb 4-1: config 0 descriptor?? [ 238.090455][ T5928] mvusb_mdio 4-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 238.239836][ T5928] usb 4-1: USB disconnect, device number 8 [ 238.583297][ T7549] netlink: 20 bytes leftover after parsing attributes in process `syz.4.505'. [ 240.724512][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033c25c00: rx timeout, send abort [ 241.232871][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033c25c00: abort rx timeout. Force session deactivation [ 242.153761][ T7585] netlink: 'syz.4.518': attribute type 8 has an invalid length. [ 242.175062][ T7585] netlink: 20 bytes leftover after parsing attributes in process `syz.4.518'. [ 242.456380][ T7588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.519'. [ 243.127846][ T7596] syz.0.520: attempt to access beyond end of device [ 243.127846][ T7596] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 243.366299][ T7596] syz.0.520: attempt to access beyond end of device [ 243.366299][ T7596] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 243.411853][ T7596] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 243.426628][ T7596] syz.0.520: attempt to access beyond end of device [ 243.426628][ T7596] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 243.509976][ T7596] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 244.546064][ T7596] syz.0.520: attempt to access beyond end of device [ 244.546064][ T7596] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 244.672489][ T7596] syz.0.520: attempt to access beyond end of device [ 244.672489][ T7596] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 245.171616][ T7596] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 245.212246][ T7596] syz.0.520: attempt to access beyond end of device [ 245.212246][ T7596] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 245.233412][ T7596] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 245.261377][ T7596] syz.0.520: attempt to access beyond end of device [ 245.261377][ T7596] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 245.280558][ T7596] syz.0.520: attempt to access beyond end of device [ 245.280558][ T7596] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 245.294558][ T7596] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 245.314768][ T7596] syz.0.520: attempt to access beyond end of device [ 245.314768][ T7596] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 245.335071][ T7596] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 245.346762][ T7596] syz.0.520: attempt to access beyond end of device [ 245.346762][ T7596] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 245.370811][ T7596] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 245.385797][ T7596] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 245.396034][ T7596] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 245.811869][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880572a0800: rx timeout, send abort [ 246.312813][ T7624] usb usb8: usbfs: process 7624 (syz.4.530) did not claim interface 0 before use [ 246.322069][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880572a0800: abort rx timeout. Force session deactivation [ 247.130052][ T7628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.531'. [ 247.506335][ T7629] netlink: 'syz.2.532': attribute type 8 has an invalid length. [ 247.514053][ T7629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.532'. [ 247.792414][ T5165] Bluetooth: hci4: unexpected event for opcode 0x0413 [ 251.233595][ T7681] netlink: 'syz.1.545': attribute type 8 has an invalid length. [ 251.283642][ T7681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.545'. [ 251.758321][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032c46400: rx timeout, send abort [ 251.766949][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032c46400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 251.807801][ T5165] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 251.819509][ T5165] Bluetooth: hci4: Injecting HCI hardware error event [ 251.829107][ T5852] Bluetooth: hci4: hardware error 0x00 [ 253.878117][ T5852] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 254.243674][ T7736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.557'. [ 254.677647][ T7739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 254.694424][ T7738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.558'. [ 255.640252][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.078027][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806c4e7c00: rx timeout, send abort [ 256.093078][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806c4e7c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 257.265616][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.710905][ T7778] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 258.720131][ T7778] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 259.588570][ T7785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.571'. [ 259.663989][ T7786] netlink: 'syz.4.572': attribute type 2 has an invalid length. [ 261.916113][ T48] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 262.098380][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 262.121428][ T48] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 262.150048][ T48] usb 4-1: config 0 has no interface number 0 [ 262.168410][ T48] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 262.188474][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.206126][ T48] usb 4-1: Product: syz [ 262.212500][ T48] usb 4-1: Manufacturer: syz [ 262.228492][ T48] usb 4-1: SerialNumber: syz [ 262.264654][ T48] usb 4-1: config 0 descriptor?? [ 262.291433][ T48] smsc95xx v2.0.0 [ 262.325684][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057444000: rx timeout, send abort [ 262.334363][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057444000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 263.127511][ T48] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 263.164994][ T48] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 263.209373][ T48] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 263.253789][ T48] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 263.311732][ T48] usb 4-1: USB disconnect, device number 9 [ 263.442021][ T7822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.586'. [ 263.579880][ T7823] netlink: 88 bytes leftover after parsing attributes in process `syz.2.582'. [ 263.856393][ T48] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 264.163805][ T7828] sit1: entered allmulticast mode [ 264.456393][ T9] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 264.660658][ T9] usb 4-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.765949][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 264.831669][ T9] usb 4-1: string descriptor 0 read error: -22 [ 264.885830][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.40 [ 264.963225][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.229099][ T48] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 265.263524][ T48] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.331351][ T9] usbhid 4-1:1.0: can't add hid device: -71 [ 265.337267][ T48] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 265.337861][ T48] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.662809][ T48] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 265.667245][ T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 265.741407][ T48] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 265.766565][ T48] usb 2-1: Product: syz [ 265.775910][ T48] usb 2-1: Manufacturer: syz [ 265.855082][ T48] cdc_wdm 2-1:1.0: skipping garbage [ 265.876837][ T9] usb 4-1: USB disconnect, device number 10 [ 265.886135][ T48] cdc_wdm 2-1:1.0: skipping garbage [ 265.891474][ T48] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 266.309873][ T7825] netlink: 'syz.1.587': attribute type 1 has an invalid length. [ 266.436490][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.587'. [ 267.565641][ T5944] usb 2-1: USB disconnect, device number 4 [ 268.039685][ T6463] Bluetooth: (null): Invalid header checksum [ 268.049602][ T7851] syzkaller1: entered promiscuous mode [ 268.091575][ T6463] Bluetooth: (null): Invalid header checksum [ 268.104130][ T7851] syzkaller1: entered allmulticast mode [ 268.162298][ T7191] Bluetooth: (null): Invalid header checksum [ 268.278187][ T6463] Bluetooth: (null): Invalid header checksum [ 268.378985][ T7203] Bluetooth: (null): Invalid header checksum [ 268.656080][ T5944] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 269.499868][ T5944] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 269.515716][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.530979][ T5944] usb 2-1: Product: syz [ 269.540147][ T5944] usb 2-1: Manufacturer: syz [ 269.545303][ T5944] usb 2-1: SerialNumber: syz [ 269.584973][ T5944] usb 2-1: config 0 descriptor?? [ 270.330355][ T5944] hso 2-1:0.0: Failed to find BULK IN ep [ 270.485114][ T5944] usb-storage 2-1:0.0: USB Mass Storage device detected [ 271.539579][ T5944] usb 2-1: USB disconnect, device number 5 [ 271.816438][ T7906] netlink: 32 bytes leftover after parsing attributes in process `syz.2.617'. [ 274.114997][ T30] audit: type=1326 audit(1751961148.853:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94118e929 code=0x7ffc0000 [ 274.243542][ T30] audit: type=1326 audit(1751961148.863:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fd94118e929 code=0x7ffc0000 [ 274.971042][ T30] audit: type=1326 audit(1751961148.863:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94118e929 code=0x7ffc0000 [ 274.997554][ T30] audit: type=1326 audit(1751961148.863:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94118e929 code=0x7ffc0000 [ 275.019702][ T30] audit: type=1326 audit(1751961148.863:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fd94118e929 code=0x7ffc0000 [ 275.041884][ T30] audit: type=1326 audit(1751961148.863:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94118e929 code=0x7ffc0000 [ 275.220901][ T30] audit: type=1326 audit(1751961148.863:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94118e929 code=0x7ffc0000 [ 276.646148][ T6009] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 276.858342][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 276.889344][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 276.923267][ T6009] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 276.952114][ T6009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.966672][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 276.995408][ T6009] usb 3-1: config 0 descriptor?? [ 277.624831][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 277.658011][ T10] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 277.699258][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.728712][ T3025] Bluetooth: (null): Invalid header checksum [ 277.741309][ T10] usb 4-1: Product: syz [ 277.750192][ T3025] Bluetooth: (null): Invalid header checksum [ 277.759492][ T10] usb 4-1: Manufacturer: syz [ 277.764504][ T10] usb 4-1: SerialNumber: syz [ 277.832698][ T10] usb 4-1: config 0 descriptor?? [ 277.849829][ T7203] Bluetooth: (null): Invalid header checksum [ 277.888119][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 278.382757][ T6009] ath6kl: Failed to submit usb control message: -110 [ 278.586134][ T6009] ath6kl: unable to send the bmi data to the device: -110 [ 278.593303][ T6009] ath6kl: Unable to send get target info: -110 [ 278.616898][ T6009] ath6kl: Failed to init ath6kl core: -110 [ 278.633373][ T6009] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 278.686782][ T6009] usb 3-1: USB disconnect, device number 10 [ 280.000804][ T10] gspca_ov534_9: reg_r err -71 [ 280.196140][ T7997] comedi comedi0: ni_at_a2150: I/O port conflict (0xf2,28) [ 281.114367][ T10] gspca_ov534_9: Unknown sensor 0000 [ 281.115351][ T10] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 281.177238][ T10] usb 4-1: USB disconnect, device number 11 [ 285.191182][ T48] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 285.627676][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.678772][ T48] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 285.707913][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.743788][ T48] usb 3-1: config 0 descriptor?? [ 285.792321][ T48] pwc: Askey VC010 type 2 USB webcam detected. [ 286.185864][ T48] pwc: recv_control_msg error -32 req 02 val 2b00 [ 286.228231][ T48] pwc: recv_control_msg error -32 req 02 val 2700 [ 287.159828][ T48] pwc: recv_control_msg error -32 req 02 val 2c00 [ 287.456594][ T48] pwc: recv_control_msg error -32 req 04 val 1000 [ 287.544352][ T48] pwc: recv_control_msg error -32 req 04 val 1300 [ 287.557352][ T48] pwc: recv_control_msg error -32 req 04 val 1400 [ 287.576101][ T48] pwc: recv_control_msg error -32 req 02 val 2000 [ 287.587877][ T48] pwc: recv_control_msg error -32 req 02 val 2100 [ 287.636345][ T48] pwc: recv_control_msg error -32 req 04 val 1500 [ 287.886260][ T48] pwc: recv_control_msg error -32 req 02 val 2400 [ 287.904143][ T48] pwc: recv_control_msg error -32 req 02 val 2600 [ 287.915647][ T48] pwc: recv_control_msg error -32 req 02 val 2900 [ 287.937502][ T48] pwc: recv_control_msg error -32 req 02 val 2800 [ 288.172964][ T48] pwc: recv_control_msg error -71 req 04 val 1200 [ 288.578056][ T48] pwc: Registered as video103. [ 288.613709][ T48] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 288.669824][ T48] usb 3-1: USB disconnect, device number 11 [ 288.876882][ T8092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.671'. [ 289.766074][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 290.039059][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 290.053156][ T9] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.076066][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 290.082775][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 290.123698][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.151168][ T9] usb 2-1: config 0 descriptor?? [ 290.605870][ T9] playstation 0003:054C:0BA0.0002: unknown main item tag 0x0 [ 290.703278][ T9] playstation 0003:054C:0BA0.0002: hidraw0: USB HID v7d.d9 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 291.034440][ T8116] tmpfs: Bad value for 'mpol' [ 291.039843][ T8116] CIFS mount error: No usable UNC path provided in device string! [ 291.039843][ T8116] [ 291.049889][ T8116] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 291.242785][ T9] playstation 0003:054C:0BA0.0002: Failed to retrieve feature with reportID 18: -71 [ 291.309839][ T9] playstation 0003:054C:0BA0.0002: Failed to retrieve DualShock4 pairing info: -71 [ 291.345132][ T9] playstation 0003:054C:0BA0.0002: Failed to get MAC address from DualShock4 [ 291.380624][ T9] playstation 0003:054C:0BA0.0002: Failed to create dualshock4. [ 291.407371][ T9] playstation 0003:054C:0BA0.0002: probe with driver playstation failed with error -71 [ 291.438804][ T9] usb 2-1: USB disconnect, device number 6 [ 292.088694][ T8135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.684'. [ 293.107905][ T8144] syzkaller1: entered promiscuous mode [ 293.142680][ T8144] syzkaller1: entered allmulticast mode [ 294.788952][ T8173] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.693'. [ 294.798207][ T8173] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 294.990368][ T8178] netlink: 96 bytes leftover after parsing attributes in process `syz.0.692'. [ 295.003026][ T8178] tmpfs: Bad value for 'mpol' [ 295.008515][ T8178] CIFS mount error: No usable UNC path provided in device string! [ 295.008515][ T8178] [ 295.019167][ T8178] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 295.296071][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 295.460865][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.485364][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.517419][ T9] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 295.547740][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.578014][ T9] usb 2-1: config 0 descriptor?? [ 299.230980][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 299.246773][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 299.265980][ T9] usb 2-1: USB disconnect, device number 7 [ 299.485713][ T8194] trusted_key: encrypted_key: insufficient parameters specified [ 300.274088][ T8199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.700'. [ 301.543995][ T8215] qrtr: Invalid version 134 [ 304.454789][ T8248] netlink: 96 bytes leftover after parsing attributes in process `syz.0.715'. [ 304.496714][ T8248] tmpfs: Bad value for 'mpol' [ 304.505612][ T8248] CIFS mount error: No usable UNC path provided in device string! [ 304.505612][ T8248] [ 304.515758][ T8248] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 310.569645][ T8290] netlink: 'syz.3.724': attribute type 2 has an invalid length. [ 310.702921][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 311.118600][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 311.131780][ T9] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 311.150765][ T9] usb 5-1: config 0 has no interface number 0 [ 311.176143][ T9] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 311.205612][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.240653][ T9] usb 5-1: config 0 descriptor?? [ 312.121311][ T5885] usb 5-1: USB disconnect, device number 4 [ 312.642308][ T8315] input: syz1 as /devices/virtual/input/input9 [ 312.858592][ T8315] input: failed to attach handler leds to device input9, error: -6 [ 315.029162][ T8327] overlay: Bad value for 'upperdir' [ 316.889310][ T8355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.747'. [ 317.082682][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.089564][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.012076][ T8356] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 318.066259][ T8356] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 318.178846][ T8356] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 318.413503][ T8356] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 318.868771][ T8356] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 318.879261][ T8356] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 320.036141][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 320.196220][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 320.925632][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 322.116187][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 322.319634][ T8406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.758'. [ 322.346888][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 322.996208][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 323.821179][ T30] audit: type=1107 audit(1751961198.603:46): pid=8426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='wóÊë²xØ`«JŸ—I¼·4væ¼O‚I'ÜŠÌ' [ 323.968681][ T8430] bridge_slave_0: left allmulticast mode [ 323.974450][ T8430] bridge_slave_0: left promiscuous mode [ 323.981501][ T8430] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.989618][ T8430] bridge_slave_1: left allmulticast mode [ 326.995615][ T8430] bridge_slave_1: left promiscuous mode [ 328.212414][ T8430] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.389510][ T8430] bond0: (slave bond_slave_0): Releasing backup interface [ 328.495789][ T8430] bond0: (slave bond_slave_1): Releasing backup interface [ 328.539314][ T8430] team0: Port device team_slave_0 removed [ 328.641464][ T8430] team0: Port device team_slave_1 removed [ 328.685941][ T8430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.700366][ T8430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.900009][ T8430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.687591][ T8430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.791922][ T8431] team0: Mode changed to "loadbalance" [ 331.389823][ T8475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.773'. [ 332.726097][ T8487] comedi comedi0: Minor 14 could not be opened [ 334.263244][ T8480] xt_CT: No such helper "syz1" [ 336.633374][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 336.972795][ T8515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.788'. [ 337.884409][ T8534] netlink: 44 bytes leftover after parsing attributes in process `syz.3.791'. [ 337.903174][ T8534] netlink: 44 bytes leftover after parsing attributes in process `syz.3.791'. [ 339.208944][ T5944] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 339.366167][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 339.381272][ T5944] usb 5-1: unable to get BOS descriptor or descriptor too short [ 339.408454][ T5944] usb 5-1: config 8 has an invalid interface number: 48 but max is 0 [ 339.450972][ T5944] usb 5-1: config 8 has no interface number 0 [ 339.512167][ T5944] usb 5-1: too many endpoints for config 8 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 339.548733][ T59] Bluetooth: (null): Invalid header checksum [ 339.565603][ T5944] usb 5-1: config 8 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 339.580372][ T59] Bluetooth: (null): Invalid header checksum [ 339.650143][ T8551] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.797'. [ 339.651612][ T5944] usb 5-1: config 8 interface 48 has no altsetting 0 [ 339.700523][ T5944] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=ab.34 [ 339.710171][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.746081][ T5944] usb 5-1: Product: syz [ 339.756411][ T5944] usb 5-1: Manufacturer: syz [ 339.772491][ T5944] usb 5-1: SerialNumber: syz [ 340.103679][ T5944] usb 5-1: USB disconnect, device number 5 [ 341.087308][ T927] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 341.333843][ T927] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 341.365671][ T927] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 341.401787][ T927] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 341.434522][ T927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.931550][ T8558] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 341.979978][ T927] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 342.136196][ T5944] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 342.788502][ T5944] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 342.788563][ T5944] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.788586][ T5944] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 342.788633][ T5944] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.791453][ T5944] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 342.791483][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 342.791505][ T5944] usb 5-1: Product: syz [ 342.791545][ T5944] usb 5-1: Manufacturer: syz [ 342.801821][ T5944] cdc_wdm 5-1:1.0: skipping garbage [ 342.801841][ T5944] cdc_wdm 5-1:1.0: skipping garbage [ 342.803156][ T5944] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 343.177000][ T8562] netlink: 'syz.4.801': attribute type 1 has an invalid length. [ 343.184713][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 343.327886][ T5885] usb 1-1: USB disconnect, device number 9 [ 343.612483][ T5944] usb 5-1: USB disconnect, device number 6 [ 343.804718][ T8582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.805'. [ 348.666135][ T5885] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 349.003745][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 349.304205][ T5885] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 349.313311][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.321858][ T5885] usb 1-1: Product: syz [ 349.341682][ T5885] usb 1-1: Manufacturer: syz [ 349.357489][ T5885] usb 1-1: SerialNumber: syz [ 349.390029][ T5885] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 349.595494][ T5885] snd-usb-audio 1-1:22.0: probe with driver snd-usb-audio failed with error -2 [ 349.720704][ T5885] usb 1-1: USB disconnect, device number 10 [ 350.425608][ T6234] udevd[6234]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:22.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.796315][ T5944] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 351.546315][ T5944] usb 5-1: Using ep0 maxpacket: 8 [ 351.654334][ T5944] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 351.685644][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.720921][ T5944] usb 5-1: Product: syz [ 351.725134][ T5944] usb 5-1: Manufacturer: syz [ 351.761423][ T5944] usb 5-1: SerialNumber: syz [ 351.873498][ T5944] usb 5-1: config 0 descriptor?? [ 352.118873][ T5944] usb 5-1: USB disconnect, device number 7 [ 355.924313][ T8710] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.844'. [ 355.962004][ T8709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.988178][ T8710] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 357.526193][ T48] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 358.052928][ T48] usb 5-1: device descriptor read/64, error -71 [ 358.089743][ T8731] binder: 8730:8731 ioctl 4018620d 0 returned -22 [ 358.333357][ T48] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 358.586676][ T48] usb 5-1: device descriptor read/64, error -71 [ 358.746632][ T48] usb usb5-port1: attempt power cycle [ 359.648284][ T48] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 359.688267][ T48] usb 5-1: device descriptor read/8, error -71 [ 359.937639][ T48] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 359.972305][ T48] usb 5-1: device descriptor read/8, error -71 [ 360.186912][ T48] usb usb5-port1: unable to enumerate USB device [ 360.598442][ T8756] kAFS: No cell specified [ 361.402953][ T8757] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 361.436623][ T8757] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 361.442930][ T8757] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 361.996257][ T8767] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.863'. [ 362.005542][ T8767] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 363.396298][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 363.476547][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 363.479347][ T5165] Bluetooth: hci2: command 0x0406 tx timeout [ 367.010725][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 367.248455][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.179555][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 368.209617][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 368.534935][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.547589][ T9] usb 4-1: config 0 descriptor?? [ 368.557780][ T8833] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.882'. [ 368.609335][ T8833] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 368.716088][ T8841] netlink: 256 bytes leftover after parsing attributes in process `syz.0.886'. [ 369.591126][ T9] input: HID 054c:03d5 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:03D5.0003/input/input10 [ 369.797210][ T8845] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 369.803491][ T8845] syzkaller0: ignored: set checksum disabled [ 369.964128][ T9] sony 0003:054C:03D5.0003: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.3-1/input0 [ 370.015387][ T9] usb 4-1: USB disconnect, device number 12 [ 370.269570][ T8849] fido_id[8849]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 373.224633][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 378.534443][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.540893][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.181622][ T8907] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.904'. [ 380.191961][ T8907] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 380.573769][ T8915] hub 9-0:1.0: USB hub found [ 380.581044][ T8915] hub 9-0:1.0: 1 port detected [ 380.620856][ T8915] x_tables: ip_tables: osf match: only valid for protocol 6 [ 384.146120][ T5944] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 384.297916][ T5944] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 384.324118][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 384.335862][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 384.347439][ T5944] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 384.360740][ T5944] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 384.370093][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.623255][ T5944] usb 2-1: config 0 descriptor?? [ 385.185132][ T8946] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 385.982580][ T5944] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 386.913085][ T5944] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 386.948520][ T5944] usb 2-1: USB disconnect, device number 8 [ 387.917350][ T8980] fido_id[8980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 388.317200][ T9003] netlink: 96 bytes leftover after parsing attributes in process `syz.2.926'. [ 388.340612][ T9003] tmpfs: Bad value for 'mpol' [ 388.347149][ T9003] CIFS mount error: No usable UNC path provided in device string! [ 388.347149][ T9003] [ 388.357264][ T9003] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 388.849291][ T9004] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.925'. [ 388.859035][ T9004] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 390.570638][ T48] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 390.790333][ T48] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 390.940724][ T48] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.951751][ T48] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 390.963516][ T48] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.979371][ T48] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 390.988637][ T48] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 391.014038][ T48] usb 3-1: Product: syz [ 391.029339][ T48] usb 3-1: Manufacturer: syz [ 391.077003][ T48] cdc_wdm 3-1:1.0: skipping garbage [ 391.136342][ T48] cdc_wdm 3-1:1.0: skipping garbage [ 391.186202][ T48] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 391.638426][ T9012] netlink: 'syz.2.929': attribute type 1 has an invalid length. [ 391.646225][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 391.769178][ T48] usb 3-1: USB disconnect, device number 12 [ 391.801883][ T9028] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 392.733831][ T9035] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 393.656130][ T9043] trusted_key: syz.4.938 sent an empty control message without MSG_MORE. [ 394.063472][ T9046] netlink: 96 bytes leftover after parsing attributes in process `syz.2.939'. [ 394.085860][ T9046] tmpfs: Bad value for 'mpol' [ 394.092682][ T9046] CIFS mount error: No usable UNC path provided in device string! [ 394.092682][ T9046] [ 394.102808][ T9046] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 395.005046][ T9035] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 396.095025][ T9066] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.945'. [ 396.104427][ T9066] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 398.196244][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 399.254056][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.954'. [ 400.016819][ T9116] team0 (unregistering): Port device team_slave_0 removed [ 400.069060][ T9116] team0 (unregistering): Port device team_slave_1 removed [ 400.492640][ T9131] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.959'. [ 400.501918][ T9131] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 402.443726][ T9160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.892674][ T9202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 406.618816][ T9213] netlink: 'syz.4.988': attribute type 10 has an invalid length. [ 407.090727][ T9218] netlink: 'syz.3.989': attribute type 4 has an invalid length. [ 408.450074][ T9222] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 408.496368][ T9222] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 408.502392][ T9222] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 410.036164][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 410.516552][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 410.523991][ T5165] Bluetooth: hci3: command 0x0406 tx timeout [ 410.846346][ T9268] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 410.955013][ T9271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.886207][ T5907] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 414.117448][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 414.279542][ T5907] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.326112][ T5907] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 414.424294][ T5907] usb 5-1: config 1 has no interface number 1 [ 414.841726][ T5907] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 414.908318][ T5907] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.946705][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.954730][ T5907] usb 5-1: Product: syz [ 414.983080][ T5907] usb 5-1: Manufacturer: syz [ 414.995106][ T5907] usb 5-1: SerialNumber: syz [ 415.653973][ T5907] usb 5-1: USB disconnect, device number 12 [ 415.730760][ T6234] udevd[6234]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.598003][ T6016] Bluetooth: (null): Invalid header checksum [ 416.678798][ T6016] Bluetooth: (null): Invalid header checksum [ 419.000230][ T9344] hub 9-0:1.0: USB hub found [ 419.016313][ T9344] hub 9-0:1.0: 1 port detected [ 420.631324][ T5944] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 420.766000][ T9355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1024'. [ 421.631244][ T9356] pim6reg1: entered allmulticast mode [ 421.661157][ T5944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.987688][ T9357] syz.1.1024: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 422.075926][ T5944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.220603][ T5944] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 422.303969][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.364433][ T9357] CPU: 0 UID: 0 PID: 9357 Comm: syz.1.1024 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 422.364454][ T9357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.364465][ T9357] Call Trace: [ 422.364471][ T9357] [ 422.364478][ T9357] dump_stack_lvl+0x189/0x250 [ 422.364518][ T9357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.364535][ T9357] ? __pfx__printk+0x10/0x10 [ 422.364556][ T9357] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 422.364572][ T9357] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 422.364589][ T9357] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 422.364607][ T9357] warn_alloc+0x214/0x310 [ 422.364631][ T9357] ? __pfx_warn_alloc+0x10/0x10 [ 422.364657][ T9357] ? __get_vm_area_node+0x28f/0x300 [ 422.364675][ T9357] ? hash_ipportip_create+0x358/0xfe0 [ 422.364701][ T9357] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 422.364719][ T9357] ? do_syscall_64+0xfa/0x3b0 [ 422.364759][ T9357] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 422.364781][ T9357] ? rcu_is_watching+0x15/0xb0 [ 422.364797][ T9357] ? hash_ipportip_create+0x358/0xfe0 [ 422.364818][ T9357] ? hash_ipportip_create+0x358/0xfe0 [ 422.364839][ T9357] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 422.364858][ T9357] ? hash_ipportip_create+0x358/0xfe0 [ 422.364881][ T9357] ? hash_ipportip_create+0x2fe/0xfe0 [ 422.364907][ T9357] hash_ipportip_create+0x358/0xfe0 [ 422.364936][ T9357] ? __nla_parse+0x40/0x60 [ 422.364955][ T9357] ? __pfx_hash_ipportip_create+0x10/0x10 [ 422.364979][ T9357] ip_set_create+0xa94/0x1940 [ 422.364996][ T9357] ? ip_set_create+0x4a2/0x1940 [ 422.365020][ T9357] ? __pfx_ip_set_create+0x10/0x10 [ 422.365064][ T9357] nfnetlink_rcv_msg+0xb4d/0x1130 [ 422.365082][ T9357] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 422.365111][ T9357] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 422.365146][ T9357] ? irqentry_exit+0x74/0x90 [ 422.365164][ T9357] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.365190][ T9357] ? netlink_rcv_skb+0x1e0/0x470 [ 422.365213][ T9357] netlink_rcv_skb+0x208/0x470 [ 422.365233][ T9357] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 422.365250][ T9357] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 422.365279][ T9357] ? security_capable+0x7e/0x2e0 [ 422.365298][ T9357] nfnetlink_rcv+0x26a/0x2520 [ 422.365321][ T9357] ? rcu_is_watching+0x15/0xb0 [ 422.365335][ T9357] ? trace_sched_exit_tp+0x38/0x120 [ 422.365379][ T9357] ? __schedule+0x1713/0x4d00 [ 422.365407][ T9357] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 422.365425][ T9357] ? preempt_schedule_irq+0xb5/0x150 [ 422.365458][ T9357] ? __pfx___schedule+0x10/0x10 [ 422.365475][ T9357] ? irqentry_exit+0x74/0x90 [ 422.365493][ T9357] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.365521][ T9357] ? rcu_is_watching+0x15/0xb0 [ 422.365535][ T9357] ? trace_irq_disable+0x37/0x110 [ 422.365554][ T9357] ? preempt_schedule_irq+0xde/0x150 [ 422.365572][ T9357] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 422.365594][ T9357] ? irqentry_exit+0x74/0x90 [ 422.365617][ T9357] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.365640][ T9357] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 422.365663][ T9357] netlink_unicast+0x75b/0x8d0 [ 422.365689][ T9357] netlink_sendmsg+0x805/0xb30 [ 422.365717][ T9357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.365740][ T9357] ? aa_sock_msg_perm+0xf1/0x1d0 [ 422.365756][ T9357] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 422.365778][ T9357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.365799][ T9357] __sock_sendmsg+0x219/0x270 [ 422.365820][ T9357] ____sys_sendmsg+0x505/0x830 [ 422.365837][ T9357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.365875][ T9357] ? import_iovec+0x74/0xa0 [ 422.365894][ T9357] ___sys_sendmsg+0x21f/0x2a0 [ 422.365910][ T9357] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.365967][ T9357] ? __fget_files+0x2a/0x420 [ 422.365996][ T9357] ? __fget_files+0x3a0/0x420 [ 422.366036][ T9357] __x64_sys_sendmsg+0x19b/0x260 [ 422.366060][ T9357] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 422.366092][ T9357] ? rcu_is_watching+0x15/0xb0 [ 422.366119][ T9357] ? do_syscall_64+0xbe/0x3b0 [ 422.366164][ T9357] do_syscall_64+0xfa/0x3b0 [ 422.366211][ T9357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.366244][ T9357] ? asm_sysvec_call_function_single+0x1a/0x20 [ 422.366265][ T9357] ? clear_bhb_loop+0x60/0xb0 [ 422.366290][ T9357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.366318][ T9357] RIP: 0033:0x7fca58f8e929 [ 422.366341][ T9357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.366358][ T9357] RSP: 002b:00007fca59ddb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.366386][ T9357] RAX: ffffffffffffffda RBX: 00007fca591b6160 RCX: 00007fca58f8e929 [ 422.366401][ T9357] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000009 [ 422.366414][ T9357] RBP: 00007fca59010b39 R08: 0000000000000000 R09: 0000000000000000 [ 422.366426][ T9357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.366438][ T9357] R13: 0000000000000000 R14: 00007fca591b6160 R15: 00007ffc31d760e8 [ 422.366470][ T9357] [ 422.878550][ T9357] Mem-Info: [ 422.881696][ T9357] active_anon:8122 inactive_anon:0 isolated_anon:0 [ 422.881696][ T9357] active_file:2482 inactive_file:39978 isolated_file:0 [ 422.881696][ T9357] unevictable:768 dirty:154 writeback:0 [ 422.881696][ T9357] slab_reclaimable:10478 slab_unreclaimable:98514 [ 422.881696][ T9357] mapped:34004 shmem:4233 pagetables:1166 [ 422.881696][ T9357] sec_pagetables:0 bounce:0 [ 422.881696][ T9357] kernel_misc_reclaimable:0 [ 422.881696][ T9357] free:1330006 free_pcp:9483 free_cma:0 [ 422.929277][ T9357] Node 0 active_anon:32488kB inactive_anon:0kB active_file:9928kB inactive_file:159712kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136016kB dirty:612kB writeback:0kB shmem:15396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12092kB pagetables:4528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 422.962823][ T5944] usb 5-1: config 0 descriptor?? [ 423.025623][ T9357] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 423.061137][ T9357] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 423.090085][ T9357] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 423.095879][ T9357] Node 0 DMA32 free:1411492kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32440kB inactive_anon:0kB active_file:9928kB inactive_file:158136kB unevictable:1536kB writepending:612kB present:3129332kB managed:2557856kB mlocked:0kB bounce:0kB free_pcp:23520kB local_pcp:15352kB free_cma:0kB [ 423.235983][ T9357] lowmem_reserve[]: 0 0 1 1 1 [ 423.336053][ T9357] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 423.396307][ T9357] lowmem_reserve[]: 0 0 0 0 0 [ 423.401103][ T9357] Node 1 Normal free:3893160kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14288kB local_pcp:7792kB free_cma:0kB [ 423.474172][ T9357] lowmem_reserve[]: 0 0 0 0 0 [ 423.492868][ T9357] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 423.539580][ T9357] Node 0 DMA32: 468*4kB (UME) 130*8kB (UME) 83*16kB (U) 943*32kB (UME) 244*64kB (UME) 67*128kB (UME) 31*256kB (UME) 13*512kB (UME) 1*1024kB (E) 5*2048kB (UM) 323*4096kB (M) = 1407472kB [ 423.594927][ T9357] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 423.739577][ T6187] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 423.758027][ T9357] Node 1 Normal: 176*4kB (UME) 45*8kB (UME) 38*16kB (UME) 161*32kB (UME) 38*64kB (UME) 7*128kB (UME) 6*256kB (UME) 5*512kB (UME) 4*1024kB (UME) 0*2048kB 946*4096kB (M) = 3893160kB [ 424.108976][ T9357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 424.266912][ T5944] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0005/input/input12 [ 424.288998][ T9357] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 424.319902][ T9357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 424.336149][ T6187] usb 4-1: Using ep0 maxpacket: 16 [ 424.350250][ T6187] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 424.363174][ T5944] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0005/input/input13 [ 424.390520][ T6187] usb 4-1: config 0 has no interface number 0 [ 424.406005][ T6187] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 424.535755][ T9357] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 424.567673][ T9357] 47260 total pagecache pages [ 424.572369][ T9357] 0 pages in swap cache [ 424.580712][ T9357] Free swap = 124996kB [ 424.584874][ T9357] Total swap = 124996kB [ 425.221117][ T6187] usb 4-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 425.234066][ T6187] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 425.279446][ T5944] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0005/input/input14 [ 425.333793][ T9357] 2097051 pages RAM [ 425.353971][ T9357] 0 pages HighMem/MovableOnly [ 425.366410][ T6187] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 425.396330][ T9357] 425545 pages reserved [ 425.409669][ T9357] 0 pages cma reserved [ 425.416363][ T6187] usb 4-1: Product: syz [ 425.420561][ T6187] usb 4-1: Manufacturer: syz [ 425.425198][ T6187] usb 4-1: SerialNumber: syz [ 425.459295][ T6187] usb 4-1: config 0 descriptor?? [ 425.495046][ T5944] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0005/input/input15 [ 425.516323][ T5852] Bluetooth: hci2: Malformed LE Event: 0x0d [ 425.598242][ T5944] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 425.916468][ T6187] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 426.573013][ T6187] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 427.174862][ T6187] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 427.189735][ T5944] usb 5-1: USB disconnect, device number 13 [ 427.297956][ T6187] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 427.323904][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057427c00: rx timeout, send abort [ 427.332508][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057427c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 427.544982][ T6187] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 427.555818][ T6187] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 427.567886][ T6187] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 427.844476][ T9393] bridge0: port 3(team0) entered blocking state [ 427.851690][ T9393] bridge0: port 3(team0) entered disabled state [ 427.859067][ T9393] team0: entered allmulticast mode [ 427.864266][ T9393] team_slave_0: entered allmulticast mode [ 427.870131][ T9393] team_slave_1: entered allmulticast mode [ 428.333199][ T9393] team0: entered promiscuous mode [ 428.341936][ T9393] team_slave_0: entered promiscuous mode [ 428.347804][ T9393] team_slave_1: entered promiscuous mode [ 428.354142][ T9393] bridge0: port 3(team0) entered blocking state [ 428.360524][ T9393] bridge0: port 3(team0) entered forwarding state [ 428.516649][ T6187] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 429.224368][ T6187] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 429.238199][ T6187] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 429.263220][ T6187] usb 4-1: USB disconnect, device number 13 [ 429.335824][ T6187] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 429.445965][ T6187] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 429.501991][ T6187] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 429.638931][ T9417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1045'. [ 430.156664][ T6187] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 430.227088][ T6187] keyspan 4-1:0.107: device disconnected [ 431.276469][ T5907] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 431.527890][ T5907] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 431.570952][ T5907] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 431.583287][ T5907] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 431.599762][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.688580][ T9429] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 431.730453][ T5907] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 434.645849][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880577f2800: rx timeout, send abort [ 434.654819][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880577f2800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 434.696629][ T48] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 434.745302][ T9456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1056'. [ 435.052941][ T5944] usb 4-1: USB disconnect, device number 14 [ 435.666023][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 435.948157][ T48] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 435.963734][ T48] usb 1-1: config 0 has no interface number 0 [ 436.040370][ T48] usb 1-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=28.db [ 436.064443][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.111313][ T48] usb 1-1: Product: syz [ 436.115521][ T48] usb 1-1: Manufacturer: syz [ 436.123752][ T9466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.135311][ T48] usb 1-1: SerialNumber: syz [ 436.160589][ T48] usb 1-1: config 0 descriptor?? [ 437.229915][ T9481] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 437.470681][ T48] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 437.546617][ T48] gspca_stv06xx: st6422 sensor detected [ 437.819744][ T48] STV06xx 1-1:0.184: probe with driver STV06xx failed with error -71 [ 437.871463][ T48] usb 1-1: unknown interface protocol 0x96, assuming v1 [ 437.907851][ T48] usb 1-1: cannot find UAC_HEADER [ 437.975456][ T48] snd-usb-audio 1-1:0.184: probe with driver snd-usb-audio failed with error -22 [ 438.003373][ T48] usb 1-1: USB disconnect, device number 11 [ 438.630653][ T9497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1069'. [ 438.836947][ T6234] udevd[6234]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.115705][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880575e4c00: rx timeout, send abort [ 439.124184][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880575e4c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 439.298673][ T9507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1072'. [ 439.518396][ T48] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 439.725702][ T9511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.751032][ T48] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 439.966507][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.973518][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.030219][ T9519] xt_connbytes: Forcing CT accounting to be enabled [ 440.036256][ T48] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.050708][ T9519] Cannot find set identified by id 0 to match [ 440.264948][ T48] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 440.436092][ T48] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.508281][ T9516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 440.510612][ T48] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 440.587971][ T48] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 440.659314][ T48] usb 1-1: Product: syz [ 440.663550][ T48] usb 1-1: Manufacturer: syz [ 440.771527][ T48] cdc_wdm 1-1:1.0: skipping garbage [ 440.816184][ T48] cdc_wdm 1-1:1.0: skipping garbage [ 440.852264][ T48] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 441.096870][ T9506] netlink: 'syz.0.1071': attribute type 1 has an invalid length. [ 441.104666][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1071'. [ 441.980477][ T9] usb 1-1: USB disconnect, device number 12 [ 443.314316][ T9551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1085'. [ 444.491744][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034532000: rx timeout, send abort [ 444.501782][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888034532000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 448.470598][ T9597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1101'. [ 448.479737][ T9597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1101'. [ 450.387716][ T9626] input: syz0 as /devices/virtual/input/input16 [ 451.330617][ T30] audit: type=1326 audit(1751961326.123:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz.1.1115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca58f8e929 code=0x0 [ 454.006060][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 454.389355][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 454.412096][ T9654] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 454.418650][ T9654] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 454.431834][ T9654] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 454.464259][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.494945][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 454.523176][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.561046][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 454.578367][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 454.621763][ T9] usb 1-1: Product: syz [ 454.651894][ T9] usb 1-1: Manufacturer: syz [ 454.706064][ T5907] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 454.707848][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 454.769753][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 454.775080][ T9] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 454.955499][ T5907] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.988097][ T9652] netlink: 'syz.0.1122': attribute type 1 has an invalid length. [ 455.011449][ T5907] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 455.100858][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'. [ 455.265983][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 455.275444][ T5907] usb 5-1: Product: syz [ 455.296042][ T5907] usb 5-1: Manufacturer: syz [ 455.300688][ T5907] usb 5-1: SerialNumber: syz [ 455.409912][ T5907] usb 5-1: config 0 descriptor?? [ 455.536796][ T5907] usb 1-1: USB disconnect, device number 13 [ 456.379591][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 456.446077][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 456.516067][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 457.766419][ T9694] veth1_macvtap: left promiscuous mode [ 457.853746][ T9695] veth0_vlan: entered allmulticast mode [ 457.904615][ T9695] veth0_vlan: left promiscuous mode [ 457.916347][ T9695] veth0_vlan: entered promiscuous mode [ 458.866175][ T9693] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 458.872281][ T9693] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 458.878527][ T9693] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 459.102024][ T24] usb 5-1: USB disconnect, device number 14 [ 461.206272][ T5165] Bluetooth: hci3: command 0x0406 tx timeout [ 461.213584][ T5165] Bluetooth: hci2: command 0x0406 tx timeout [ 461.219693][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 461.239627][ T9719] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 461.456518][ T9719] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 461.509067][ T9719] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 461.544280][ T9731] 9pnet_fd: Insufficient options for proto=fd [ 461.545674][ T9729] vlan2: entered allmulticast mode [ 461.556090][ T9719] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 461.581478][ T9729] bond0: entered allmulticast mode [ 461.591960][ T9719] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 461.629348][ T9719] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 463.416163][ T9751] tipc: Started in network mode [ 463.421080][ T9751] tipc: Node identity 9ad8a040bbe, cluster identity 4711 [ 463.439365][ T9751] tipc: Enabled bearer , priority 0 [ 464.557072][ T24] tipc: Node number set to 557359168 [ 464.664429][ T9751] syzkaller0: entered promiscuous mode [ 464.852608][ T9751] syzkaller0: entered allmulticast mode [ 464.860077][ T9751] tipc: Resetting bearer [ 466.034000][ T9750] tipc: Resetting bearer [ 471.457510][ T9750] tipc: Disabling bearer [ 472.457650][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1170'. [ 472.580935][ T9856] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1166'. [ 473.162751][ T9855] bio_check_eod: 2 callbacks suppressed [ 473.162784][ T9855] syz.0.1170: attempt to access beyond end of device [ 473.162784][ T9855] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 473.343238][ T9855] syz.0.1170: attempt to access beyond end of device [ 473.343238][ T9855] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 473.358001][ T9855] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 474.250012][ T9855] syz.0.1170: attempt to access beyond end of device [ 474.250012][ T9855] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 474.661174][ T9855] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 474.695353][ T9855] syz.0.1170: attempt to access beyond end of device [ 474.695353][ T9855] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 474.718311][ T9855] syz.0.1170: attempt to access beyond end of device [ 474.718311][ T9855] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 474.742320][ T9855] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 474.752604][ T9855] syz.0.1170: attempt to access beyond end of device [ 474.752604][ T9855] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 474.765978][ T9855] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 474.908601][ T9879] 9pnet_fd: Insufficient options for proto=fd [ 474.917615][ T9855] syz.0.1170: attempt to access beyond end of device [ 474.917615][ T9855] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 475.092109][ T9855] syz.0.1170: attempt to access beyond end of device [ 475.092109][ T9855] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 475.114528][ T9855] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 475.154534][ T9855] syz.0.1170: attempt to access beyond end of device [ 475.154534][ T9855] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 475.172341][ T9855] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 475.186910][ T9855] syz.0.1170: attempt to access beyond end of device [ 475.186910][ T9855] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 475.220333][ T9855] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 475.230365][ T9855] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 475.273105][ T9855] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 475.649211][ T9893] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1175'. [ 481.263386][ T9966] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1187'. [ 481.286890][ T9966] tmpfs: Bad value for 'mpol' [ 481.293567][ T9966] CIFS mount error: No usable UNC path provided in device string! [ 481.293567][ T9966] [ 481.303703][ T9966] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 482.947061][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 483.006626][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 483.076686][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 483.085700][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 483.093686][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 483.176371][ T5165] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 483.201011][ T5165] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 483.208567][ T5165] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 483.224611][ T5165] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 483.257205][ T5165] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 483.340733][ T9991] siw: device registration error -23 [ 484.027709][ T5928] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 484.035302][ T5928] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 484.083870][ T5928] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 484.378779][ T5928] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 485.140205][ T6214] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.307670][T10001] fido_id[10001]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 485.373165][ T6214] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.575573][ T6214] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.797274][ T51] Bluetooth: hci2: command tx timeout [ 485.967347][ T24] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 486.174488][ T6214] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.696730][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 486.751334][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.793950][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 486.813374][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.857047][ T24] usb 1-1: config 0 descriptor?? [ 487.993577][T10026] lo speed is unknown, defaulting to 1000 [ 487.999473][T10026] lo speed is unknown, defaulting to 1000 [ 488.006393][T10026] lo speed is unknown, defaulting to 1000 [ 488.028959][T10026] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 488.154919][ T51] Bluetooth: hci2: command tx timeout [ 488.602042][T10026] lo speed is unknown, defaulting to 1000 [ 488.613836][T10026] lo speed is unknown, defaulting to 1000 [ 488.622280][T10026] lo speed is unknown, defaulting to 1000 [ 488.630596][T10026] lo speed is unknown, defaulting to 1000 [ 488.636544][ T5165] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 488.639071][T10026] lo speed is unknown, defaulting to 1000 [ 488.649402][ T5165] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 488.651882][ T5165] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 488.661239][T10026] lo speed is unknown, defaulting to 1000 [ 488.668583][ T5165] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 488.677429][ T5165] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 488.860652][ T9984] chnl_net:caif_netlink_parms(): no params data found [ 488.967031][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 488.973147][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 489.011446][ T24] usb 1-1: USB disconnect, device number 14 [ 489.182221][ T6214] bridge_slave_1: left allmulticast mode [ 489.210616][ T6214] bridge_slave_1: left promiscuous mode [ 489.241071][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.273863][ T6214] bridge_slave_0: left allmulticast mode [ 489.285995][ T6214] bridge_slave_0: left promiscuous mode [ 489.291787][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.196121][ T5165] Bluetooth: hci2: command tx timeout [ 490.776833][ T5165] Bluetooth: hci1: command tx timeout [ 491.049617][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1211'. [ 491.674951][T10049] netlink: 'syz.0.1212': attribute type 4 has an invalid length. [ 492.278921][ T5165] Bluetooth: hci2: command tx timeout [ 492.295598][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 492.305790][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 492.324976][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 492.404586][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 492.506557][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 492.833487][T10063] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN PTI [ 492.845431][T10063] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 492.853866][T10063] CPU: 0 UID: 0 PID: 10063 Comm: syz.4.1215 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 492.865410][T10063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 492.875471][T10063] RIP: 0010:h5_recv+0x146/0x910 [ 492.880333][T10063] Code: 18 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 6c c7 bd f9 4d 8b 65 00 31 ff 4c 89 [ 492.899944][T10063] RSP: 0018:ffffc9000b667c40 EFLAGS: 00010202 [ 492.906017][T10063] RAX: dffffc0000000000 RBX: 00000000000002e8 RCX: 000000000000005f [ 492.913991][T10063] RDX: 000000000000005e RSI: 0000000000000001 RDI: 0000000000000000 [ 492.921962][T10063] RBP: ffffc9000b667d60 R08: ffff88802404781f R09: 1ffff11004808f03 [ 492.929947][T10063] R10: dffffc0000000000 R11: ffffffff886684b0 R12: 0000000000000001 [ 492.937921][T10063] R13: 00000000000002f8 R14: ffff888024047810 R15: ffffc9000b667e00 [ 492.945904][T10063] FS: 00007f54a09d16c0(0000) GS:ffff888125be7000(0000) knlGS:0000000000000000 [ 492.954836][T10063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.961417][T10063] CR2: 0000001b31118ff8 CR3: 0000000031146000 CR4: 00000000003526f0 [ 492.969398][T10063] Call Trace: [ 492.972693][T10063] [ 492.975629][T10063] ? __pfx_h5_recv+0x10/0x10 [ 492.980228][T10063] ? rcu_read_lock_any_held+0xb3/0x120 [ 492.985699][T10063] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 492.991592][T10063] ? tty_audit_push+0x7c/0x250 [ 492.996364][T10063] hci_uart_tty_receive+0x191/0x220 [ 493.001573][T10063] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 493.007302][T10063] tiocsti+0x239/0x2c0 [ 493.011378][T10063] ? __pfx_tiocsti+0x10/0x10 [ 493.015977][T10063] ? __fget_files+0x2a/0x420 [ 493.020573][T10063] ? __fget_files+0x3a0/0x420 [ 493.025284][T10063] ? __fget_files+0x2a/0x420 [ 493.029877][T10063] tty_ioctl+0x626/0xde0 [ 493.034127][T10063] ? __pfx_tty_ioctl+0x10/0x10 [ 493.038898][T10063] __se_sys_ioctl+0xf9/0x170 [ 493.043491][T10063] do_syscall_64+0xfa/0x3b0 [ 493.048006][T10063] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.053207][T10063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.059281][T10063] ? clear_bhb_loop+0x60/0xb0 [ 493.063969][T10063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.069862][T10063] RIP: 0033:0x7f54a338e929 [ 493.074280][T10063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.093891][T10063] RSP: 002b:00007f54a09d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.102316][T10063] RAX: ffffffffffffffda RBX: 00007f54a35b6320 RCX: 00007f54a338e929 [ 493.110288][T10063] RDX: 0000200000000040 RSI: 0000000000005412 RDI: 0000000000000007 [ 493.118273][T10063] RBP: 00007f54a3410b39 R08: 0000000000000000 R09: 0000000000000000 [ 493.126250][T10063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.134217][T10063] R13: 0000000000000001 R14: 00007f54a35b6320 R15: 00007ffd44d933d8 [ 493.142202][T10063] [ 493.145256][T10063] Modules linked in: [ 493.150798][T10063] ---[ end trace 0000000000000000 ]--- [ 493.157076][T10063] RIP: 0010:h5_recv+0x146/0x910 [ 493.161952][T10063] Code: 18 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 6c c7 bd f9 4d 8b 65 00 31 ff 4c 89 [ 493.181598][T10063] RSP: 0018:ffffc9000b667c40 EFLAGS: 00010202 [ 493.187695][T10063] RAX: dffffc0000000000 RBX: 00000000000002e8 RCX: 000000000000005f [ 493.195673][T10063] RDX: 000000000000005e RSI: 0000000000000001 RDI: 0000000000000000 [ 493.204107][T10063] RBP: ffffc9000b667d60 R08: ffff88802404781f R09: 1ffff11004808f03 [ 493.212124][T10063] R10: dffffc0000000000 R11: ffffffff886684b0 R12: 0000000000000001 [ 493.220113][T10063] R13: 00000000000002f8 R14: ffff888024047810 R15: ffffc9000b667e00 [ 493.228107][T10063] FS: 00007f54a09d16c0(0000) GS:ffff888125be7000(0000) knlGS:0000000000000000 [ 493.237058][T10063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 493.243645][T10063] CR2: 0000001b31118ff8 CR3: 0000000031146000 CR4: 00000000003526f0 [ 493.251722][T10063] Kernel panic - not syncing: Fatal exception [ 493.258123][T10063] Kernel Offset: disabled [ 493.262446][T10063] Rebooting in 86400 seconds..